There is another one also — maybe even worse. The trojan, Kardphisher, renders a popup to the user, saying their software has been activated by another person. It then says that, in order to maintain activation, they must buy it. It asks not only for credit card information, but the PIN and 3-digit security number as well.
The popup says it comes from Microsoft, but it does not. The sender wants your credit card info.
BUMP!