David Harley describes a support scam that uses a slightly different twist, misrepresenting the output from Windows Task Manager.

As well as misusing Event Viewer, ASSOC or a system CLSID, scammers hijack “prefetch” and “inf” to con victims into believing they have malware.