Over 1 million tech questions and answers.

Wierdest malware ever - windows password changed by evil fake phone tech support

Q: Wierdest malware ever - windows password changed by evil fake phone tech support

I am helping a friend with a nasty infection.  He received the phone calls from the scam MS support people claiming he had viruses.  Eventually he gave in and let them have control of his computer.  He cut them off before paying but not before they had control.  I took a look at his computer later and found no evidence that there was any lingering problem on his computer, so I assumed that it was just a Teamviewer type tool that they had him download that gave them access.  After removing and running a few malware removal/scanning tools, I pronounced him clean.
 
An hour later he called and said his computer spontaneously logged him out and put a password on his user profile.  the password hint is "Your computer is infected, call this phone number to unlock".  I went back to his place and bypassed the (very real) Windows password lock.  Scanned again, ran TDSSKiller and a few other malware removers again, but suspected that he MUST have done something because this was a clean computer.
 
Didn't have time to do anything else in the past couple days but went back over yesterday.  Spent an hour on the phone with the number that the scammer gave us, trying to figure out if they had a secret back door into the computer.  They did not, and kept trying to get me to install various teamviewer clones to which I gave them the wrong ID once installed, which totally threw them for a loop.  I never actually did allow them into the computer though, since I felt confident that they didnt have some secret back door that didn't require the user to give them access. I removed some startup items that were causing the pop-ups, but again didn't find any remote access tool.
 
One hour later, the user again called me, saying his computer had been locked out.
 
I picked up the computer and took it home with me to reformat, ready to admit defeat.  But I still just have to know what's causing this to recur, so here I am.  DDS log below.
 
EDIT: Forgot to mention that before the last reinfection, when I was at the house for 2 hours, I installed Kaspersky IS 2014, figuring it was worth upgrading security with the best, at least as far as PCworld and PCMag thought.
 
--
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.16521  BrowserJavaVersion: 10.51.2
Run by dfan at 21:19:24 on 2014-04-05
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.7935.4783 [GMT -4:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
SP: Kaspersky Internet Security *Enabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security *Enabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Lytro\lytroservice.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\xcopy.exe
C:\Users\dfan\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
C:\Windows\system32\msfeedssync.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://google.com/
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - 
BHO: Content Blocker Plugin: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
BHO: Virtual Keyboard Plugin: {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Safe Money Plugin: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Logitech SetPoint: {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
BHO: URL Advisor Plugin: {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
uRun: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [HP Officejet Pro 8600 (NET)] "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN2BGB4HD905KD:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
mRun: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
mRun: [HP Remote Solution] C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [DNS7reminder] "C:\Program Files (x86)\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking11\Ereg.ini"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
mRun: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:255
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: {0C4CC089-D306-440D-9772-464E226F6539} - {0BA14598-4178-4CE5-B1F1-B5C6408A3F2E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
DPF: {2AB1C516-6654-4D3A-B3D6-2185BBCEB409} - hxxps://remote.abtassoc.com/+CSCOL+/csvrloader32.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://wormhole.brandeis.edu/dana-cached/sc/JuniperSetupClient.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{8550AEEA-B3CE-4A21-986C-AEE9E5FBA1B5} : DHCPNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - 
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
x64-BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - 
x64-BHO: Content Blocker Plugin: {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
x64-BHO: Virtual Keyboard Plugin: {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
x64-BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Safe Money Plugin: {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-BHO: Logitech SetPoint: {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: URL Advisor Plugin: {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
x64-Run: [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
x64-Run: [Logitech Download Assistant] C:\Windows\System32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
x64-IE: {0C4CC089-D306-440D-9772-464E226F6539} - {0BA14598-4178-4CE5-B1F1-B5C6408A3F2E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - 
x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\dfan\AppData\Roaming\Mozilla\Firefox\Profiles\wlik8jey.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2740822&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Inbox Search
FF - prefs.js: browser.startup.homepage - hxxps://blu173.mail.live.com/
FF - prefs.js: keyword.URL - hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=783003F8-6BA4-43D2-AB4C-C9B9A34335D9&n=77fd5915&ind=2013092117&p2=^XN^xdm002^YYA^us&si=CLyvnJax3bkCFY6Y4Aod-kEASQ&searchfor=
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\npsitesafety.dll
FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\dfan\AppData\Local\Citrix\Plugins\104\npappdetector.dll
FF - plugin: C:\Users\dfan\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll
FF - plugin: C:\Users\dfan\AppData\Local\HuluDesktop\instances\0.9.13.1\nphdplg.dll
FF - plugin: C:\Users\dfan\AppData\Roaming\Mozilla\Firefox\Profiles\wlik8jey.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}\plugins\npGarmin.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
.
============= SERVICES / DRIVERS ===============
.
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-12-14 46368]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\System32\drivers\klim6.sys [2014-3-17 29792]
R1 klpd;klpd;C:\Windows\System32\drivers\klpd.sys [2013-4-12 15456]
R1 kltdi;kltdi;C:\Windows\System32\drivers\kltdi.sys [2013-5-14 55904]
R1 kneps;kneps;C:\Windows\System32\drivers\kneps.sys [2014-3-17 178272]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-7 125440]
R2 AVP;Kaspersky Anti-Virus Service;C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [2014-3-17 214512]
R2 DragonSvc;Dragon Service;C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe [2011-6-5 296808]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2010-6-29 72216]
R2 LytroService;Lytro Desktop Application Service;C:\Program Files\Lytro\LytroService.exe [2013-10-16 177248]
R2 TeamViewer9;TeamViewer 9;C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-2-11 4972864]
R3 klkbdflt;Kaspersky Lab KLKBDFLT;C:\Windows\System32\drivers\klkbdflt.sys [2014-3-17 29280]
R3 klmouflt;Kaspersky Lab KLMOUFLT;C:\Windows\System32\drivers\klmouflt.sys [2014-3-17 29280]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\System32\drivers\LEqdUsb.sys [2013-5-23 77592]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\System32\drivers\LHidEqd.sys [2013-5-23 13080]
S2 BringMeSports_1cService;BringMeSportsService;C:\PROGRA~2\BRINGM~2\bar\2.bin\1cbarsvc.exe --> C:\PROGRA~2\BRINGM~2\bar\2.bin\1cbarsvc.exe [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 LMIGuardianSvc;LMIGuardianSvc;"C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe" --> C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [?]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-3-12 111616]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-19 19456]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-19 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-6-17 1255736]
S4 klflt;klflt;C:\Windows\System32\drivers\klflt.sys [2014-4-4 115296]
S4 vToolbarUpdater17.3.0;vToolbarUpdater17.3.0;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [2014-1-8 1771544]
.
=============== File Associations ===============
.
FileExt: .txt: textfile="C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE" "%1" [UserChoice]
.
=============== Created Last 30 ================
.
2014-04-05 00:30:41 76232 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{728C14A4-4810-4136-9005-853AD75D841F}\offreg.dll
2014-04-04 18:17:18 110176 ----a-w- C:\Windows\System32\klfphc.dll
2014-04-04 18:16:43 -------- d-----w- C:\Windows\ELAMBKUP
2014-04-04 18:16:40 -------- d-----w- C:\ProgramData\Kaspersky Lab
2014-04-04 18:16:40 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab
2014-04-04 18:16:33 115296 ----a-w- C:\Windows\System32\drivers\klflt.sys
2014-04-04 18:09:53 -------- d-sh--w- C:\$RECYCLE.BIN
2014-04-04 17:49:27 -------- d-----w- C:\ProgramData\Sophos
2014-04-04 17:49:00 73728 ----a-r- C:\Users\dfan\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe1_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2014-04-04 17:49:00 73728 ----a-r- C:\Users\dfan\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\SVRTgui.exe_810EDD9E2F0A4E2BACF86673C38D9F48.exe
2014-04-04 17:49:00 73728 ----a-r- C:\Users\dfan\AppData\Roaming\Microsoft\Installer\{B829E117-D072-41EA-9606-9826A38D34C1}\ARPPRODUCTICON.exe
2014-04-04 17:48:48 -------- d-----w- C:\Program Files (x86)\Sophos
2014-04-04 17:47:50 -------- d-----w- C:\Users\dfan\Pavark
2014-04-04 17:18:08 -------- d-----w- C:\Users\dfan\AppData\Local\Alpemix
2014-04-04 16:37:43 -------- d-----w- C:\Windows\pss
2014-04-04 16:23:56 -------- d-----w- C:\Program Files (x86)\EaseUS
2014-03-26 14:44:07 98816 ----a-w- C:\Windows\sed.exe
2014-03-26 14:44:07 256000 ----a-w- C:\Windows\PEV.exe
2014-03-26 14:44:07 208896 ----a-w- C:\Windows\MBR.exe
2014-03-23 23:29:55 -------- d-----w- C:\Program Files\iPod
2014-03-23 23:29:54 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-23 23:29:54 -------- d-----w- C:\Program Files\iTunes
2014-03-23 23:29:54 -------- d-----w- C:\Program Files (x86)\iTunes
2014-03-23 19:03:16 -------- d-----w- C:\Users\dfan\AppData\Local\{6F1B6529-EAAB-41DD-A626-56705120F7A2}
2014-03-17 19:48:02 458336 ----a-w- C:\Windows\System32\drivers\kl1.sys
2014-03-17 19:48:02 29792 ----a-w- C:\Windows\System32\drivers\klim6.sys
2014-03-17 19:48:02 29280 ----a-w- C:\Windows\System32\drivers\klmouflt.sys
2014-03-17 19:48:02 29280 ----a-w- C:\Windows\System32\drivers\klkbdflt.sys
2014-03-17 19:48:02 178272 ----a-w- C:\Windows\System32\drivers\kneps.sys
2014-03-15 16:57:05 -------- d-----w- C:\Users\dfan\AppData\Local\{CFB3127B-A32A-4FCC-BAC1-729754DA637E}
2014-03-13 16:27:52 3156480 ----a-w- C:\Windows\System32\win32k.sys
2014-03-13 16:27:50 228864 ----a-w- C:\Windows\System32\wwansvc.dll
2014-03-13 16:27:47 484864 ----a-w- C:\Windows\System32\wer.dll
2014-03-13 16:27:47 381440 ----a-w- C:\Windows\SysWow64\wer.dll
2014-03-12 12:52:47 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin5.dll
2014-03-12 12:52:47 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin4.dll
2014-03-12 12:52:47 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin3.dll
2014-03-12 12:52:47 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin2.dll
2014-03-12 12:52:47 159744 ----a-w- C:\Program Files\Internet Explorer\Plugins\npqtplugin.dll
2014-03-11 20:07:42 4550656 ----a-w- C:\Windows\SysWow64\GPhotos.scr
.
==================== Find3M  ====================
.
2014-03-12 02:47:14 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-12 02:47:14 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2014-03-01 05:17:02 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-03-01 05:16:26 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-03-01 04:52:55 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-03-01 04:51:59 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-03-01 04:33:52 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-03-01 04:33:34 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-03-01 04:32:59 708608 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-03-01 04:23:49 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-01 04:11:20 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-03-01 03:54:33 5768704 ----a-w- C:\Windows\System32\jscript9.dll
2014-03-01 03:52:43 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-03-01 03:51:53 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-03-01 03:38:26 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-03-01 03:37:35 553472 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-03-01 03:35:11 2041856 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-03-01 03:14:15 4244480 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-03-01 03:10:28 2334208 ----a-w- C:\Windows\System32\wininet.dll
2014-03-01 03:00:08 1964032 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-03-01 02:32:16 1820160 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-02-11 18:18:54 108968 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2014-02-11 18:17:43 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2014-02-04 02:32:22 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll
2014-02-04 02:32:12 624128 ----a-w- C:\Windows\System32\qedit.dll
2014-02-04 02:04:22 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04:11 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
2014-01-28 16:34:11 92488 ----a-w- C:\Windows\System32\LMIinit.dll
2014-01-28 16:34:11 35656 ----a-w- C:\Windows\System32\LMIport.dll
2014-01-28 16:34:11 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll
2014-01-19 07:33:29 270496 ------w- C:\Windows\System32\MpSigStub.exe
2014-01-17 20:24:12 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2014-01-17 20:24:12 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2014-01-16 00:42:40 608032 ----a-w- C:\SecurityScanner.dll
.
============= FINISH: 21:21:12.73 ===============

RELEVANCY SCORE 200
Preferred Solution: Wierdest malware ever - windows password changed by evil fake phone tech support

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Wierdest malware ever - windows password changed by evil fake phone tech support

Well, I ran out of patience  I left the computer offline for 24 hours and the infection did not return.  I then connected it for another 24 and by the time I checked in, it had been locked down again.  So it'll be a mystery I'm afraid.

Read other 3 answers
RELEVANCY SCORE 100

In my E-Mail this morning:
Microsoft: Beware this fake Windows BSOD from tech support scammers' malware | ZDNet

A:Beware this fake Windows BSOD from tech support scammers' malware

Microsoft has sounded the alarm over a fake installer for its Security Essentials, which attempts to trick victims into contacting bogus help centers.

Tech-support scammers have stepped up their technical game, prompting a "severe" warning from Microsoft over new Windows malware that mimics Microsoft's free Security Essentials antivirus, and then displays a fake blue screen of death, or BSoD, with an error message and a suggestion to call a 1800 number that is not a Microsoft support center.








"Real error messages from Microsoft do not include support contact details," Microsoft said on its Malware Protection Center blog, warning of the new threat. It also never asks for payment for delivering tech support.



Microsoft: Beware this fake Windows BSOD from tech support scammers' malware | ZDNet

Read other 2 answers
RELEVANCY SCORE 85.2

Dial now 1-800-723-4210. We are certified technician from microsoft you can call us for any query related to microsoft product. 1-800-723-4210We are here to help you Call us for outlook and Hotmail support Microsoft Outlook 365 Customer Service Phone Number 1 800 723 4210 United States Super Support 1800.723.4210 Microsoft Outlook 365 Customer Service Phone Number 1 800-723-4210 United States Microsoft tech support phone number Microsoft office tech support phone number1-800-723-4210 windows tech support phone number Microsoft tech support phone number usa Microsoft windows tech support phone number tech support phone number1-800-723-4210 Microsoft office 365 tech support phone number1-800-723-4210 Microsoft tech support phone number for windows 8 Microsoft windows 7 tech support phone number Microsoft 365 tech support phone number1-800-723-4210 Microsoft word tech support phone number Microsoft office tech support phone numbers contact Microsoft tech support phone number1-800-723-4210 Microsoft tech support phone numbers 1-800-723-4210Microsoft tech support number Microsoft windows 8 tech support phone number Microsoft phone number tech support phone number for Microsoft tech support windows tech support number windows vista /7/8 tech support phone number1-800-723-4210 acer tech support phone number skype tech support phone number office 365 tech support phone number tech support number1-800-723-4210 tech support Microsoft phone number office 365 tech support phone number ... Read more

Read other answers
RELEVANCY SCORE 85.2

Dial now 1-800-723-4210. We are certified technician from microsoft you can call us for any query related to microsoft product. 1-800-723-4210We are here to help you Call us for outlook and Hotmail support Microsoft Outlook 365 Customer Service Phone Number 1 800 723 4210 United States Super Support 1800.723.4210 Microsoft Outlook 365 Customer Service Phone Number 1 800-723-4210 United States Microsoft tech support phone number Microsoft office tech support phone number1-800-723-4210 windows tech support phone number Microsoft tech support phone number usa Microsoft windows tech support phone number tech support phone number1-800-723-4210 Microsoft office 365 tech support phone number1-800-723-4210 Microsoft tech support phone number for windows 8 Microsoft windows 7 tech support phone number Microsoft 365 tech support phone number1-800-723-4210 Microsoft word tech support phone number Microsoft office tech support phone numbers contact Microsoft tech support phone number1-800-723-4210 Microsoft tech support phone numbers 1-800-723-4210Microsoft tech support number Microsoft windows 8 tech support phone number Microsoft phone number tech support phone number for Microsoft tech support windows tech support number windows vista /7/8 tech support phone number1-800-723-4210 acer tech support phone number skype tech support phone number office 365 tech support phone number tech support number1-800-723-4210 tech support Microsoft phone number office 365 tech support phone number ... Read more

Read other answers
RELEVANCY SCORE 83.2

I keep receiving calls from fake MICROSOFT Tech support with various telephone numbers. Strange, they do not show up in my phone on line logs. They wanted me to go to FASTSUPPORT\763721586 ( do not use  these numbers). It is a company  called FASTSUPPORT.com. they also give you a complaint department where you can enter the number that you feel is causing you problems, the number of the LOGMEINRESCUE type remote access code. of course it is clear to them that you are suspicious and they will get rid of the  phone operator who didn't succeed. So do not bother to leave any complaint.

A:FAKE MICROSOFT TECH SUPPORT IS COMPANY CALLED FAST SUPPORT

Appears you are dealing with a well known scam.Microsoft does not make unsolicited phone calls, display pop-up alerts in your browser to call a support number or send unsolicited email messages to request personal or financial information or to fix your computer.Avoid scams that use the Microsoft name fraudulentlyIs that call from Microsoft a scam?Tell Your Relatives: No, Microsoft Won’t Call You About Your ComputerMicrosoft calling? Mind the tech support scammer!Tech Support Scamming through unsolicited phone calls, browser pop-ups and emails from "so-called Support Techs" advising "your computer is infected with malware", “All Your Files Are Encrypted" and other fake "alert messages" has become an increasing common scam tactic over the past several years. The scams may involve web pages with screenshots of fake Microsoft (Windows) Support messages, fake reports of suspicious activity, fake warnings of malware found on your computer, fake ransomware and fake BSODs all of which include a tech support phone number to call in order to fix the problem. If you call the phone number (or they called you), scammers will talk their victims into allowing them remote control access of the computer so they can install a Remote Access Trojan in order to steal passwords and other sensitive personal information which could then be used to access bank accounts or steal a person's identity.These are a few examples.Call Windows Help Desk Immediately Tech Support Scam Fake Your com... Read more

Read other 12 answers
RELEVANCY SCORE 80

Received fraudulent phone call from 18883113841 claiming to be a dell tech support who later started verbally abusing and cursing. Seems like info has been stolen from Dell. Dell is not taking responsibility and leaving it's customer vulnerable that undermines the trust on the entire Dell company. Who would like to buy from Dell knowing that privacy will be compromised? On behalf of all affected customers, I request Dell to provide the affected customer necessary safeguards to help rebuild the customers trust on Dell by acknowledging their sufferings. Thank you very much.

Read other answers
RELEVANCY SCORE 78.8

I don't know how many people have had an issue with the phone call from tech support and they want access to your computer and then they essentially lock it and you need a password to get access again and the only way to get the password is to pay them.
A friend called tonight and she was taken in by the scam. Her immediate concern was to get her pictures and other personal documents off of the computer. I have no idea what these people do or if it is just a matter of getting the password and once input everything is okay?
Anyway I took her drive out and connected it to my computer and copied off all of her personal data to a flash drive. I ran Malwarebytes and selected only drive E, which is her drive, but the only problems it showed were on Drive C. I have no idea how it detected issues on Drive C as I had unselected Drive C and only selected Drive E for a scan.
So the first question is, is there a way around the password and to be able to remove it without reinstalling the OS. or recovering from a set of recovery disks?
Second is there a way to access the control panel on her drive with it still being connected to my computer to make a recovery disk for her drive, as like most people she didn't bother making a recovery disk set so if it has to be reformatted and the OS reinstalled she has no disks? It has a partition on the drive which I assume may the recovery information but the only visible folders are system volume information and recycle bin and I do have the appropri... Read more

A:Tech Support Phone Scam

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/547265 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 8 answers
RELEVANCY SCORE 78.8

Microsoft Warns Of Tech Support Phone Scam
I know this has been circulating for a while but my mother received a phone call while i was there .
I took the phone away from her and talked with the man to find out what was going on .

He would not take no for an answer
even when i told him that there was no computer at this address he insisted on retelling me he was from microsoft tech support and that the ip had been flashing red at their end and that it was a virus problem .
Even after i had repeated that there was no computer to get infected he said when i read my emails all lights were flashing at their end

Now if this post stops one pc user from falling for this scam then i will be happy
 

A:Tech support phone scam

Read other 6 answers
RELEVANCY SCORE 78.8

I don't know how many people have had an issue with the phone call from tech support and they want access to your computer and then they essentially lock it and you need a password to get access again and the only way to get the password is to pay them.

A friend called tonight and she was taken in by the scam. Her immediate concern was to get her pictures and other personal documents off of the computer. I have no idea what these people do or if it is just a matter of getting the password and once input everything is okay?

Anyway I took her drive out and connected it to my computer and copied off all of her personal data to a flash drive. I ran Malwarebytes and selected only drive E, which is her drive, but the only problems it showed were on Drive C. I have no idea how it detected issues on Drive C as I had unselected Drive C and only selected Drive E for a scan.

So the first question is, is there a way around the password and to be able to remove it without reinstalling the OS. or recovering from a set of recovery disks?

Second is there a way to access the control panel on her drive with it still being connected to my computer to make a recovery disk for her drive, as like most people she didn't bother making a recovery disk set so if it has to be reformatted and the OS reinstalled she has no disks? It has a partition on the drive which I assume may the recovery information but the only visible folders are system volume information and recycle bin and I do have the appr... Read more

A:Tech Support Phone Scam

you are not going to find a way to make the recovery's on a non working computer. the best fix is a reinstall,its likely that here recovery partition is still good ,you just need to save what you can, and run the recovery, check ASUS site for info on what key to hit on bootup to activate the recovery .
It sure is a small world when we are so gullible to think that Microsoft or someone that cares , is going to call us/little old me, and tell me my computer is sick and offer to fix it ,good luck

like the calls telling me they can offer me better interest rates on my credit cards ,and I don't even have a credit card

Read other 46 answers
RELEVANCY SCORE 78.8

I don't know how many people have had an issue with the phone call from tech support and they want access to your computer and then they essentially lock it and you need a password to get access again and the only way to get the password is to pay them.
A friend called tonight and she was taken in by the scam. Her immediate concern was to get her pictures and other personal documents off of the computer. I have no idea what these people do or if it is just a matter of getting the password and once input everything is okay?
Anyway I took her drive out and connected it to my computer and copied off all of her personal data to a flash drive. I ran Malwarebytes and selected only drive E, which is her drive, but the only problems it showed were on Drive C. I have no idea how it detected issues on Drive C as I had unselected Drive C and only selected Drive E for a scan.
So the first question is, is there a way around the password and to be able to remove it without reinstalling the OS. or recovering from a set of recovery disks?
Second is there a way to access the control panel on her drive with it still being connected to my computer to make a recovery disk for her drive, as like most people she didn't bother making a recovery disk set so if it has to be reformatted and the OS reinstalled she has no disks? It has a partition on the drive which I assume may the recovery information but the only visible folders are system volume information and recycle bin and I do have the appropri... Read more

A:Tech Support Phone Scam

You'll probably need to look for your self because getting around passwords is frowned around here, I think I can guide you to a safer place to look, rather than searching questionable places on the net and ending up worse off than you are, but the rest is up to you
http://www.ultimatebootcd.com/

Read other 5 answers
RELEVANCY SCORE 78.4

I gave my older computer to my aunt and uncle (they are in their 80's). I'm not certain of all the details, but this is what I know. They were having some simple issues and needed help. I wasn't available so they got help from an unknown outside party. This person locked up their computer. The operating system has been changed and no known passwords work. I replaced the first computer with another, not realizing how bad the problem was, and they have remotely done the same to it as well. The fake tech person got into their bank account and stole several hundred dollars of their very limited income and they had to change their bank account info. Can I do anything to fix the two computers and what do I need to do to stop this guy from doing this again? How do I keep him out of family and friends smartphones and tablets?
 

Read other answers
RELEVANCY SCORE 78

I sent my desktop in last week for repairs (after having only had it for 48 hours!) and got a voicemail today from a tech asking for more information. The number he gave me to call back was 1-800-474-6836. After talking to 4 people I found out they don't have any way for me to get in touch with the tech.  Was hoping I might be able to get a phone number to call so I can return the call and answer the questions he had. Best,Biff













Solved!

View Solution.

A:Phone number for Jeffersonville, IN Tech support?

@Biffson

 

I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post personal information (serial numbers and case details).

If you are unfamiliar with how the Forum's private message capability works, you can learn about that here.

Thank you for visiting the HP Support Forum.

Read other 2 answers
RELEVANCY SCORE 78

CANADA/USA AVG PHONE NUMBER @@!!!!1800 723 4210 AVG

AVG Antivirus Customer Service 1-800-723-4210 Technical Support

1-800-723-4210,AVG Phone Contact Number, AVG Customer Support

AVG Antivirus Technical Support Number 1-800-723-4210 Toll-free

1-800-723-4210 avg tech support tollfree phone number
Avg technical support phone number 1-800-723-4210 avg customer support phone number  1-800-723-4210 avg antivirus support phone number 1-800-723-4210  Avg technical support phone number avg customer support phone number avg antivirus support phone number Avg technical support phone number avg customer support phone number 1-800-723-4210  avg antivirus support phone number Avg technical support phone number avg customer support phone number avg antivirus support phone number Avg technical support phone number avg customer support phone number avg antivirus support phone number 1-800-723-4210  Avg technical support phone number avg customer support phone number avg antivirus support phone number Avg technical support phone number avg customer support phone number avg antivirus support phone number Avg technical support phone number avg customer support phone number 1-800-723-4210  avg antivirus support phone number Avg technical support phone number avg customer support phone number avg antivirus support phone number 1-800-723-4210  Avg technical support phone number avg customer support phone number avg antivirus support phone number Avg technical ... Read more

Read other answers
RELEVANCY SCORE 78

This is a scam company which has charged my credit card account, but now I wish to cancel my account, and I cannot find their phone number? Ant help would be very much appreciated.
 

Read other answers
RELEVANCY SCORE 77.2

AVG Antivirus+(1-800-723-4210)+ Help Desk Customer service number 1-800-723-4210for online tech support Help Desk And Care on Toll free phone number Contributors: Poojajaanu Date created: 2016-09-06 05:39 PM | Last Updated: 2016-09-06 05:39 PM Category: Project Description: AVG security USA#[email protected] customer service phone number, AVG antivirus customer service phone number AVG +∑™+1-800-723-4210AVG Tech Support Phone number, AVG customer support phone number AVG customer care phone number AVG USA((((=1-800-723-4210))))) AVG Antivirus tech Support Phone Number, AVG Antivirus Technical Support Phone Number, AVG Antivirus Customer Support phone Number AVG Antivirus help desk number, AVG telephone number AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG phone number #$#1-800-723-4210##$AVG Antivirus phone number AVG security phone number AVG phone number #$#1-800-723-4210##$AVG support phone number AVG symantec phone number AVG phone number customer service #$#1-800-723-4210##$AVG customer service phone number AVG tech support phone number AVG technical support phone number1-800-723-4210 AVG phone numbers AVG help phone number AVG Antivirus support phone number #$#1-800-723-4210##$AVG phone support AVG contact phon... Read more

Read other answers
RELEVANCY SCORE 77.2

Almost every single customer of mine has had a few of these calls, some even while I was with them. I was wondering, has anyone created a printable paper that one could give to a person to warn them about these scams? Or should I create one of my own?
 
 

A:Infographic/handout for tech support phone scams?

Thank you for asking rsakuma -
 
We host some topics like : beware of Phone Scamming.

Cybercriminals don't just send fraudulent email messages and set up fake websites. They might also call you on the telephone and claim to be from Microsoft. They might offer to help solve your computer problems or sell you a software license...Neither Microsoft nor our partners make unsolicited phone calls (also known as cold calls) to charge you for computer security or software fixes...Do not trust unsolicited calls. Do not provide any personal information.

 
Avoid tech support phone scams: What you need to know
Don’t fall for phony phone tech support
Avoid scams that use the Microsoft name fraudulently
 
I hope that some of these are on the topic that you have requested .........
 
Regards -

Read other 4 answers
RELEVANCY SCORE 77.2

1-800-723-4210 avg ANTIVIRUS Error support phone number1-800-723-4210 avg ANTIVIRUS Error support phone number1-800-723-4210 avg ANTIVIRUS Error support phone numberOffical AVG antivirus tech Support number 1.800.723.4210Customer Service AVG antivirus tech support phone number AVG Symantec phone number

Offical AVG antivirus tech Support number 1.800.723.4210Customer Service AVG antivirus tech support phone number AVG Symantec phone number
AVG toll free customer care number 1.800.723.4210
AVG toll free customer care number 1.800.723.4210
AVG toll free customer care number 1.800.723.4210>>>>>
AVG technical support phone number ((1.800.723.4210))
AVG technical support number 1.800.723.4210
AVG technical support number 1.800.723.4210
symantec technical support number 1.800.723.4210

AVG security center phone number 1.800.723.4210

AVG support telephone number 1.800.723.4210

AVG 360 technical support phone number 1.800.723.4210

symantec technical support phone number 1.800.723.4210

AVG tech support phone number 1.800.723.4210

apple technical support phone number 1.800.723.4210 usa

microsoft technical support phone number 1.800.723.4210 usa

gmail technical support phone number 1.800.723.4210 usa

kaspersky technical support phone number 1.800.723.4210 usa

lenovo technical support phone number-1855-990-5999

epson technical support phone number 1.800.723.4210 usa

AVG technical support phone number 1.800.723.4210

AVG AntiVirus Customer Service Phone Number #1... Read more

Read other answers
RELEVANCY SCORE 77.2

AVG Antivirus+(1-800-723-4210)+ Help Desk Customer service number 1-800-723-4210for online tech support Help Desk And Care on Toll free phone number Contributors: Poojajaanu Date created: 2016-09-06 05:39 PM | Last Updated: 2016-09-06 05:39 PM Category: Project Description: AVG security USA#[email protected] customer service phone number, AVG antivirus customer service phone number AVG +∑™+1-800-723-4210AVG Tech Support Phone number, AVG customer support phone number AVG customer care phone number AVG USA((((=1-800-723-4210))))) AVG Antivirus tech Support Phone Number, AVG Antivirus Technical Support Phone Number, AVG Antivirus Customer Support phone Number AVG Antivirus help desk number, AVG telephone number AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG phone number #$#1-800-723-4210##$AVG Antivirus phone number AVG security phone number AVG phone number #$#1-800-723-4210##$AVG support phone number AVG symantec phone number AVG phone number customer service #$#1-800-723-4210##$AVG customer service phone number AVG tech support phone number AVG technical support phone number1-800-723-4210 AVG phone numbers AVG help phone number AVG Antivirus support phone number #$#1-800-723-4210##$AVG phone support AVG contact phon... Read more

Read other answers
RELEVANCY SCORE 76.8

So I stumbled upon these guys.

http://www.digitaltoast.co.uk/supportonclick-systemrecure-scam

They seemed to be fishy right away, but they kept calling and calling so I eventually let them use this seemingly legitimate logmein123 program thingy.

The guys claimed to be MS employees and they said Windows Live had detected some stuff on my computer. They had some trouble because my computer's regional configuration is set to Spanish and everything is in that language. He tried to change it to US English, then UK English, then Afghanistanian Indian...by then he tried to open IE and I manually shut off my modem so they didn't get do anything. I called MS and checked online. Their phone number is supposed to be a Michigan one, but I'm guessing they're doing some kinda wiring. Anyway, I ran a few scans and cleaned my computer but I wanna see if anything else is missing so here's my log.

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 9:17:41 PM, on 3/5/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Win... Read more

A:A problem after stumbling upon some fake tech support scammers

Would it be better to copy a log while I'm doing safe mode?
 

Read other 2 answers
RELEVANCY SCORE 76.8

Interested in finding out how fake telephone tech support scams work? Well, grab a cup or glass of your favorite beverage, and prepare to be educated, entertained, and horrified.
Chances are that you or someone you know has gotten a call from someone claiming to be from "Windows technical support" phoning up to tell you that you "computer has a virus" and offering to remove it for you - for a fee.

See also: What's the best and worst browser for Windows 10?

Now I don't know about you, but I've never had the time (or patience) to play along, so I've always been curious to find out how the conversation pans out.

Well, if you're interested in finding out what happens, grab a cup or glass of your favorite beverage, fire up YouTube, and prepare to be educated, entertained, and horrified.

Troy Hunt, security expert, Microsoft Regional Director and MVP, and the brains behind the Have I been pwned? data breach service, takes the time to show us exactly what happens.
Full Article. Here's how fake telephone tech support scams work | ZDNet
 

A:Here's how fake telephone tech support scams work

Great article and I hate how these people do this kind of thing to innocent civilians by taking advantages of their knowledge. But the main question is how are they able to get the victim phone number? I been received numerous of phone called from these kind of people and the first thing they said is this: " Hi my name is blah blah blah, and we're from Microsoft Technical Department. Our server have received several reports from your computer and based on your reports it show signs your computer been infected with a virus." But good thing is I able to keep them on the phone for 30 minutes and at the end the scammer curse me with profanity words and I replied this: " Thank you for compliment, and you know? I able to keep you on the phone for 30 minutes so you can't scam other 30 innocent people."
 

Read other 0 answers
RELEVANCY SCORE 76.8

Customer had a hijacker on his computer and he had changed what I'm thinking is the registry so that the fake tech support number is on his taskbar. Wondering if anyone knows how to remove it safely from the registry?

Or where would I find the spot to edit it? Don't want to goof up something on the tray.

Read other answers
RELEVANCY SCORE 76.4

>>>>>>@@@@1800-723-6129 OPera browser TECH SUPPORT PHONE NUMBER %%%OPera browser CUSTOMER SERVICE PHONE
[email protected]@1800-723-6129 OPera TECH SUPPORT PHONE NUMBER %%% OPera browser CUSTOMER SERVICE PHONE
browser??{{{{((!!1800 723 6129!!))))) OPera tech support phone number OPera browser customer care phon
>>>>>>>>>JUSTs Wireless USA 1-800-723-6129 FREE FREE OPera browser tech support number, Wireless OPera browser customer service number, USA CANADA UK Australia>>1800-723-6129 OPera browser support number,OPera phone number OPera browser customer phone number helpline number,
OPera TECH SUPPORT PHONE NUMBER OPera browser CUSTOMER SERVICE PHONE NUMBER here.1800-723-6129 OPera TECH SUPPORT PHONE NUMBER %%%OPera browser CUSTOMER SERVICE PHONE NUMBER OPera technical support number OPera helpdesk number OPera helpdesk phone number OPera Helpline number,OPera Phone number USA CANADA
(((1800-723-6129))))-OPera phone number===OPera browser tech support PHONE NUMBER Helpline tollfree ===!!===1800-723-6129== OPera tech support phone number ==!! ====OPera install TECH SUPPORT PHONE NUMBER FREE USA CANADA !!1800-723-6129 OPera TECH SUPPORT PHONE NUMBER %%%OPera browser CUSTOMER SERVICE PHONE NUMBER ===!!! ***OPera customer service phone number!!! OPera phone number==== OPera browser telephone number!!1800-723-6129==OPera browser PHONE NUMBER!!!TECH SUPPORT phone number ++OPera TOLL FREE PHONE NUMBERPhone Number 1800-723-6129 USA CANADA, OPer... Read more

Read other answers
RELEVANCY SCORE 74.8

AVG Antivirus+(1-800-723-4210)+ Help Desk Customer service number 1-800-723-4210for online tech support Help Desk And Care on Toll free phone number Contributors: Poojajaanu Date created: 2016-09-06 05:39 PM | Last Updated: 2016-09-06 05:39 PM Category: Project Description: AVG security USA#[email protected] customer service phone number, AVG antivirus customer service phone number AVG +∑™+1-800-723-4210AVG Tech Support Phone number, AVG customer support phone number AVG customer care phone number AVG USA((((=1-800-723-4210))))) AVG Antivirus tech Support Phone Number, AVG Antivirus Technical Support Phone Number, AVG Antivirus Customer Support phone Number AVG Antivirus help desk number, AVG telephone number AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG Support Phone Number 1-800-723-4210USA, AVG Antivirus Support Phone Number, AVG Technical Support Phone Number, AVG Customer Support Number?? AVG phone number #$#1-800-723-4210##$AVG Antivirus phone number AVG security phone number AVG phone number #$#1-800-723-4210##$AVG support phone number AVG symantec phone number AVG phone number customer service #$#1-800-723-4210##$AVG customer service phone number AVG tech support phone number AVG technical support phone number1-800-723-4210 AVG phone numbers AVG help phone number AVG Antivirus support phone number #$#1-800-723-4210##$AVG phone support AVG contact phon... Read more

Read other answers
RELEVANCY SCORE 73.2

I read through the list of malwares and didn't see this exact one.  In Chrome, it pops up a new tab and freezes the browser, two windows and multiple tabs completely unusable,  but in Firefox it opened a new window that was easily closed.  It appears that if I don't use Chrome it doesn't run, but I am not sure. I am not seeing computer slowdowns or any other issues.  There are no recent software installs, no odd programs etc.
 
The page that comes up says it's Adwareblocker.com.  It has a background that's grey and with a sort of DOS looking text, and a large sidebar with a scroll bar.  The text says various things and includes a phone number.   It plays a repeating voice message that the computer may be infected, and to call that number.  I didn't write that down but it's a long number/out of country, something like 1-814-xxxx, which I think is another country.
I am somewhat experienced, and have run AdwCleaner, Malwarebytes and Win Security Essentials, and no cure.  AdwCleaner log shows 'yourtango.com' which I know nothing about.  Malwarebytes quarantined 'hijack.host'. 

A:popup fake phone support takes over Chrome

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===If Firefox and or Internet Explorer are running well I suggest you remove Chrome.Clear your Chrome cache and cookieshttps://support.google.com/chromebook/answer/183083?hl=en---Remove Chrome using the the instructions on this page.https://support.google.com/chrome/answer/95319?hl=enBefore you do Export your BookmarksChrome will export your bookmarks as a HTML file, which you can then import into another browser.If you want to save your passwords as well see here: http://www.intowindows.com/how-to-backup-saved-passwords-in-google-chrome-browser/Re-install Chrome and the Bookmarks.If you want to save all your settings refer to this page.Follow the instructions before removing Chrome.http://juan2geek.com/how-to-backup-and-restore-entire-google-chrome-setting/<<<>>>Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.===Wait... Read more

Read other 6 answers
RELEVANCY SCORE 73.2

Hello Everyone!

I have came across something that has been getting on my nerves the past month. I work at a small IT store and we have been getting a lot of calls about this pop-up. What it does is it pops up a block saying computer is infected and you have to call this random number to get it fixed. The number is never the same. I have found there are a lot of junk programs that are installed. For example, Optimzer Pro, Cross Browse, PC Tuner to name a few. I have also noticed that most of the computers DNS servers get set static. Current computer i am working on is set to 81.218.119.5 and 82.163.142.130.

I have done some research and find that every DNS i see goes to Israel. I have been removing the infection by running multiple tools. Malwarebytes, Hitman Pro, Adwcleaner, Superantispyware and resetting all the Browsers, but it has been coming back on occasion. I also have been uninstalling the LAN and reinstalling with a newer driver because seeing a DNS get set static by a bug is something i have never seen before.

Wondering if you guys have any suggestions. It has happened on windows 7 and windows 8 computers.

Thanks

A:Fake Certified Microsoft Support Phone Number Pop-up

Similar ransomware has been around a while. Maybe there is new onslaught of it at the moment.

Read other 3 answers
RELEVANCY SCORE 72

How do I password protect my file folders with important files on windows 8.

A:Password Protection Tech Support

if you setup different users AS users and NOT as administrator on the PC and do not give out your password

This has worked on windows 8 for a different user
XOSLAB.COM

just dont forget the password - Make sure you have a backup of all your data ,

Read other 1 answers
RELEVANCY SCORE 72

I was given one but I want to change it to something I can remembert
 

A:How do I change my password on tech support guy

Click on your username near the top-right of the screen, and then choose Password. From there, enter your old password and then enter the new one.
 

Read other 1 answers
RELEVANCY SCORE 69.2

Hi there,Hope someone can help with this situation.I got malware from the hp tech support chat when I clicked allow activex.It hijacked my desktop, my avg and disabled all my services.I was able to use Malwarebytes to get rid of most of it but I am still having some issues.When I use Google or Bing my results come up right but when I click on a link it is redirected.Also for some reason my AVG won't let me open my Family Tree Maker as it says there is a Trojan vundo.jd attached to it.I have a Hijackthis log. I am running Windows XP Home Edition Service Pack 3. Also have Spybot S & D loaded.Thanks in advance for any help with this annoyance.Cindy PS this is a repost from the Intro forum as I didn't read the big blue note at the top of the page that said don't post problems here! Thanks againEDIT: I moved your topic to a more appropriate forum and deleted the topic in Introductions ~ Elise

A:Malware from activex on hp tech support chat

Hello cindymsg,First,Please update Malwarebytes' Anti-Malware by clicking the Check for Updates button on the Update tabOn the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Exit MBAM when done.Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.Next,Please dow... Read more

Read other 10 answers
RELEVANCY SCORE 68.4

Hey everybody,
 
So because I've assembled my own computer, friends and family have lately been trusting me to help out with their computer trouble, which is usually malware and speed issues. I really like being able to help, but I'm still very much a novice at this stuff, so I pretty much check around Bleeping Computer and whatever I can find online to figure out what's going on. I follow http://malwaretips.com/blogs/malware-removal-guide-for-windows/ to the letter, which more or less involves running the usual scans like MalwareBytes and ADW Cleaner in safe mode. I also have been using MSCONFIG alongside Bleeping's database of startup programs to try and speed up their boot, along with defragging their drives and replacing their antiviruses like Norton and McAfee with Avast. I've had some success so far -- I was able to completely clean a neighbor's computer that was full of serious malware that was keeping him from even logging in -- but I'd like to feel confident that I have a consistent system to do rudimentary tech support stuff like this.
 
What should I do and know?

A:What should I know to do basic malware removal/tune up tech support?

Hello TheJBizz:
 
If you intend to make malware removal a full-time career, this forum's training program is amongst the best anywhere. Following the threads of others while their computers are undergoing a clean-up may show you proper sequential methodology rather than using random shotgun techniques of doing whatever it was you did the last time. Are you aware of the passive diagnostic applications on this forum?
 
BTW - Neither Xplodes' AdwCleaner nor Malwarebytes Anti-Malware are intended to be used in the safe mode unless all else has failed. Of course that re-establishes the need for proper procedures. Although unmentioned above, I would close with a caution against using sUBs' ComboFix without proper supervision.
 
When all else fails, this forum's quiteman7 will always direct you to the right path.

Read other 9 answers
RELEVANCY SCORE 68

Is there a way to over ride their password? He said he was with Microsoft but it was an antivirus sales gimmick.

A:fake Microsoft person changed admin password computer now lo...

@savhvip? If the login screen looks like this then try to restore to a date before they did this.  REO

Read other 2 answers
RELEVANCY SCORE 67.6

1*800*919*0992 quickbooks enterprise tech support phone number us
1800-919-0992 quickbooks enterprise technical support phone number for Contact Intuit quickbooks enterprise Support phone numberby email, chat or phone.quickbooks enterprise help Support phone. Click here if looking for support for quickbooks enterprise Online
Products & Services; Install & Setup; Data & Company Files
1-800-919-0992 quickbooks enterprise tech support number, quickbooks enterprise technical Support phone number USA quickbooks enterprise tech Support cstomer service number, quickbooks enterprise helpline phone number BEST [email protected]@1.800.919.0992(UK)/1.800.919.0992(USA)==
quickbooks enterprise renewal support phone number:: quickbooks enterprise renewal customer support phone number::quickbooks enterprise internet security customer service phone number/ quickbooks enterprise renewal customer care number.. 0.800.919.0992(UK)/1.800.919.0992(USA)==
quickbooks enterprise phone number .quickbooks enterprise tech support phone number* quickbooks enterprise customer support phone number. quickbooks enterprise Customer service phone number>>>>>>>>> ( quickbooks enterprise phone
number quickbooks enterprise support phone number quickbooks enterprise tech support phone number quickbooks enterprise technical support phone number quickbooks enterprise customer support phone number quickbooks enterprise customer service phone number quickbooks
enterprise customer... Read more

Read other answers
RELEVANCY SCORE 67.6

I just got this new Toshiba and when I turned it on the first thing that popped out was a black screen with a blue square in the middle asking me for a password, and the person that I got it from said she doesn't knoe the password that goes in there, that she used the laptop for like 4 times and this screen showed up and doesn't knoe how to unlock it so im trying to help her unlock it but I need help I don't knoe what to do either if anyone has any ides how to unlock it let me knoe.

A:Toshiba Laptop Model L735D S3102 Bios Password Tech Support Needed

Sorry, we cant really help with Circumventing passwords.

Your best bet would be to get a hold of Toshiba Support

Official Toshiba Support | Toshiba

Read other 2 answers
RELEVANCY SCORE 66.8

Microsoft Windows Technical Support Phone Number 1-800-723-4210
Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-421Microsoft Windows 10 Technical Support phone Number 1-800-723-4210Microsoft Windows 10 Technical Support phone Number 1-800-723-4210Dial now 1-800-723-4210. We are certified technician from microsoft you can call us for any query related to microsoft product. 1-800-723-4210We are here to help you Call us for outlook and Hotmail support Microsoft Outlook 365 Customer Service Phone Number 1 800 723 4210 United States Super Support 1800.723.4210 Microsoft Outlook 365 Customer Service Phone Number 1 800-723-4210 United States Microsoft tech support phone number Microsoft office tech support phone number1-800-723-4210 windows tech support phone number Microsoft tech support phone number usa Microsoft windows tech support phone number Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210 Microsoft Windows 10 Technical Support phone Number 1-800-723-4210Microsoft Windows 10 Technical Support phone Number 1-800-723-421Microsoft Windows 10 Technical... Read more

Read other answers
RELEVANCY SCORE 62.4

I bought Windows 7 from Amazon.com and when I called up Microsoft for support they told me that they don't support open windows 7 what ever that means. So I paid the same price but no support because I didn't buy it from Microsoft. I'm just confused. Can someone explain this to me or was the tech person just full of crap?

A:No Tech Support for Windows 7?

Yes, MS supports any retail copy with the best funded Tech Support in the business.

I also bought Amazon (for the free shipping) pre-order Upgrade and have gotten MS support already.

They are required by policy to troubleshoot to completion any issue, even elevating to a research team that communicates with the developer teams, as long as customer is cooperative.

As with any tech support you may get a bad agent or someone having a bad day. I always politely hang up and call back.

In the past by being appreciative and eager to learn, I have gotten a full education in clean reinstalls w/o bloatware, virus hunting, optimization, etc. - worth far more than the price of the product.

Read other 3 answers
RELEVANCY SCORE 62.4

i m unable to open add/remove programs in the control panel.i tried out appwiz.cpl to open ,but there wasn't any response.
i even tried the following one,

Click Start => Run and type in "regedit" {without the quotes}
Navigate to the following key:

HKEY_CURRENT_USER\Control Panel\don't load

In the right-hand pane, delete all the Values whose data value is set
to "no".

but nothing works . plz any of the tech geeks out there help me 2 sort out tis problem.!!!!!!
 

A:tech support for windows xp!

hello,

Check any one from below three ,
1.have you tried in safe mode...?

or

2. This happens if your user account does not have Write access to the following registry key:

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Setup \ Oc Manager \ TemporaryData

Type regedit.exe in Start, Run dialog

Navigate to the above registry key

Choose Permissions from Edit menu

Click Advanced, and click Add.

Type your username in the Select User or Group Box

Allow Set Value permissions to your user account

Click OK and close the dialog
If above registry not help...
3. Check with Malwarebytes,

http://www.filescrunch.com/techspot/0825/mbam-setup-1.46.exe

Install Malware and update it.. and do full scan.

remove infected registry and do reboot.

hope it will works fine.
 

Read other 1 answers
RELEVANCY SCORE 62.4

Over this past weekend I have been getting calls from "Windows Tech Support". The first time the tech said my computer was sending out warning messages to them. I asked him how it was doing that I cannot remember what he said he asked "you are using windows OS correct?"
I said so I use a Mac he hung up when I said that. I just laughed and let it past. A few hours they call back. They have called several times and today they call claiming they are "Dell tech support" I do have a Dell laptop (How they know that?) They said my Dell was sending them warnings
bla bla bla. I told them I was running Linux they hung up. I laughed again and let it pass. Then an hour later they call back. Frustrated I told them I was not home and asked if they could call back. I am waiting on them to call back. I have made a whole drive backup with True Image. I am going to let them log in and I will be watching what they do. I got a text document on my desktop named "credit card info" don't worry all that is in it is
idiot typed all over it. I cannot wait for them to call. I am going to be very careful with this. I will be watching to make sure they don't harm my system. I could set up a VM and do this but don't really have time. 

A:Windows Tech Support

If you're not going to use a VM do NOT let them access the computer. I don't care how carefully you monitor them, they could still do something to a PC on your network.

Read other 15 answers
RELEVANCY SCORE 62.4

please help

fresh install win xp

everything fine till i get to mb drivers

infdrv.dll
agpdrvnt.dll
viastor.dll

failed to load

please tell me what these are as i can find no information on them and/or any reason i should have this problem
 

A:windows tech support says its not them

Read other 6 answers
RELEVANCY SCORE 62.4

I just received a phone call from a person purporting to be from the Windows Technical Center, Jacksonvill, FL (888-970-4250) who said that they have noted a security issue with my computer.  This person asked me to open the run command line and bring
up the windows event viewer (eventvwr).  Prior to opening up windows event viewer I asked for verification of this person's credentials and he gave me the information above, and a name that I did not write down.
The process appeared to be somewhat suspicious and I said that I would need to verify this person and organization and call back the toll free number before I went any further.
I was wondering if anyone has had a similar experience and can offer any advice....

Read other answers
RELEVANCY SCORE 61.6

Only one of my emails started sending out spam emails this morning at about 11am pst and has continued to do so until the time of this post.  I have changed the password on the email account to no avail. 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16635  BrowserJavaVersion: 10.25.2
Run by CAM at 17:01:29 on 2013-07-25
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6030.2400 [GMT -7:00]
.
AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVA... Read more

A:Malware Emails Being Sent out even after password being changed

Hi there,my name is Marius and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding. Perform everything in the correct order. Sometimes one step requires the previous one. If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem. Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me. Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts. If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed. Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean. My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.    Scan with Gmer rootkit scannerPlease download Gmer from here by clicking on the "Download EXE" Button.Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.If it gives you a warning about rootkit activity and asks... Read more

Read other 12 answers
RELEVANCY SCORE 61.6

Yesterday I was called by a Windows Tech Support Scam. I am not very tech-savvy and I was gullible and allowed them to remotely access my computer. When they asked for money that is when I wised up, but that was too late. I already gave them access to my computer.

I changed my bank account passwords. I loaded my files onto an external hard drive. I plan to return my computer to its original state, but I first wanted to find out what is to stop the scammers from just accessing my computer again?

Any help

A:Windows Tech Support Scam

Hi:

Yes, it is a busy season for such scammers.
I got such a call on my mobile phone a week ago, spoofing a "legit" number in PA on caller ID.
I strung the caller along for a while.
He hung up when I volunteered to give him my credit card info so that he could "remote in" to fix my "viruses".

Anyway:
I hope you changed all your confidential info from a different, known-clean computer?

Also:
Here are a few resources:

I Just Fell For a PC Support Scam, Now What?
Tech support scams costing computer users
FTC cracks down on tech support scams
Beware of US-based Tech Support Scams

You might want to head over to one of several, busy, reputable computer disinfection fora for a guided, expert look at the system.
The trained malware helpers will know which tools to use, in which order, to check the system for hidden malware.

Thanks,

MM

Read other 2 answers
RELEVANCY SCORE 61.6

Hi

I was recently duped and need to find out if my PC will have any issues as a result.

One of the programs on my computer crashed and I agreed to send in a Windows Error report. A few days after this (not sure if it was coincidental or not) I received a telephone call pertaining to be from Windows Technical Support. They told me I had a problem with my PC and gave me directions on how to access the event viewer. I did this and they showed me that there were a lot of "errors" within my PC.

They told me that they could help sort this out. They never asked for any money. They told me they needed access to my computer. They asked me to download a program AA-V3.exe from Ammyy. I did this but it would not let the person connect.

They then asked me to go to a website ShowMyPC. Which again I did believing they were from Windows. We connected through this site - the site said that it was connected anyway. The guy on the phone said that there was a problem and he couldn't access the PC - it must be running really slow. He then asked me for my passwords. At this point I was concerned and told him I did not believe he was from Windows and did not give him my passwords. I put the phone down and closed down the PC. Since then they have rung me back 10 times and I have put the phone straight down.

I have had remote access before for support reasons at work and during these sessions I have been able to see the cursor move. During my experience with the fake Windows Te... Read more

A:Windows Tech Support - Advice

Read other 8 answers
RELEVANCY SCORE 61.6

Wondering if anyone else is getting calls from a Windows 8 Tech support person?  They called me 2 days in a row.  I heard her out for a while to see what the scam was, and when she told me that "a critical error had occurred on my computer and she wanted me to turn on my Windows 8 so she could help fix it" and that's when I hung up.
 
I wonder how many people do turn on their Windows 8 and follow her instructions....................
 
 

A:Calls from Windows 8 Tech Support?

The creeps have been calling on 7&8, I give them a dash of non repeatable words!

Read other 11 answers
RELEVANCY SCORE 61.2

I got rid of 4 viruses and deleted about 20 that were in the quarantine, restarted computer and now my main password has changed somehow and I can't login. I can login to the secondary account that doesn't have administrator rights. I don't have a "lost password recovery disc" . I can't run DDS because I'm on the account that doesn't have administrator rights. I can't run GMR because I have a 64bit os.

Computer Specs:
Windows 7 sp1
Dell Inspiron 1545
Processor: Pentium(R) Dual-Core CPU T4400
2.2GHz 2.20GHz
3GB RAM
64bit os

Any help is appreciated!

Thanks in advance

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:27:31 AM, on 3/1/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1423.0\mswinext.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Pro... Read more

Read other answers
RELEVANCY SCORE 61.2

Windows 8.1 is asking to be reactivated, when product key and or activate online is issued, error message appears telling me the code is not valid. tech support has helped out in many ways, but no ways have fixed the issue. many cmd commands have been attempted
such as 
elevator cmd promp~ attempted and failed
rearm cmd prompt~ attempted and failed
among multiple others.

i bought windows 8.1 pre installed on my pc from best buy, never had problems until affter windows 10 free upgrade, which i did not participate in getting. afterwards, i have been constantly asked to activate my windows 8.1, but with no luck does it allow
or accept my product key, despite it being a valid  volume key according to the microsoft support team. 
i have been a microsoft user for years now, i have invested and bought into many products. it is a shame that this is happening, but would be greatly appreciated if ANYONE can help me fix this problem before i am forced to change OS.

Read other answers
RELEVANCY SCORE 60.4

I keep wondering why I keep getting a message after I close a windows internet page, it says ''Internet has stopped working'' and it also says '' A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available.'' I keep getting this message not all the time but like 6 of the times I open an close a webpage from the internet. If any one has a solution for this let me knoe.

A:Windows 8 Internet Explorer Tech Support Needed

Did you have any luck resolving your IE problem yet?

If not:
1) Check in Event Viewer to see details about the IE errors. There should be some details in the Applications log.
2) If you are behind in your Windows Updates, manually visit Windows Updates & install any important, recommended, or critical updates. IE tends to get patched a lot.
3) Run some malware scans.

If the problem occurred suddenly after IE had worked fine for a long time, you can also consider using System Restore, choosing a restore point from before the IE errors. Programs added since the restore point might need to be reinstalled afterwards.

. . . Gary

Read other 2 answers