Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Friend fell for Microsoft India tech support scam - are all her hard drives corrupted?
New Posts  All Forums:Forum Nav:

Friend fell for Microsoft India tech support scam - are all her hard drives corrupted? - Page 2

post #11 of 23
In the future I would recommend a free app called Hitman Pro. Create the programs bootable USB device. Boot up from the USB, update from Internet, and run the cleanup utilities. I have done this for several of my customers and have had no problems removing this ransomware. You may have to reinstall the OS anyway if any critical system files are changed. To successfully remove malware a clean boot device is needed. Otherwise a full HDD format, OS reload, OS update, App install and personalization will have to be done. Best of luck to you...biggrin.gif
Big Blue
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 2500K P8P67 DELUXE EVGA GTX 980 FTW G.Skill 
Hard DriveOptical DriveCoolingOS
Western Digital WD1002FAEX-00Z3A0 ASUS DRW-24B1ST SWIFTECH H20-320 EDGE HD APOGEE HD WATER BLOCK WIN7 64bit 
MonitorPowerCaseMouse
ASUS VE258Q THERMALTAKE TOUGHPOWER XT 775W APEVIA X JUPITER S TYPE METALLIC BLUE RAZER DEATHADDER 3500dpi 
AudioOther
Creative Soundblaster Z SSD Samsung 840 EVO 250 GB for OS 
  hide details  
Reply
Big Blue
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5 2500K P8P67 DELUXE EVGA GTX 980 FTW G.Skill 
Hard DriveOptical DriveCoolingOS
Western Digital WD1002FAEX-00Z3A0 ASUS DRW-24B1ST SWIFTECH H20-320 EDGE HD APOGEE HD WATER BLOCK WIN7 64bit 
MonitorPowerCaseMouse
ASUS VE258Q THERMALTAKE TOUGHPOWER XT 775W APEVIA X JUPITER S TYPE METALLIC BLUE RAZER DEATHADDER 3500dpi 
AudioOther
Creative Soundblaster Z SSD Samsung 840 EVO 250 GB for OS 
  hide details  
Reply
post #12 of 23
I'm kind of surprise that people are still naive enough to fall for something like that. You'd think though, that if you succeeded you wouldn't want to alert the end user that they have been hacked by installing password blockers.
Bandaids
(15 items)
 
  
MotherboardGraphicsHard DriveOptical Drive
Asrock Z77 Extreme 6 GTX 580 WD 10EALX ASUS DRW 
CoolingOSMonitorMonitor
Havik 140 Windows 7 Ultimate ASUS VH228T Toshiba 32RV600A 
MonitorKeyboardPowerCase
Compaq S2021a Microsoft Wired Keyboard 600 Aero Cool Strike X 1100w Asus Antec 
MouseMouse PadAudio
Logitech MX518 Mionix Ensis 320 Creative 2.1 
  hide details  
Reply
Bandaids
(15 items)
 
  
MotherboardGraphicsHard DriveOptical Drive
Asrock Z77 Extreme 6 GTX 580 WD 10EALX ASUS DRW 
CoolingOSMonitorMonitor
Havik 140 Windows 7 Ultimate ASUS VH228T Toshiba 32RV600A 
MonitorKeyboardPowerCase
Compaq S2021a Microsoft Wired Keyboard 600 Aero Cool Strike X 1100w Asus Antec 
MouseMouse PadAudio
Logitech MX518 Mionix Ensis 320 Creative 2.1 
  hide details  
Reply
post #13 of 23
Thread Starter 
Quote:
Originally Posted by nooboc2012 View Post

I'm kind of surprise that people are still naive enough to fall for something like that. You'd think though, that if you succeeded you wouldn't want to alert the end user that they have been hacked by installing password blockers.

She was exhausted from a week of hard work and bad news (and is 68). Made her vulnerable. The password that was installed is ransomware just like Essanbee said.
They want $150 to remove all the bad things "they found". Probably would not do anything accept take the money.
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
post #14 of 23
May be helpful to stop the phone calls.

I know someone who fell for this scam and they constantly had phone calls afterwards.

She used to turn her router off and the calls stopped, when she turned it on the phone calls continued.

Could the scammers have installed something on the router?

She had the router wiped to factory settings and the calls stopped.

Hope this advise helps her out.
First Build
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q6700 @ 3.4Ghz Asus Rampage Formula 4870x2 4GB Crucial Ballistix 800Mhz 
Hard DriveOptical DriveOSMonitor
30gb ocz vertex Blueray player Windows 7 rc 64 bit 24" lg 
PowerCase
Corsair 1000 Modular Antec 900 
  hide details  
Reply
First Build
(13 items)
 
  
CPUMotherboardGraphicsRAM
Q6700 @ 3.4Ghz Asus Rampage Formula 4870x2 4GB Crucial Ballistix 800Mhz 
Hard DriveOptical DriveOSMonitor
30gb ocz vertex Blueray player Windows 7 rc 64 bit 24" lg 
PowerCase
Corsair 1000 Modular Antec 900 
  hide details  
Reply
post #15 of 23
Thread Starter 
Danielhufton - Router. Interesting. I will check into it.
Thanks thumb.gif
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
post #16 of 23
Aw man. I had them call me about a year ago. Told me to open the event viewer but it was very important that I did NOT click on any of the hundreds of errors and warnings on the log as they would release virus' and trojans and adware and sadware and etc.... Screwed him around for a while got bored and hung up. And the guy actually called me back 3 times!!!! And I thought he was smart and had realized that I had known it was a scam.
Phantom
(15 items)
 
  
CPUMotherboardGraphicsRAM
i- 2500k @ 4.5Ghz ASUS P8Z68-V Pro/Gen3 MSI Gaming 4G GTX 980 G.SKILL Ripjaws X Series 8GB 2x4 
Hard DriveOptical DriveCoolingOS
Crucial M-4 256GB ASUS DRW Cooler Master Hyper 212 Evo+ Win 7 Home 
MonitorKeyboardPowerCase
ViewSonic VX2453mh-LED 23.6"  Razer BlackWidow NZXT Hale90 850W NZXT Phantom Black w/ Orange Trim 
MouseMouse PadAudio
Logitech G400 Steelseries S&S Creative Titanium HD 
  hide details  
Reply
Phantom
(15 items)
 
  
CPUMotherboardGraphicsRAM
i- 2500k @ 4.5Ghz ASUS P8Z68-V Pro/Gen3 MSI Gaming 4G GTX 980 G.SKILL Ripjaws X Series 8GB 2x4 
Hard DriveOptical DriveCoolingOS
Crucial M-4 256GB ASUS DRW Cooler Master Hyper 212 Evo+ Win 7 Home 
MonitorKeyboardPowerCase
ViewSonic VX2453mh-LED 23.6"  Razer BlackWidow NZXT Hale90 850W NZXT Phantom Black w/ Orange Trim 
MouseMouse PadAudio
Logitech G400 Steelseries S&S Creative Titanium HD 
  hide details  
Reply
post #17 of 23
My old man keeps them to the very end of the script only to tell them he doesn't own a computer. On one occasion the guy on the other end got mad and unleashed.

Who gives these people jobs? Honestly?
Bandaids
(15 items)
 
  
MotherboardGraphicsHard DriveOptical Drive
Asrock Z77 Extreme 6 GTX 580 WD 10EALX ASUS DRW 
CoolingOSMonitorMonitor
Havik 140 Windows 7 Ultimate ASUS VH228T Toshiba 32RV600A 
MonitorKeyboardPowerCase
Compaq S2021a Microsoft Wired Keyboard 600 Aero Cool Strike X 1100w Asus Antec 
MouseMouse PadAudio
Logitech MX518 Mionix Ensis 320 Creative 2.1 
  hide details  
Reply
Bandaids
(15 items)
 
  
MotherboardGraphicsHard DriveOptical Drive
Asrock Z77 Extreme 6 GTX 580 WD 10EALX ASUS DRW 
CoolingOSMonitorMonitor
Havik 140 Windows 7 Ultimate ASUS VH228T Toshiba 32RV600A 
MonitorKeyboardPowerCase
Compaq S2021a Microsoft Wired Keyboard 600 Aero Cool Strike X 1100w Asus Antec 
MouseMouse PadAudio
Logitech MX518 Mionix Ensis 320 Creative 2.1 
  hide details  
Reply
post #18 of 23
Thread Starter 
Quote:
Originally Posted by nooboc2012 View Post

My old man keeps them to the very end of the script only to tell them he doesn't own a computer. On one occasion the guy on the other end got mad and unleashed.

Who gives these people jobs? Honestly?

That's good! thumb.gif


If they ever call here I will try to waste as much of their time as possible.
I like to put telemarketers on hold, make survey people wait while I attend to something urgent, etc.
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
Mild Mod
(18 items)
 
  
CPUMotherboardGraphicsRAM
i7-5930k 4.5Ghz @1.331v Asus X99-A EVGA GTX1070 SC 16Gb Gskill DDR4-2400 
Hard DriveOptical DriveCoolingCooling
960 EVO, 850 Pro, WD Blue SSD's, 2 Cav Blacks Asus HWLabs 280mm SR-1 and GTX120 mm radiators EK GPU waterblock and backplate 
CoolingOSMonitorKeyboard
EK Supremacy EVO cpu block W7 64 Pro Dell U3011  Razer BlackWidow Ultimate 
PowerCaseMouseAudio
Corsair AX850 Corsair 650d Modded SteelSeries Sensei Raw (heat orange) Edifier R2000DB and Sennheiser HD555 
Audio
Creative Soundblaster Z 
  hide details  
Reply
post #19 of 23
Last time one called my house I gave the phone to my 4 year old cousin. They have never called back.
post #20 of 23
The fix requires editing the registry hives, at least all the times I've seen it and had to fix it without a reformat. Most times it's as simple as replacing the SAM, SOFTWARE, SYSTEM, etc registry hives with the backups in the RegBack folder, other times it's much more complex.
    
CPUMotherboardGraphicsGraphics
i7-6700k @ 4.6ghz ASUS Maximus VIII Hero Nvidia GTX 1080 Founders Edition Nvidia GTX 1080 Founders Edition 
RAMHard DriveHard DriveHard Drive
G.SKILL Ripjaws V DDR4.3200 2x8GB Samsung 950 Pro M2 SSD Samsung 850 Evo SSD Samsung 850 Pro SSD 
Optical DriveCoolingOSMonitor
Why??? Swiftech H240 X2 Windows 10 Pro Insider Build x64 ASUS ROG 27" P278Q 
MonitorMonitorKeyboardPower
ASUS ROG 27" P278Q ASUS ROG 27" P278Q Razer Blackwidow Ultimate EVGA G2 750W 
CaseMouseMouse PadAudio
Corsair 750D Logitech G600 Why??? Onboard Audio For Now 
  hide details  
Reply
    
CPUMotherboardGraphicsGraphics
i7-6700k @ 4.6ghz ASUS Maximus VIII Hero Nvidia GTX 1080 Founders Edition Nvidia GTX 1080 Founders Edition 
RAMHard DriveHard DriveHard Drive
G.SKILL Ripjaws V DDR4.3200 2x8GB Samsung 950 Pro M2 SSD Samsung 850 Evo SSD Samsung 850 Pro SSD 
Optical DriveCoolingOSMonitor
Why??? Swiftech H240 X2 Windows 10 Pro Insider Build x64 ASUS ROG 27" P278Q 
MonitorMonitorKeyboardPower
ASUS ROG 27" P278Q ASUS ROG 27" P278Q Razer Blackwidow Ultimate EVGA G2 750W 
CaseMouseMouse PadAudio
Corsair 750D Logitech G600 Why??? Onboard Audio For Now 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Operating Systems
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Friend fell for Microsoft India tech support scam - are all her hard drives corrupted?