Over 1 million tech questions and answers.

Fell for microsoft scam

Q: Fell for microsoft scam

So I never knew about the scam before this happened, I was oblivious to what was happening. My laptop is a Dell Latitude D530.

Now I have the issue where the hacker configured a password onto my computer, but said the viruses wasn't removable, I doubt that much. So I called a repair shop to come over and fix the issue, but is the bios battery inside the computer, cause I don't see one underneath the battery.

Windows 8.1

RELEVANCY SCORE 200
Preferred Solution: Fell for microsoft scam

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Fell for microsoft scam

Welcome aboard

Not sure what your actual situation is.
You said you called repair shop and...?

Read other 1 answers
RELEVANCY SCORE 85.2

Windows XP pro.  SP3 Gigabyte Motherboard. 32 bit system.  500 GB drive got call from "Microsoft" saying errors had been sent and they could tell me how to fix. them.  Yes, I had errors sent resulting from multiple tries of migrating 500GB drive to 1TB drive.  several unsuccessful attempts. When I realized this MS call was a scam and they were IN my sytem - I disconnected from the net.  tried to find the logmein software and remove it.  couldn't find it. I'm still not sure which drive they accessed because I had so many issues with my cloned drive not showing up properly.  Had multiple drives running. cleaned and defragged with Glary utlities (big mistake) shut down system and tried to reboot with no luck' couldn't use XP disk to repair.  would get to 'starting windows' and would get blue screen. took out all drives except the original.  dug out the motherboard install disk.  used that.  got system to boot into windows. no internet connection but did have AVG Pro trial installed.  Did a scan and found 28 items but said can't remove them.  IRC Hook was the one that showed the most. I'm unable to copy files from that system to a floppy or CD.  I did a screen shot and could send that if it would help.  I can open desktop files but can't move them or 'send' them to USB drive seems that the virus disabled all the normal services.  keep getting error mes... Read more

A:Fell victim to "microsoft" scam and now system is infected and AVG can't cure

(been getting help from the TEch Support site.  Great people.)
 
Hello avatrx -
Please tell us only when you have Fully finished with the other support people, and yes they are good.
Note that we do not help you while you are getting help at other places.
We would also like you to leave a link to the topic there when you are finished.
The advice may clash, with 2 versions of opinions from each site -
 
Thank You -

Read other 10 answers
RELEVANCY SCORE 70.4

Unfortunately, my elderly parents fell for a scam today.

Evidently mom was reading some news story online and they got some pop up saying they had a lot of infections and the hard drive was going to be destroyed shortly and to call this specific 800 number.

So what do they do? They call the number. And then they type in some stuff per their instructions which gave these people access to their machine. My mother then had the idea to call me and ask me if this number was legitimate or not.

I told them to hang up the phone with these people and to pull the plug on the computer immediately. It took some convincing but they did it.

I?m totally not sure what to do now. These people never asked for any money, but they had full access to their machine. My mother couldn't tell me what they had her type in to give them access but she did say something about the rundll32.exe. That's the most information I could get out of either of them.

I think I have to assume the worst in that the bad guys have access to anything and everything that was on the computer, passwords, etc. Luckily they don?t do any online banking or anything of that sort. But isn't the entire machine now a security risk?

I think I also have to assume that they installed some sort of backdoor to re-give them access to the machine once they turn it back on again. I've told them not to turn on the machine for now.

I also wonder if the bad guys could somehow get access to their internet gatewa... Read more

A:fell for scam

Read other 10 answers
RELEVANCY SCORE 69.6

Hi, 
just got a phone call from my mum and she has fallen for a phone scam.
Basically an 'AVG looking' box kept appearing over her browser, so she clicked it, and then it wouldn't go away. There was a free phone number to ring, so she rung it and spoke to a person in a call centre. They took control of her computer, and scanned it, and it said she had a trojan. Then they asked her for a payment of £110 and then asked her to enter the admin password on the screen. Luckily by this point she got suspicious, and hung up. 
How safe is her computer to use now? I haven't got the computer in front of me, and wont be able to fix it for a while, but I'm just wondering if it needs a full clean install, or would just require some house keeping.
She didn't enter the admin password, so how much damage could they have done without it? I'm a mac user, so not totally sure on windows issues. 
she has AVG installed, so would it be a simple scan with that?
thanks!

A:Mum fell for phone scam, can anyone help

i just found this info online, which is probably the same thing:
A (slightly) more legitimate version comes from a company called Help PC Online, which "Which" investigated.  Their British phone number actually connects to a call centre in Delhi and their address in Crawley appeared on Google to be a car park! For £110 per annum they promise to give you support. They then take over your PC and install and run two (legit) free packages (Ccleaner and Malwarebytes) Whilst I thoroughly approve those the charge is excessive. But there can be much worse consequences from allowing someone to take over your machine.  In fact you are giving them the right to search the whole hard disk and they may find details you would prefer not to disclose. 

Read other 3 answers
RELEVANCY SCORE 69.2

I fell for the technical support scam and paid the fee and granted them access to my computer and they were downloading a couple of programs,but at the same time I told a friend about it and they told me to turn off completely. The scammers continue to call me. I am scared to turn on my computer and would like to know what to do about this.already called the credit card company to cancel the payment.

A:I fell for the technical support scam

Unsolicited phone calls (aka Tech Support Scamming) from "so-called Support Techs" advising your computer is infected with malware has become an increasing common and prolific scam tactic over the past several years.
In the majority of these cases the scammers use social engineering to trick a victim into spending money for unnecessary technical support or to buy an application which claims to remove malware. In other cases the caller pretends to provide free security checks or direct the download and use of a bogus registry cleaner which purports to find thousands of problems, then offer to fix the computer for a fee. If the victim agrees, the support usually costs hundreds of dollars and often leaves the victim's computer unchanged or intentionally infected with dangerous malware.
Another scam tactic involves tricking their victims into believing that their computer is infected by having them look at a Windows log that shows dozens of harmless or low-level error entries. The scammer instructs their victim to type "eventvwr" in the RUN box to open Windows Event Viewer and points out all the warnings and error messages listed under the various Event Viewer categories. The scammer then attempts to scare their victims into giving them remote access to the computer in order to fix it and remove malware. More nefarious scammers will install a backdoor Trojan or Remote Access Trojan in order to steal passwords and other sensitive personal information which could then be used to ac... Read more

Read other 2 answers
RELEVANCY SCORE 68.4

My wife fell victim to a cold call from an agitated "Security" service individual that led her to "error" messages in the event log and then coerced into installing ammyy remote admin management capability to "fix" the problem. This is a common attack (seach "ammyy") usually to sell bogus services or windows 7 upgrades (credit card snatching). However, for the brief time before she closed the remote admin program after becoming aware that this was a scam, the scammer had full access to her computer.

I've run Avast, Spybot S&D, TrendMicro HouseCall, McAfee Security Scan, Malwarebytes. These found a few tracking cookies and something related to Installshield 2k2 (that sends tracked info to some site). Anyway, it now looks clean (programs removed cookies and registry entries).

I have a HijackThis log attached that seems ok, but not sure about all the entries. Any extra eyes on this log appreciated!

Thanks!, George

A:Fell for ammyy remote admin scam

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the ... Read more

Read other 3 answers
RELEVANCY SCORE 68.4

and now my machine is really playing up.
Acer M1641 Intel Core 2 Duo E4700 at 2.6GHz
3 GB RAM Running Vista Home Premium Version 6 Build 6001 Service Pack 1.

I am getting:
System Hang-ups
Random IE pages appearing for no apparent reason, especially as I use Firefox!

Ran DDS and GMER, but had to do it in Safe Mode as GMER caused a Hang-up which only a single finger re-boot (mains off at plug) would cure in ordinary mode. So here is DDS.

Hope you can help. Many Thanks. Jeremy.


DDS (Ver_09-06-26.01) - NTFSx86 MINIMAL
Run by Jeremy at 23:12:19.75 on 20/07/2009
Internet Explorer: 8.0.6001.18783 BrowserJavaVersion: 1.6.0_13
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.44.1033.18.3071.2669 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Users\Jeremy\Desktop\dds.scr
C:\Windows\system32\... Read more

A:I fell for the Adobe Flash Upgrade scam...

Hi Jeremy,

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully first.


Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds.txt log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 16 answers
RELEVANCY SCORE 68.4

My mom got a call from a supposed "Microsoft tech" who said her computer was sending out messages that there was a security problem.... you know... the "you need to buy my support" scam. They proceeded to do the usual having her look at log files & other system messages to scare her. But the worst was that they convinced her to give them remote access using "showmypc".  By the time I came home it had been running on her laptop for 4 hours. Thankfully, she told them to call back when I was home for payment for their service. Ya... that's not what they got when they called back! I'm concerned about what they might have been able to do with all that time & ability to access her laptop. I'm also concerned about access to our entire network. What would you suggest... not just for her laptop, but for any other devices on the network? ThanksMod Edit by quietman7: Referred to AII from this topic.

A:Elderly mother fell for "MS tech" scam

Let's scan your mom's computer and see if anything malicious is there.  Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your d... Read more

Read other 29 answers
RELEVANCY SCORE 67.6

Just today I got a call from someone named "Mike Anderson" (He gave a number claiming to be "Windows Tech Support" and he preyed on my lack of technical expertise. I feel like a freaking moron!
 
I am on the computer this happened to and do not have access to any other machines in order to download or transfer software. It runs Windows Vista Home Premium 32bit. I've had this computer very a very long time, and I feel so dumb that I fell for this! I thought stuff like this came in emails, not the phone! I don't even know how he got my number!
 
Anyway---
 
He connected to my PC using an Ammyy program and brought up a whole bunch of scary stuff. I told him "wait, I have McAfee, it blocks anything that doesn't belong. I also use Malwarebytes and it's done great for me."
 
The guy told me it's hackers, not a virus, and McAfee is useless, and proceeded to uninstall McAfee and my iObit defragmenter! He then installed CCleaner (I don't dare touch it). He had control of my PC and had me log into my email to send emails to a bunch of email addresses(he added them to my contact list).
 
I don't dare change any passwords until I'm sure there isn't anything still on this computer that can see what I change it to.
 
My Windows firewall is disabled and can't be reenabled. I tried to update Malwarebytes, but it failed and my computer rebooted itself. I went right to the malwarebytes site, downloaded and installed it without a problem. I ran in regular mode sinc... Read more

A:I fell for a Creative Solutions scam and I feel stupid. Please help.

There is no edit function, oops! I forgot to mention that I will not run any software that will alter anything until advised. I'm working on using tools that scan things so I will have logs available if I am asked to post them in the log forum.

Read other 39 answers
RELEVANCY SCORE 67.6

Hi,Well this is my first post in here but I've visited many times over the years.So yesterday I was busy trying to get all my tax paper ready for the accountant, phone rings and my wife hands me the phone.Indian accent lady on the other ends of phone tells me that shes calling from some IT company and my computer is infected and it's sending warning messages to them, I was having a hard time understanding her and at the same time sorting paper work out. so my mind wasn't completely with it. My laptop was purchased back in 2008 and it's probably time to get a new one, over the last month it's been running slow etc, I clean a whole bunch of things, purchase another software to try help fix things up etc.But over the past 4 days my primary email address that's [email protected] was getting a huge amount of virus emails, so I figure this lady was some IT person from Rogers, they also have call centers in India and other countries, unless you talk to customer relations.Anyway, after she had my run a few "Run" CMD type commands she told me yes your laptop is infected and all software is corrupt.She had me visit ammyy.comI questioned her for a little about why would I need to use a remote desktop app, she said her tech guy will help guide me to remove/fix problem, so being stupid I granted access, then after running one more CMD command, not sure what the command was but after it finished it said something like:"All software has been deactivate... Read more

A:I fell for the Ammyy SCAM via phone call - Have I been infected

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please take note: If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic and do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the '... Read more

Read other 4 answers
RELEVANCY SCORE 67.6

Today my mother fell for a phone scam - the scammers called out of the blue, pretended to be from an ISP, used the Event Viewer to convince her there was something wrong with the computer's (Windows 7 Desktop) internet connection, and got her to install Teamviewer and presumably give them access (she doesn't remember what happened exactly, but she says she followed all their instructions). After doing everything they wanted, then they said that it was all fine but they wanted to speak to the account holder who was my father - he wasn't there at the time. Anyway, they called back in the evening, and I pretended to be my father. I played along up to the part where they wanted me to give them the Teamviewer ID and password and then hung up. Since then I've deleted Teamviewer and have run Malwarebytes Anti-Malware and Superantispyware which didn't turn up anything that looked too serious.

My question is: what were they after? Presumably money, but I note the following:
1) At no stage with the conversation with my mother or me did they mention payment or credit card details
2) The computer seemed to be working fine, with no obvious changes like new password checks/bricking/ransomware/new software (other than Teamviewer)
3) I can't work out why they would have wanted to talk to the account holder when they presumably got remote access already via my mother who believed them

I'm not sure what I'm missing and any insight would be much appreciated.

A:Mother fell for remote access phone scam - what were they after?

  
Quote: Originally Posted by cwan


Snip, snip...
My question is: what were they after? Presumably money...
Snip, snip...


You are correct. Please pardon my abruptness but no further speculation is really required regarding scams. You did well to not lose any money.

Cheers.

Read other 7 answers
RELEVANCY SCORE 65.6

My husband fell for the phone call that our windows certificates were expired. He followed the prompts of the caller which gave the caller control of the computer. He got all the way to the costs before my husband realized something was amiss. Needless to say when I got home there were open files on my computer to prove the callers point. I used AVG to search for malware. it found 3 items and destroyed them. I used the window defender and it found nothing. I then found 3 files in my download folder and attempted to delete them one would not delete the Ammyy-(1) (I may not have that correct). So I scanned it 3 time with AVG and it was not infected. I asked a friend how to remove the file and they suggested I do it in safe mode. I went to safe mode and have been stuck in this Start-up repair. Start up repair cannot determine the cause of the problem. I am running windows 7 (professional ?). I don't have any disks, but I can attempt to get them from work if necessary. Any help you can lend I appreciate. I really don't want to lose my photos.

A:Fell for the phone scam Ammyy computer stuck in Windows error recovery

Hi jamiespull
 
My name is polskamachina and I will be assisting you with your malware problem. It sounds like you are unable to boot into normal mode, is that correct? Or do you get stuck in Start-up repair only when you boot into that mode?
 
polskamachina

Read other 59 answers
RELEVANCY SCORE 51.6

Recently I almost fell for a scam which I guess has been going around. I got a pop up window which said that my computer was being locked by Microsoft and that I had to call their number and talk to a tech. I figured it was a scam and was able to get out of it, but the second time that it happened I could not, so I called the number. I had to give them remote access to my computer and they ran a bunch of scans and diagnostics which all had the Microsoft name and seemed very legitimate. After about an hour of this they said I needed antivirus protection for about $100 so I told them I couldn't afford it and they said then that they couldn't help unless I paid. I hung up and eventually was able to get the popup to disappear and my computer seems to be working but I have a few questions:
Do these people still have access to my computer, and how can I stop it?
What can I do to close the window if this happens again?
Does Microsoft know that someone out there is using their name for this scam?
Does my computer (acer desktop with Windows 10) have any anti virus system that I can enable or download which might stop this?
Thank you!
 

A:Microsoft scam

Do these people still have access to my computer, and how can I stop it?Click to expand...

They maydo - depends on how the remote control was setup - I would have the virus malware expects scan - so i have moved to virus malware forum
They also sometimes put a lock on the PC - or drop a virus
often, all they want is the money and then move on

What can I do to close the window if this happens again?Click to expand...

see above

Does Microsoft know that someone out there is using their name for this scam?Click to expand...

Yes, there are hundreds of these scams, phone calls are quite common - but they also say they are windows or the telephone company - BT, Talktalk
etc etc -

Does my computer (acer desktop with Windows 10) have any anti virus system that I can enable or download which might stop this?Click to expand...

yes, windows defender , is usually on by default and included with windows 10
I suspect you do not need a virus program and that was part of the scam , to offer a product - proabbly a free virus program or even a hacked version
 

Read other 1 answers
RELEVANCY SCORE 51.2

My aunt fell for this scam and her computer is probably compromised now.  Her internet connection was disabled when they called her, suggesting they had already taken limited control of it.  After she entered some numbers on the screen, they took full control and went into their spiel while showing her all the processes that had been stopped, and then they remotely installed some software (for a fee, of course, which I've already advised her to dispute a.s.a.p.)
 
In the Desktop folder there is now a program called Enigma_Infosys_Remote, and a text file called enigma_techsupport with the following text inside:
 
     enigma infosys technical department
     909 833 4727
     fred
     sr technician
     support @enigmainfosys.c o m
     w w w.enigmainfosys.c o m
     1.remove all the errors and warnings from the computer
     2. reinstall all the stopped apps
     3. antivirus(lifetime)
     4.pc optimization soft
     5. remove soft
 
I went to Microsoft's website and ran a malicious software scanner which didn't find anything, although I didn't trust that so I downloaded malwarebytes again and ran that which also came up negative.  Shortly afterwards, the internet connection stopped working again, so I restarted i... Read more

A:Microsoft phone scam

Lets see what is detected on your PC that could have been downloaded and installed. Did the phone scammer say the PC was infected and sending out viruses?ADW CleanerPlease download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Clean.Confirm each time with Ok.You will be prompted to restart your computer. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well. Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next message. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to y... Read more

Read other 1 answers
RELEVANCY SCORE 51.2

I am ashamed to say I have fallen foul of an internet scam in the early hours of New Year's Day.

While doing some stuff on Facebook, I foolishly clicked on an article which claimed 'Donald Trump was being sued for divorce'! Within an instant, my computer was frozen, I had notices flashing across my screen, and a loud voice was yelling out at me that 'Microsoft had disabled my computer due to a virus attack'. I was prompted to call the displayed 'toll free' number for immediate assistance or else my computer would be permanently blocked!!! Unbelievably, half asleep and totally confused, I rang the number.

I was assured the virus attack was genuine and, for the next (heaven knows how long) I was guided through the steps to repair the damage. The 'Microsoft technician' gave her name and actually accessed my computer remotely to show me the damage on my system. I saw the word 'Trojan virus' displayed. When I suggested she could be a scammer, she assured me she was not - otherwise, how could she be taking me through these steps? She then asked what security I was using. I told her it was the free version of Avast which I'd had for the past 5 years or more with never a problem. She warned me it was of no use whatsoever and I needed to install a Pro version of security.

If I admit to being 'sold' Malwarebytes for the sum of (in British Pounds) almost ?300, you'll probably say, idiot - serves her right. Don't forget, it was about 3 am on New Year's Day, and I had been out ce... Read more

A:New Scam Alert: This is NOT Microsoft!

I'm not sure why anybody would fall for that scam. Warnings have been all over the net for a very long time.

Things I recommend.
1. Change all passwords to everything. Using a known clean computer. Not the one the stranger has had access to.

2. Call all banks and credit card companies and explain what happened and why you are changing all passwords. They should give more guidance.

3. At that point if it was my computer, I would do a Clean Install because no one knows what else has been done or installed in the computer. Things like key loggers.

After the Clean Install and updating along with installing your security programs that computer should be up and running and ready to use.

Jack

Read other 1 answers
RELEVANCY SCORE 51.2

Hello,
I am a bit concerned that I may have some malware on my machine. This is very late, and I should have posted here sooner, but I have had some reasons to hold off (such as some reassurances that I didn't have malware, but they were inconsistent, with some people saying to take some action). Anyway, over a year ago I built my PC. My PC did not have an optical drive, so I had to resort to contacting Microsoft for help on how to create a USB installer for Windows 8.1 (64-bit). I proceeded to go on Google and search for Microsoft's customer support phone number. However, I do not believe I found it on the Microsoft website.
 
Now, I have called a number to the supposed customer support for Microsoft and I followed the prompts to be directed to a technician who asked me if they could remote control my laptop and go through the process of downloading the files with me. They did not seem suspicious and even told me they were from India (seems like most scammers like to say they're from the US). They formatted my USB drive and the installer started downloading. They said they could stay on the phone line and remote control program and watch it download, but after about 30 minutes to an hour, I said I could just call them back if I needed anymore help. We hung up, and that was the end of that.
 
After the process was completed, I used the USB to install Windows 8.1 on my machine, installed drivers, Avast Free and other programs. Nothing seemed out of the ordinary on th... Read more

A:Microsoft Phone Scam?

Do you have the phone number? Me and a group of friends call these scammers (which I am pretty sure this was) and mess around with them and its a hoot. But keep in mind, Microsoft will never call you over the phone or ask you to call them over the phone via a popup. Did they use any of these programs/domains?
 
chat123.me
 
support.me
 
lmi1.com 
 
Those are all programs that scammers use to do take control of your PC and download files. Also, Microsoft technical support is based in St. Louis, MI. If it was not from there and sounded Indian, than chances are that it was a scam.

Read other 13 answers
RELEVANCY SCORE 51.2

My father recently fell for a microsoft "tech assistant" scam, where he blindly allowed the scammer remote access to his computer. We are unsure what the scammer did during the remote access. Since his computer is old, we can easily get a new one.
Problem is, we are unsure if this incident would compromise the safety of other laptops at home, using the same IP address as my dad's. Can someone advise?
 

Read other answers
RELEVANCY SCORE 51.2

Under the W8 Forum I (and others) have been assisting a Member who has apparently been scammed.

What I fail to understand is how this Member ended up on a scam website which resulted in a ruined system which needs to be completely rebuilt.

The Member contacted Microsoft (with a relatively minor problem relating to the MS Store) on what the Member describes as a valid and verified contact. I looked at that contact and agree that it certainly appears to be a valid MS contact. During the conversation with "Microsoft" the Member was given a link to an "engineer" - and this is where things went wrong. I resolved that link and found that it linked to a known Malware and Scam site.

My question is "where has this gone wrong.... ...."

It is IMPORTANT to note that this is NOT the typical Microsoft Support Desk scam. This is quite different but ends up with the same result.

The Thread can be found at the link below. Scroll down to Post #11 and then read the 6 Posts from #11 to #16.

http://forums.techguy.org/windows-8/1141536-2hrs-microsoft-tech-couldnt-fix.html

T.
 

A:Microsoft help results in a scam...??

Read other 6 answers
RELEVANCY SCORE 51.2

I just received this from < link removed by Dwarf > Someone using a hotmail account to announce a Microsoft Promotion does raise an eyebrow:

Microsoft Promotion Award Team
40 Ryecroft Way Stopsley
London,
United Kingdom.
FILE REF: HL/5564/12/08/MICS
BATCH: MC11/834/5PDH /EU

MICROSOFT WINNING NOTIFICATION.

We wish to congratulate you for being part of our winners selected this month. This promotion was set-up to encourage the active users of the Internet Microsoft Windows.
Hence we do believe with your winning prize, you will continue to be active and patronage to the Microsoft Windows. We wish to formally announce to you that you have successfully passed the requirements, statutory obligations, verifications, validations and satisfactory report Test conducted for all on line winners.

A winning cheque will be issued in your name by Microsoft Corporation board, You have therefore won the entire sum of ?350,000,00 {Three Hundred And Fifty housand Great British Pounds} and also a certificate of prize claims will be sent along side your winnings cheque.

Rev.Prince David
Microsoft Promotion Award Team
Email : < link removed by Dwarf >
You are advised to contact your Foreign Transfer Manager with the following details to avoid unnecessary delay and complications:

We write to officially notify you of this award and to advise you to contact the processing office immediately upon receipt of this message for more information concerning the verification, processin... Read more

A:A scam making use of the Microsoft name?

Yes, of course that's a scam.

Read other 10 answers
RELEVANCY SCORE 51.2

I purchased the office professional from office depot, I went home and attempted to download, when doing so it would not download. in the bottom right a person is on my computer asking if he can help. after another attempt I tried, then I requested help.
he called me and walked me through the steps and showed me that I had a zeus Trojan maleware. that is the reason the software would not down load.
was I scammed? he was from all day tech. how do they get on my computer while I am downloading the software?
thanks. now what do I do?
 

A:microsoft office scam

Read other 9 answers
RELEVANCY SCORE 51.2

Hi everyone,

My sister fell for the "your pc has viruses" phonecall scam. She entered a code on the logmein site and ran some stuff that she can't remember.

I'm trying to direct her to scan the pc from 100 miles away. At the moment I have her running a McAfee full scan. I've forbidden her from going online right now (or ever answering the phone again ) so even the McAfee is probably out of date. Has anyone else worked on a pc after this scam that can offer advice?

My problem is that normally I'd just go and download all of the stuff you guys recommend in the stickys and blast away at it. But the problem is 1) she'd have to go online, which I'm not sure is safe yet post-scam? and 2) she is very technically-challenged!

Apologies if this has been asked before, I did a search but I can only seem to find reports of people not falling for the same scam!

Thanks a million.
 

Read other answers
RELEVANCY SCORE 51.2

dad allowed takeover of computer remotely....advised to run combofix to help....got log...now what do we do???!!
 combofixlog.txt   9.94KB
  6 downloads*Moderator Edit: Moved topic from XP to the more appropriate forum. Combofix logs are allowed in MRL only. Also, Microsoft has no way of knowing your computer has issues or if it is infected. ~ Queen-Evie*

A:microsoft tech scam

Moved to Virus, Trojan, Spyware, and Malware Removal Logs as there is a ComboFix log posted.I deleted the prior response.

Read other 1 answers
RELEVANCY SCORE 51.2

I received a similar call yesterday and went along not thinking straight. I was eventually asked to go to www.secure.me not realising it was logmein allowing remote access. I did go as far as keying in the 6 digit pin but as soon as a connection was established I closed the chat box and hung up.

Now my question is whether my information has been compromised since I did not allow them to take control? I have disabled anything doing with lmi.exe on my firewall an disabled remote access.

Please help! Appreciate it..
 

A:Microsoft Scam logmein

Read other 11 answers
RELEVANCY SCORE 51.2

You ought to go to You Tube and listen, this is very funny. I watch them a lot. ( type in, computer scams ) but don't have any children around, there is a whole lot of swearing. When scammers call sometimes they get led on, one guy led them on a good 1/2 hour, then he said I got a Mac hahahaha then the scammer hung up. Seem,s like most live in India. One scammer even got Internet Tech. The IT guy told the scammer, why do you scam old people, you hate America? Have ever heard of not scamming. Try really working hahahaha. The scammers even called an IT guy from Malwarebytes by accident.
As you are very aware, never give them idiots a credit card number, or download anything from them, that's just remote acc. to your computer ( big trouble ). Thanks, Chuck
 

A:Scam Microsoft Calls

This is nothing new but of course a good reminder.

http://forums.techguy.org/general-security/1032161-fake-microsoft-phonecalls.html
 

Read other 3 answers
RELEVANCY SCORE 50.4

Mother-in-law (who was not aware of this) got scammed by a MICROSOFT error Phone Call...had her log onto the sight, they took over the computer and locked it or did something to the system. - she lives in FL I live in CT...she shipped the computer to me.1: She said her computer guy could not fix it - however she walked out with a new computer in less then 15min2: I am use to seeing computeres with Windows license key numbers on the side of the system, my HP has one, this one does not...even the HP laptop has one....3: So my question....is this  -- is there a way to boot this computer in safe mode and have it reinstall the OS from the HD?Also just as a side note I am very puzzled there is NO POWER box inside this sytem, its just a 9 volt power connector...is this something new...this box on the inside is alien to me....Thanks for any suggestions on how to go about doing this....I can do it, I have the skills ... but with out an OS and not wanting to repurchase the OS for it I think I might just be out of luck here.

A:HIT with a MICROSOFT phone Call SCAM

> Mother-in-law (who was not aware of this) got scammed by a MICROSOFT error Phone Call...had her log onto the site. That site holds "screen-sharing" software, allowing the scammer to have full control of the victim's computer.Obviously, that software has legitimate purposes, e.g., you logging-in to her computer, to fix things.So, because it can be useful, most anti-virus products do not "flag" it as "malicious software". > they took over the computer and locked it or did something to the system.  Computers can have multiple passwords:* when the computer is first powered-on,* when entering BIOS SETUP,* in the middle of Windows start-up, if the 'SYSKEY.EXE' program was executed by the scammer, to set a password. Of course, the scammer did not tell the password to her, or demanded ransom-money to reveal the password,* Windows logon password. > 1: She said her computer guy could not fix it - however she walked out with a new computer in less than 15min It is time for her to find better computer-guy. Note that none of the above passwords prevent you from mounting her disk-drive as a "slave" disk-drive on your computer, and copying her files/bookmarks/E-mails from the disk-drive. > 2: I am use to seeing computers with Windows license key numbers on the side of the system, my HP has one, this one does not...even the HP laptop has one.... It depends on the age of your computer. Some new computers have the product-key embe... Read more

Read other 1 answers
RELEVANCY SCORE 50.4

My grandfather got taken in by a Microsoft Windows Support Scam and I'm fairly certain that his laptop's got a bug that I can't get rid of.

What happened:

He got a popup (while using Internet Explorer and after downloading an Adobe update) that said there was a security issue and that he needed to call a number for Windows Firewall Service.
(I looked up the number and apparently other people have been taken in by this scam. Here it is on a Microsoft forum:
MICROSOFT TECH SUPPORT SCAM CALL - Microsoft Community)

This is what the Popup said:


Quote:




""windows firewall service has been stopped due to virus/adware on your computer. please visit www.scannow.com/support or call toll free 1 888 447 4192 for support. root-kits/spyware may have caused the security breach on your network location. call toll free 1 888 447 4192 for technical assistance."




So he called the number (1-888-447-4192) not knowing it was a scam and they said they were from Windows and that they needed remote access to his laptop to solve the security issue, which he gave them. (He said he did not give them any personal information, however.)

After he told me what happened, I checked out his laptop. He had about a dozen popups that wouldn't close and some malware programs were added, which I have removed.

Those programs were:
Knctr itibiti
One SystemCare
WebDiscover Browser
some kind of remote access/assistance program and a player ... Read more

Read other answers
RELEVANCY SCORE 50.4

My grandfather got taken in by a Microsoft Windows Support Scam and I'm fairly certain that his laptop's got a bug that I can't get rid of.

What happened:

He got a popup (while using Internet Explorer and after downloading an Adobe update) that said there was a security issue and that he needed to call a number for Windows Firewall Service.
(I looked up the number and apparently other people have been taken in by this scam. Here it is on a Microsoft forum:
http://answers.microsoft.com/en-us/...ca7-46e0-a856-4dba9529680c?db=5&page=2&auth=1

This is what the Popup said:

Quote:
""windows firewall service has been stopped due to virus/adware on your computer. please visitwww.scannow.com/support or call toll free 1 888 447 4192 for support. root-kits/spyware may have caused the security breach on your network location. call toll free 1 888 447 4192 for technical assistance."Click to expand...

So he called the number (1-888-447-4192) not knowing it was a scam and they said they were from Windows and that they needed remote access to his laptop to solve the security issue, which he gave them. (He said he did not give them any personal information, however.)

After he told me what happened, I checked out his laptop. He had about a dozen popups that wouldn't close and some malware programs were added, which I have removed.

Those programs were:
Knctr itibiti
One SystemCare
WebDiscover Browser
some kind of remote access/assistance p... Read more

Read other answers
RELEVANCY SCORE 50.4

This is a strange email from Microsoft. Anybody else receive it?

Here is the first part of it and yes I do use CCleaner.

"
Hello Windows Insider,

We?d like to invite you to participate in a pilot program designed to provide you with direct Microsoft support for your Windows 10 app compatibility issues.

For this pilot, we are focusing on the apps below. If you use any of the following applications, we want to hear from you:
Dropbox
CCleaner
Wish ? Shopping Made Fun
TeamViewer

By emailing us your feedback on these applications, our Microsoft app compatibility team will provide you with direct support on any issues you encounter. Here?s how to participate:
Set up your PC and run apps"
Click to expand...
 

Read other answers
RELEVANCY SCORE 50.4

HP 2000 NOTEBOOK 2D09WM
BITDEFENDER INTERNET SECURITY SUITE
MALWARE BYTES PRO
 
A friend told me last week that while surfing she got a blue screen that said contact Microsoft at a certain phone number. She exited internet explorer and turned the computer off. I got the computer and found nothing in scans and could not recreate it. 
 
She called last night and had the same thing happen.  I told her to just shut the lid on the laptop and I picked it up this morning.  I turned it on and IE was open.  It is a blue screen saying
 
WINDOWS WARNING ERRORS
 
0X000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING OPERATIONS
WINDOWS HEALTH IS CRITICAL
DO NOT RESTART
 
**I HAVE A PIC OF THE SCREEN IF YOU NEED**
 
Over this blue screen in a white pop up screen stating:
 
There is a .net frame work file missing du to some harmfull virus. (harmfull is spelled that way)
 
Deub malware error 895-system 32.exe failure
 
Please contact Microsoft technicians to rectify the issue. 
 
yada yada
 
Tollfree Helpline at 1-855-922-7632
 
and more text. 
 
***I HAVE A PORTION OF A PIC OF THIS***
 
The website address shows www.bluescreenerror  
 
 
 
 
 
I saw she was trying to access Youtube through a yahoo search.  I looked and noted that the first entry was not the real youtube link.  I took the chance and clicked that link and was able to recreate the blu... Read more

A:microsoft bluescreen scam - am i infected?

Hi there,What you described is indeed a tech support scam - the real Microsoft BSoD (for Windows 7) looks like this:If your friend closed the window and did not do anything, then she is safe. This is mainly an ad by tech support scammers trying to entice people into calling them and letting them have access to the computer.Regards,Alex

Read other 10 answers
RELEVANCY SCORE 50.4

Hello All,
We have several customers who have been receiving cold calls from india, offereing 'windows support' or 'microsoft support' services.
Usually the caller says they have been alerted that your machine is infected, and they need to take you through trouble shooting steps.
The pitch leads fairly quickly to you being offered a 'cure all' security package for $100 - 200.
The Guardian newspaper reported on this in March, and it has re-surfaced this week.

Please read the article below - it advises what can be done to cancel any trancastion you may enter into with these rogues !!

http://www.guardian.co.uk/technology/blog/2011/mar/01/microsoft-virus-scam-continues

Thanks & Regards Tim

A:Microsoft Support - Scam Callers

I am sorry but if anyone falls for this scam they deserve to lose their money so they can learn a simple lesson.

Read other 11 answers
RELEVANCY SCORE 50.4

My grandfather got taken in by a Microsoft Windows Support Scam and I'm fairly certain that his laptop's got a bug that I can't get rid of. 
 
What happened:
 
He got a popup (while using Internet Explorer and after downloading an Adobe update) that said there was a security issue and that he needed to call a number for Windows Firewall Service. 
(I looked up the number and apparently other people have been taken in by this scam. Here it is on a Microsoft forum:
http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/microsoft-tech-support-scam-call/52aac9a3-dca7-46e0-a856-4dba9529680c?db=5&page=2&auth=1)
 
This is what the Popup said:

""windows firewall service has been stopped due to virus/adware on your computer. please visit www.scannow.com/support or call toll free 1 888 447 4192 for support. root-kits/spyware may have caused the security breach on your network location. call toll free 1 888 447 4192 for technical assistance." 
 
 

 
So he called the number (1-888-447-4192) not knowing it was a scam and they said they were from Windows and that they needed remote access to his laptop to solve the security issue, which he gave them. (He said he did not give them any personal information, however.) 
 
After he told me what happened, I checked out his laptop. He had about a dozen popups that wouldn't close and some malware programs were added, which I have removed. 
 
Those programs w... Read more

A:Microsoft Tech Support Scam

Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 1 answers
RELEVANCY SCORE 50.4

I'm afraid that I have been scammed by "Microsoft Live Team" When I refused to pay they locked my computer and I can't get into it. can anyone assist me?
 

A:microsoft live team scam

Read other 9 answers
RELEVANCY SCORE 50.4

My father got a call from "Microsoft" saying he had a virus and they got him to go to a website. After he realised it was a scam his computer screen fliped upside down and he can no longer log into his computer. Please can someone help me fix this

A:Microsoft Scam - now i cant log in and my screen is upside down

Avoid Phone Scams | Cybercriminal Tech Support Scam | Security Threats

If you have access to another machine, you could try booting and scanning Dad's machine after you create the WDO boot. I'm sure someone nearby will let you create the disc, or a library perhaps
What is Windows Defender Offline?

Read other 8 answers
RELEVANCY SCORE 50.4

My grandfather got taken in by a Microsoft Windows Support Scam and I'm fairly certain that his laptop's got a bug that I can't get rid of.

What happened:

He got a popup (while using Internet Explorer and after downloading an Adobe update) that said there was a security issue and that he needed to call a number for Windows Firewall Service.
(I looked up the number and apparently other people have been taken in by this scam. Here it is on a Microsoft forum:
MICROSOFT TECH SUPPORT SCAM CALL - Microsoft Community)

This is what the Popup said:


Quote:




""windows firewall service has been stopped due to virus/adware on your computer. please visit www.scannow.com/support or call toll free 1 888 447 4192 for support. root-kits/spyware may have caused the security breach on your network location. call toll free 1 888 447 4192 for technical assistance."




So he called the number (1-888-447-4192) not knowing it was a scam and they said they were from Windows and that they needed remote access to his laptop to solve the security issue, which he gave them. (He said he did not give them any personal information, however.)

After he told me what happened, I checked out his laptop. He had about a dozen popups that wouldn't close and some malware programs were added, which I have removed.

Those programs were:
Knctr itibiti
One SystemCare
WebDiscover Browser
some kind of remote access/assistance program and a player ... Read more

A:Microsoft Tech Support Scam

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Registry cleaners(Advanced SystemCare, One SystemCare, etc.) are usually more harmful than helpful. Don't use them.

Our colleague miekiemoes has an excellent writeup here

------------------------------------------------------

See if FRST64.exe will run in Normal Mode.

Please download Farbar Recovery Scan Tool and save it to your desktop.Double-click FRST64 to run it. When the tool opens click Yes to the disclaimer.
Make sure the Addition.txt button is ticked.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply.
------------------------------------------------------

Read other 19 answers
RELEVANCY SCORE 50

I was unable to run the 'sysinfo' file on the damaged system. I couldn't get it onto the system so it would only read the thumb drive.

I was able to run the hijack software but have not listed it since I believe it was suggested not to do so.

this is a continuation of my post under migrated drive and now can't get it to work. an issue I was being helped with by boatmaster. he asked me to include a link. wasn't quite sure how to do that.

I was able to take screen shots of what AVG found but said they could not remove. I will send those if asked.

It's very hard to get info from that system other than in screenshot mode.

please advise.
 

A:victim of 'microsoft' scam now can't get system to work

You already have another thread in this forum. Please do not create more than one thread for the same issue.

Please continue in your other thread and post the HijackThis log.

Closing duplicate.
 

Read other 1 answers
RELEVANCY SCORE 50

Hello everyone,

An elderly relative of mine recently fell for the 'this is Microsoft and your computer has a virus' phone call scam. She gave them remote access to her PC, and when she didn't pay, they essentially locked her out. I now have her machine, and am trying to undo the damage. First, they put on a start up sys key password, which I have managed to remove. Where I'm having trouble is that they also added an extra administrator account, or just renamed her account to Compaq_Administrator. With some software on a bootable CD, I have reset the passwords on all accounts on this machine to <blank>. I checked and re-checked that the passwords were set to <blank> However, when I reboot, the login screen for just the Compaq_Administrator account comes up, and still tells me to enter the correct password. They put the password hint as 'asdf', which of course is the first four keys on the middle row of the left side of the keyboard..just for their convenience I guess. So, I'm stuck.

Her machine is an old Compaq desk top that runs Windows XP Media Center Edition.

I am trying to preserve her data obviously, but also her OS. I can retrieve her data, but she does not have rescue/restore disks to re-install her OS. I don't remember seeing a restore option in the HD itself (while in safe mode)

She can't ever seem to afford a new PC , so I have been keeping this one alive and kicking for her for years.

I would appreciate any suggestions...thank you :-)

A:[SOLVED] Microsoft Scam, Two Administrator Accounts

In "Computer" is there a D:? It could be a recovery partition.

Read other 19 answers
RELEVANCY SCORE 50

I have not seen this mentioned any wher on the site so thought i should post a message.

People are receiving phone calls from people claiming to be from Microsoft telling them that they have a virus. I believe this is limited to the UK but may be wrong.

These phone calls are a scam and the instructions that they give you should be ignored. Microsoft dont care if you get a virus and would not call you to let you know you had one.

I have had a few customers in the Selby area of the UK call me in regards to this as they were worried that they had a problem.

The Guardian published an article here : http://www.guardian.co.uk/world/2010/jul/18/phone-scam-india-call-centres.

Mods - Sorry if this is in the wrong place i wanted to alert people to the scam to prevent them further issues.
 

A:Warning: Scam Phone calls from Microsoft

we had one of our sales people get hit with this on their cell number, and I ended up speaking to the other end. It's 'windows service center', I could not get them to verify that they represented MS.

And they said that their name was Jane Austen, as the author.

Least they got some good taste in writing.
 

Read other 1 answers
RELEVANCY SCORE 50

I am helping someone who fell for the microsoft phone scam, let them login remotely and install who knows what.  Since then they have been having credit card issues.
I found Yontoo Extentions and Add-ons in IE and Chrome.  There is no Uninstaller in the control panel.  I've run a full scan with Malwarebytes and Microsoft Security Essentials and find nothing.
 
Everything I read says Yontoo is really bad, uninstall it and then run Malwarebytes, but neither worked for me.
 
She is running windows 7 Home Premium
 
Any help you could provide as to the next step would be appreciated.  Thanks

A:Help fixing Microsoft Phone Scam and Yontoo

Hello and welcome. Be sure they advise their banks of the infection.  Please run these next. MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.>>>>>>Please download Rkill by Grinler and save it to your desktop.Do not reboot the computer, you will need to run the application again.>>>>Please download AdwCleaner by Xplode onto your desktop.•Close all open programs and internet browsers.•Double click on adwcleaner.exe to run the tool.•Click on Delete.•Confirm each time with Ok.•You will be prompted to restart your computer. A text file will open after the restart.•Please post the contents of that logfile with your next reply.•You can find the logfile at C:\AdwCleaner[S1].txt as well.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ra... Read more

Read other 1 answers
RELEVANCY SCORE 50

As title suggest. She was phoned up and allowed the guy to instruct her to enable and accept Remote Access.
 
I know how her laptop here and have disabled remote access. Apparently he had access for at least 15mins.
 
I'm about to stick some programs on a usb to run on it. 
 
She's running WIndows 8.1
 
ASWMBR.exe
 
TDSSKiller
 
(Combo Fix doesn't work on Win 8.1)
 
What else should I do ?
 
Thanks
 

A:Friends Mum Tricked by Microsoft Phone Scam

Hello gaallaI would say as there maybe personal financials on here that we get a deeper look and be sure there are no access points.Please follow this Preparation Guide, do steps 6,7 and 8 and post in a new topic.Let me know if all went well.

Read other 10 answers
RELEVANCY SCORE 50

hi all, i need some help with a problem i have had . i came home from work to find that my partner had given control of my desk computer to a company called PCMiles, they had rang on landline claiming to be a partner company with microsoft and need access to computer to fix errors and fix weak ip address ??? they had control for around an hour , i looked over at what they had done and found my antivirus was turned off and windows defender was inactive, alarm bells rang.i then scanned with win defender and panda internet security 2011 found many malware which win defender deleted .i imediatley changed passwords for web sites with my "clean laptop". i reinstalled windows 7 (format and fresh install). i just need confirmation that there are no malware on computer. many thanks guys
 

A:company claiming to be microsoft partner ,SCAM ?

Read other 6 answers
RELEVANCY SCORE 50

You're probably familiar wih this scam. It wants a code number entered, a new password set and won't let me into my account. The scam software itself, malfunctions. Anyway, I can't access my hotmail. How do I fix this.

The TSG SysInfo isn't functioning either.
 

A:Solved: Microsoft hotmail account Scam

Read other 12 answers
RELEVANCY SCORE 50

I just got this email and am wondering if its real. Yes that's my email address, However I do not have a Microsoft account, Why would I?
 
No I did not click anything.
 

A:Microsoft account security alert( Is this a scam)

It's fake. Google for "microsoft account team" (with quotes) and you'll find several examples.
 
You could also look at the sender.
 
If you post the source of the e-mail, I'll show you other signs (warning: this source contains data you might not want to disclose).

Read other 46 answers
RELEVANCY SCORE 50

The title pretty much says it all. What I have been seeing for some time now is a lot of my clients that click on ads in the right hand advertising panel of the facebook page have ended up with malware on their systems and big warnings on the screen to call a toll free number to fix their system and when they do are told it is Microsoft tech support which it is not and they want access to your system. If you give it to them you are then really in a jackpot of a problem. So just a warning, I tell my clients that it is a good rule of thumb NOT to click on anything in the right pane of their page as you have no clue which ones will cause this issue. Of late mostly the ones about stars dying or having other problems seem to be the most likely ones but I have seen it in others as well. One would think that facebook would do something about these type of things but sadly they are about the almighty dollar and don't seem to care. So every one please watch what you click on facebook. Especially if it seems to good to be true because if so it usually is.

A:The Facebook Microsoft Tech Support Scam.

Unsolicited phone calls, browser pop-ups and emails (aka Tech Support Scamming) from "so-called Support Techs" advising "your computer is infected with malware", “All Your Files Are Encrypted" and other fake "alert messages" has become an increasing common and prolific scam tactic over the past several years. The scams may involve web pages with screenshots of fake anti-virus software displaying warnings of bogus malware infections, fake ransomware and fake BSOD which include a tech support phone number to call in order to fix the problem. More nefarious scammers will talk their victims into allowing them remote control access of the computer so they can install a Remote Access Trojan in order to steal passwords and other sensitive personal information which could then be used to access bank accounts or steal a person's identity.Microsoft does not make unsolicited phone calls, display pop-up alerts in your browser to call a support number or send unsolicited email messages to request personal or financial information or to fix your computer.If you have not done so already, you may want to read Beware of Phony Emails & Tech Support Scams.

Read other 1 answers
RELEVANCY SCORE 50

The title pretty much says it all. What I have been seeing for some time now is a lot of my clients that click on ads in the right hand advertising panel of the facebook page have ended up with malware on their systems and big warnings on the screen to call a toll free number to fix their system and when they do are told it is Microsoft tech support which it is not and they want access to your system. If you give it to them you are then really in a jackpot of a problem. So just a warning, I tell my clients that it is a good rule of thumb NOT to click on anything in the right pane of their page as you have no clue which ones will cause this issue. Of late mostly the ones about stars dying or having other problems seem to be the most likely ones but I have seen it in others as well. One would think that facebook would do something about these type of things but sadly they are about the almighty dollar and don't seem to care. So every one please watch what you click on facebook. Especially if it seems to good to be true because if so it usually is.

A:The Facebook Microsoft Tech Support Scam.

Unsolicited phone calls, browser pop-ups and emails (aka Tech Support Scamming) from "so-called Support Techs" advising "your computer is infected with malware", “All Your Files Are Encrypted" and other fake "alert messages" has become an increasing common and prolific scam tactic over the past several years. The scams may involve web pages with screenshots of fake anti-virus software displaying warnings of bogus malware infections, fake ransomware and fake BSOD which include a tech support phone number to call in order to fix the problem. More nefarious scammers will talk their victims into allowing them remote control access of the computer so they can install a Remote Access Trojan in order to steal passwords and other sensitive personal information which could then be used to access bank accounts or steal a person's identity.Microsoft does not make unsolicited phone calls, display pop-up alerts in your browser to call a support number or send unsolicited email messages to request personal or financial information or to fix your computer.If you have not done so already, you may want to read Beware of Phony Emails & Tech Support Scams.

Read other 1 answers
RELEVANCY SCORE 49.6

Hi, I have been given a pc to try to clean after a friend of a friend talked with a so called Microsoft technician for and hour and gave them remote access to the pc. The pc has been turned off and upon reboot a windows loading splash screen comes on then goes to an old style windows security log in box for a password. After speaking to the friend there has never been a password on the pc so I can only assume it's part of the virus?
I have downloaded kaspersky rescue cd and run that from boot up and no better.
I have run windows defender offline cd and no better.
You cannot get into windows repair.
Safe mode displays same log in box.
Before I go further I would like to know if there is anything I should be doing ?
Pc is a 64 bit win 7
Many thanks for any assistance.
Ian

A:Post microsoft phone call scam no boot

if you have the original windows cd that came with the computer boot from that and do a system restore to an earlier date

Read other 4 answers
RELEVANCY SCORE 48.8

Hello All,
 
          I am helping a cousin who recently fell victim to the Microsoft Impersonation Scam.   I have managed to get the computer itself entirely back to the land of the living.  It is a Windows 7 Home Premium 64-bit and there are two separate users on the machine.
 
          For the user who was not the one logged in when the scam attack took place all documents seem to be fine.  This is not true, though, for the MS-Word documents under the user who was logged in, and it doesn't matter whether they're .docx, .doc, or .rtf except in one small detail.  If you attempt to open a .doc file or a .rtf you get the following dialog:

 
If you attempt to open a .docx you get a message that it cannot be opened because the file is corrupt.  After you click OK you get a follow up dialog that says there is readable content and you can try to recover it if you trust the file.   On the machine that was originally attacked I thought, "What the heck?," and tried to recover - it just comes right back to the "file is corrupt message."   I have no intention of trying this on my own laptop, though I have tried opening the files in MS-Word 2010 (which is what the .docx files on the other machine were created with) and the results are exactly the same.
 
Does anyone know how these vermin corrupt MS-Word document files and whet... Read more

A:MS-Word Documents Corrupted Post-Microsoft-Impersonation-Scam

Don't wanna claim that this is the case but that problems seems identical in case with malware that encrypts all files on PC and locks them for good. If you have backup it is possible to get files back. In other cases if nothing is changed no one can help you anymore. Would be best to check PC by someone from forum who cleans malware but he/she can't get you files back if I am correct about this.

Read other 3 answers