04-03-2016 , 01:41 PM
If a user clicks on the Activate button it will pretend to try and activate Windows and then give an alert that states "Windows Helper is unable To Activate Windows Contact Support To Activate.". This is displayed purely to trick you into calling the 888-479-3649 number so that they can use scare tactics to sell you a support license. The support link in the screen will also open a browser window to www.supportforme.com, which is used by the remote support company to remotely control your computer via GoToAssist.
When Book Source is installed and executed, it will also execute a program called Box.exe on a timer. The Box.exe program then displays the fake Windows Activation Alert. Unfortunately, the timer will spawn the box.exe process over and over, which can lead to hundreds of these alerts being displayed on your screen as shown below.
Book Source is a Trojan from the Rogue.Tech-Support-Scam family that pretends to be a tool that you can use to download free ebooks. In reality, this program does nothing but display a fake Windows Activation screen on your desktop in order to scare you into calling the listed 1-888-479-3649 remote tech support number. This fake "Activate Windows Now" screen pretend to be an alert from Windows that states "You must activate Windows within 1 day to continue using all Windows features". In reality, there is nothing wrong with Windows and you just have an infection displaying these alerts.
READ THE FULL GUIDE HERE