Tech Support Scams – Help & Resource Page

Herbalist Dr MziziMkavu

JF-Expert Member
Joined
Feb 3, 2009
Posts
43,039
Reaction score
34,754
Hello, we are calling from Windows and your computer looks like it is infected. Our Microsoft Certified Technician can fix it for you.
Sound familiar? Whether you have just been scammed or simply want to find out more on the topic, you have come to the right place.
Tech support scams are a million-dollar industry and have been around since 2008. Every single day, innocent people are tricked into spending hundreds of dollars on non-existent computer problems.
There is no sign of these scams slowing down despite severalactions taken by the Federal Trade Commission.
Perhaps even worse, companies right here in North America are now pulling the same tricks and taking advantage of existing and prospect customers replying to online ads.
Since we wrote our very first blog post on the subject and subsequent articles (A look behind the curtain, Turning the tables), we've received much feedback and many people have shared their own experiences. We believe tech support scams are despicable and need to be exposed for the greater good.
The purpose of this page is to gather all the information we have collected over time into one place which you can use as a goto resource when you need it.



Cold calls from fake Microsoft (etc) agents


Usually from India and operating out of boiler rooms, these scammers call people in the U.S, Canada, the UK, and Australia whom they find in the phone directory.
The scam is straightforward: pretend to be calling from Microsoft, gain remote control of the machine, trick the victim with fake error reports and collect the money.
If you ever get a call from a Microsoft or Windows tech support agent out of the blue, the best thing to do is simply hang up. Scammers like to use VoIP technology so their actual number and location are hidden. Their calls are almost free which is why they can do this 24/7.
As per Microsoft: "There are some cases where Microsoft will work with your Internet service provider and call you to fix a malware-infected computer-such as during the recent cleanup effort begun in our botnet takedown actions. These calls will be made by someone with whom you can verify you already are a customer. You will never receive a legitimate call from Microsoft or our partners to charge you for computer fixes."

Toll-Free Numbers (TFN) for fraudulent tech support companies


Located in India but also in the US, these companies heavily advertise on popular search engines as well as websites with high traffic. People call them for assistance and get fooled with similar techniques employed by Indian cold callers.
Another source for these companies comes from some of their existing customers or customers of parent companies sent to them. The remote technician upsells the customer who only came to activate their software but ends up forking hundreds of dollars on "Windows support".
If you decide to call in for remote computer assistance, you need to be very careful about which company you are going to deal with. Simply picking the top ad on a search results page could end very badly.
Unfortunately, the company or technician being from the US is not a guarantee for honest service. Many businesses in the US are using dirty tricks to take advantage of people, with the unsavvy and elderly as their prime targets.
If you don't feel comfortable doing this online, brick and mortar computer repair shops are a good alternative.

Fake pop ups claiming your computer is infected (reminding of FakeAV) are a good way for scammers to reel in innocent victims:
​
A new trend shows that crooks are using phishing scams as a ruse to get people to phone in, not only stealing their credentials but also claiming their account was suspended:
​
Remote access


The ‘technician' requests to have remote access to your computer (taking control of it) and may use one of the following programs. Note that these applications are perfectly legitimate and used daily for good reasons. However, it is important to remember that if you run remote login software you are effectively giving a complete stranger total control of your computer.

​

>> Report fraudulent use of remote login software.
There are too many other applications that are used for remote support to list them all here. They pretty much do the same thing which is to provide direct access to your computer from anywhere in the world.

Tricks of the trade


Once logged into your computer, the remote technician will attempt to trick you by fabricating errors or even viruses on your computer. They like to use the default Windows tools and turn them against you, hoping you'll get scared and follow up their directions.
The Event Viewer (eventvwr)


even on Windows 8:

"These errors are viruses or serious damage to the backend of your PC. If not taken care of immediately, you will lose your computer."

The Event Viewer is an application that aggregates all of the log files from your computer. It is traditionally used by system administrators to diagnose certain errors. However, most events are harmless notifications.

The System Configuration Utility (msconfig)


"There are many programs that are stopped, indicating some serious damage to the backend of your computer and poor performance."

It is perfectly normal to have services that are stopped. In fact, you can actually speed up the boot time of your PC by disabling unneeded start up programs.

The Task Manager (CPU ‘spikes')


"These spikes are dangerous for your PC's health. Just like your heart rate, they should not go up. Your PC could suffer some irreparable damage."

When your PC is active, you will see the CPU usage go up and down constantly. What would not be good is if the CPU was pegged at 100% utilization all of the time. This is not the case here.

The erratic CPU


"Your CPU usage is running very erratic." This is similar as the one above, except the technician is running something to do this.
Actually this type of behavior is not good (if it was really your computer doing this, rather than someone artificially triggering it).
The Resource Monitor


"Let me run a diagnostic on your computer. It will take some time so you can go make yourself a coup of tea if you'd like."
The technician uses this Windows feature to simulate a diagnostic, while in fact he is ‘helping' other customers. While this tool can be extremely useful, here it is just used for ‘show'.
The System Information (msinfo32)


"These are critical "Windows Errors". You need to buy the software warranty to fix them."
Again, error logs (which all computers have) should not be translated into poor performance or malware without actually reviewing them one by one.
The Prefetch files


"These are damaged programs that cannot be deleted or even worse, viruses! You need to clean up your PC now!"
These are files that correspond to applications you often use. Windows saves them in there so that next time you launch those applications they start faster.
The restore from trash trick


"Look: I am going to delete all these files. [waits a few seconds…]. And see they all came back!"
There is a keyboard shortcut to undo the last action (in this case delete). It is Ctrl+Z. Of course the victim sees nothing because it's a shortcut.
The Temporary files (%temp%)


"These are infected files with worms, trojans and viruses. The disk is full of them."
Simply because a temporary file cannot be deleted does not mean it's a virus. It could be in use by any currently running application.
The Fake scanners


"This scan shows several viruses that were found by our security scanner. They have infected your registry."
This program is essentially a fake antivirus, stuffed with made up detections meant to alarm you.

Source.https://blog.malwarebytes.org/tech-support-scams/
 
This program is essentially a fake antivirus, stuffed with made up detections meant to alarm you.

The dir and tree commands



“These two commands perform a full virus scan on your computer and will report any infected file.”

These are DOS commands that list directory contents and paths. They have absolutely nothing to do with scanning for malware.

The custom Virus message


“Following the scan, we found 42% of your files are infected, including a Zeus Trojan. Windows is at high risk.”

This message was typed by the scammers and then pasted on the command prompt. It is totally fake.

The red Command-Line Terminal


“Look at all these malware infections in red. All of your files have been compromised and will be destroyed.”

The Windows Terminal can be customized to have different font colors as well as background colors. Red looks scary…

The ‘ping’ (on Mac OS X)


“We tested the protection on your Mac and found that there isn’t any. You need to buy our antivirus right now because you are going to get infected.”

This is an abuse of the ‘ping’ command, something meant to check if you are properly connected to the Internet or see if a website is responding. It has nothing to do with protection on your Mac.

The netstat command


“Hackers have infiltrated your computer, they are stealing your files doing cybercrime!!”

This is a command to display network connections (incoming, outgoing) but you can’t necessarily deduce these are “hackers”.

The online glossary or Wikipedia trick



“It’s not just me saying that there are viruses and trojans on your computer. Check these online resources as well.”

Leveraging glossaries or reference sites is a clever trick to borrow legitimacy to certain claims. If such or such site says it’s true then it must be… or not.

The Network Access Protection (NAP)


“Your network protection is disabled. All the hackers are already inside your computer.”

The Network Access Protection is a feature that mostly applies to PCs that connect to a domain. It ensures they adhere to safety standards. If this is your one and only computer, NAP should be left Off.

The notepad trick


“Can you read this? Does this make sense to you? No. The computer cannot understand this file. It is like alien words.”

Certain files are not meant to be read with notepad. In particular, executable files need special tools to read their ‘sections’. Therefore, it is perfectly normal that this files cannot be read as ‘text’.

The Power Efficiency report (powercfg energy)


“Your computer’s battery is going to fail very soon. It might even catch on fire if you don’t do something about it right now! ”

This command can generate a report to help users optimize their battery (useful on a laptop) and detect non optimal settings to save power, etc.. Source.https://blog.malwarebytes.org/tech-support-scams/
 
The (value not set) registry trick

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] [/COLOR]
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] “Your network is not working properly as you can see it says: value not set and default. ”[/COLOR]

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] The network is working just fine. Scammers will use the registry editor to show empty keys and conclude your security is at risk.[/COLOR]

The Process Explorer error

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] [/COLOR]
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] “We need to manually remove the infected entries and delete all the error files from your computer”[/COLOR]

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] This [Error opening process] label happens because the user ran Process Explorer with limited privileges. It has nothing to do with errors on the computer.[/COLOR]

The digital certificates

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] [/COLOR]
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] “Do you see the untrusted publishers? These are trying to compromise each and everything.”[/COLOR]

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848] These are normal and although the ‘friendly name’ is deceiving, those revoked certificates are used by your browser to protect you from untrusted sites.[/COLOR]

Getting help (damage control)


[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]Getting scammed is one of the worst feelings to experience. In many ways you feel like you have been violated and are really angry to have let your guard down. Perhaps you are even shocked and scared and don’t really know what to do now. The following tips will hopefully provide you with some guidance.[/COLOR]
If you already let them in


  • Revoke remote access (if unsure, restart your computer). That should cut the remote session and kick them out of your PC.
  • Scan your computer for malware. The miscreants may have installed password stealers or other Trojans to capture your keystrokes. Use a program such as Malwarebytes Anti-Malware to quickly identify and remove threats.
  • Change all your passwords (Windows password, email, banking, etc).
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]In some cases (you did not pay or called them names), scammers will seek revenge on your machine. Here are some things they might try and what to do to recover from them:[/COLOR]

  • Master password lock out
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]There are various ‘hacks’ to reset that password. One method is to use a Linux boot CD to mount Windows and then use the chntpw utilty. It is described here.[/COLOR]

  • Missing software drivers
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]First, try to do a System Restore. If it fails, you should be able to reinstall them by going to the manufacturer’s website and download the appropriate driver.[/COLOR]

  • Missing files
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]First, try to do a System Restore. If it is not available, check for backups you may have made and stored somewhere else. As a last resort, there are programs that can scrape your hard drive and attempt to recover the missing files.[/COLOR]
If you already paid


  • Contact your financial institution/credit card company to reverse the charges and keep an eye for future unwanted charges.
  • If you gave them personal information such as date of birth, Social Security Number, full address, name and maiden name you may want to consult the FTC’s website and report identity theft.

Fighting back


Report the scam


Report misleading ads

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]“TrustInAds.org comprises a group of Internet industry leaders that have come together to work toward a common goal: Protect people from malicious online advertisements and deceptive practices.” Report misleading ads here.[/COLOR]
Shut down their remote software account


  • Write down the TeamViewer ID (9-digit code) and send it to TeamViewer’s support (they can later on block people/companies with that information)
  • LogMeIn: Report abuse
Spread the word

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]You can raise awareness by letting your friends, family, and other acquaintances know what happened to you. Although this may be an embarrassing experience if you fell victim to these scams, educating the public will help someone caught in a similar situation and deter further scam attempts.[/COLOR]
Investigate

[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]While hanging up is the safest thing to do when you get a cold call, some people have gone on a mission to expose those scammers. While we don’t endorse this behaviour, if you do have information to share, please let us know and we will update this page with any new relevant details.[/COLOR]

Tech Support Blacklist


[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]This list is being updated on a regular basis from our own investigations as well as from tips we receive from our readers. There are two main objectives with that list:[/COLOR]

  • To protect people who are about to call for tech support assistance and want to make sure the company has not already been listed.
  • To provide assistance to victims that have already been conned and are googling the phone number they called or company they interacted with.
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]If a company is listed below, it meets at least one of the following criteria:[/COLOR]
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]Criteria:[/COLOR]

  • #1 Pretends to be working for Microsoft or ‘Windows’.
  • #2 Uses misleading tactics to force a sale (see an example here).
  • #3 Finds viruses, malware or an infection on a perfectly clean system.
  • #4 Validates a fraudulent popup or page as legitimate (see an example here).
[COLOR=[URL=https://www.jamiiforums.com/usertag.php?do=list&action=hash&hash=4]#4[/URL] 84848]List:[/COLOR]
Company name and aliases: 24/7 PC Guard
Website(s): 247pcguard.com
Phone number(s): 1-888-855-7953
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000001Company name and aliases: 365 Tech Help
Website(s): 365techhelp.co/bng/slow-pc, fastsupport.com
Phone number(s): 1-866-539-8804
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 09/27/2013
Incident ID: 0000002Company name and aliases: Speak Support
Website(s): speaksupport.com, 121usa.com
Phone number(s): 1-800-806-0768
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 10/04/2013
Incident ID: 0000003Company name and aliases: PC Smart Care
Website(s): pcsmartcare.com, pcsmartcare.us
Phone number(s): 1-855-569-5945
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 11/27/2013
Incident ID: 0000004Company name and aliases: PC Mask
Website(s): pcmask.com
Phone number(s): 1-877-385-1667
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 11/28/2013
Incident ID: 0000005Company name and aliases: My Tech Gurus
Website(s): mytechgurus.com
Phone number(s): 1-866-587-1775
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 12/11/2013
Incident ID: 0000006Company name and aliases: MegaITSupport
Website(s): megaitsupport.com
Phone number(s): 1-888-939-3618
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 01/09/2013
Incident ID: 0000007Company name and aliases: GBM Support
Website(s): gbmsupport.net
Phone number(s): 1-800-492-3960
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 01/23/2013
Incident ID: 0000008Company name and aliases: Click4Support
Website(s): lickforsupport.net, webtechmasterhelp.com, techsupportcenter.org, techsupportive.com
Phone number(s): 1-855-668-8555
Affiliate(s): N/A
Remote control software: LogMeIn: 292242
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 01/23/2013
Incident ID: 0000009Company name and aliases: PC Toolkit Pro
Website(s): pctoolkitpro.com
Phone number(s): 1-855-803-1370
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000010Company name and aliases: iGennie
Website(s): igennie.net
Phone number(s): 1-888-239-4339
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 01/30/2013
Incident ID: 0000011Company name and aliases: Compute My PC
Website(s): computemypc.com
Phone number(s): 1-800-356-7697
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 01/31/2013
Incident ID: 0000012Company name and aliases: TechFix Pro
Website(s): techfixpro.com
Phone number(s): 1-888-768-0082
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000013Company name and aliases: iMax Support
Website(s): imaxsupport.com, fix247.org
Phone number(s): 1-800-247-0830
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 03/25/2014
Incident ID: 0000014Company name and aliases: Internet Security Protect
Website(s): internetsecurityprotect.com
Phone number(s): (020)-3289-1596
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000015Company name and aliases: All In One Tech Support
Website(s): allinonetech.net, allinonetech.us
Phone number(s): 1-800-487-9456
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000016Company name and aliases: 1844desktop
Website(s): 1844desktop.com
Phone number(s): 1-884-337-5867
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000017Company name and aliases: Comlogic
Website(s): comlogicinc.com
Phone number(s): 1-888-930-1033
Affiliate(s): N/A
Remote control software:
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000018Company name and aliases: PC Tech Clinic
Website(s): pctechclinic.com
Phone number(s): 1-855-486-4411
Affiliate(s): N/A
Remote control software: LogMeIn: 152903
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 06/17/2014
Incident ID: 0000019Company name and aliases: Condis Services
Website(s): condiservices.com
Phone number(s): 1-888-221-6490
Affiliate(s): N/A
Remote control software: ISL: 19834912
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 06/17/2014
Incident ID: 0000020Company name and aliases: aolrisk
Website(s): aolrisk.com
Phone number(s): 1-855-666-8849
Affiliate(s): N/A
Remote control software: LogMeIn: 770772
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000021Company name and aliases: Affiliated Help {no longer blacklisted)
Incident ID: 0000022
Note: Company is willing to clean up its act and has therefore been delisted.Company name and aliases: 247 Support Experts
Website(s): 247supportexperts.com, 3wayhelp.com
Phone number(s): 1-888-221-1582
Affiliate(s): N/A
Remote control software: LogMein: 146794
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 07/14/2014
Incident ID: 0000023Company name and aliases: SysCare247
Website(s): syscare247.com
Phone number(s): 213-260-2279
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: N/A
Incident ID: 0000024Company name and aliases: OMG Tech Help
Website(s): omgtechhelp.com
Phone number(s): 855-316-8324
Affiliate(s): N/A
Remote control software: LogMeIn: 642695
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 07/21/2014
Incident ID: 0000025Company name and aliases: OnVoiceSupport
Website(s): omgtechhelp.com
Phone number(s): 855-316-8324
Affiliate(s): N/A
Remote control software: LogMeIn: 642695
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 07/21/2014
Incident ID: 0000026Company name and aliases: Ecomputer Support
Website(s): ecomputersupport.net
Phone number(s): 1-877-360-0594, 1-855-820-8680
Affiliate(s): N/A
Remote control software: LogMeIn: 432039
Payment processor: N/A
Reason for blacklisting: #2 , #3
Incident date: 07/23/2014
Incident ID: 0000027Company name and aliases: E-Racer Tech (Clean IT PC)
Website(s): e-racertech.com, cleanitpc.com
Phone number(s): 1-855-486-1800, 1-877-648-7339
Affiliate(s): error711971669.com
Remote control software: LogMeIn: 432039
Payment processor: N/A
Reason for blacklisting: #2 , #4
Incident date: 05/28/2014
Incident ID: 0000028Company name and aliases: Cump Tech Media Pvt Ltd
Website(s): xevoke.com,onlineinstanthelp.com
Phone number(s): 1-855-209-0559
Affiliate(s): onlineinstanthelp.com/malwarebytes-us/download.html
Remote control software: LogMeIn: 186024
Payment processor: CheckOut LTD
Reason for blacklisting: #2 , #3
Incident date: 07/31/2014
Incident ID: 0000029Company name and aliases: Fast Fix 123
Website(s): fastfix123.com
Phone number(s): 1-800-832-3088
Affiliate(s): N/A
Remote control software: N/A
Payment processor: N/A
Reason for blacklisting: #3
Incident date: 08/22/2014
Incident ID: 0000030Company name and aliases: ProcomSupport247
Website(s): procomsupport247.com
Phone number(s): 1-866-456-2763
Affiliate(s): techsupportnumber.us/online
Remote control software: LogMeIn: 162225
Payment processor: FreshBooks
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 09/04/2014
Incident ID: 0000031

Company name and aliases: American Tec Help
Website(s): americantechelp.com
Phone number(s): 1-800-984-9830
Affiliate(s): N/A
Remote control software: LogMeIn:
Payment processor: N/A
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 11/06/2014
Incident ID: 0000032

Company name and aliases: LiveTechOnCall, Live Tech On Call, AVIVO LLC
Website(s): livetechoncall.com
Phone number(s): 1-888-456-7041
Affiliate(s): N/A
Remote control software: TeamViewer
Payment processor: N/A
Price: $509.97
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 12/10/2014
Incident ID: 0000033

Company name and aliases: Tech World Wide Helpdesk
Website(s): techworldwide.org
Phone number(s): 1-844-774-9453
Affiliate(s): N/A
Remote control software: LogMeIn id# 157441
Payment processor: N/A
Price: $369.99
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 01/05/2015
Incident ID: 0000034

Company name and aliases: iTech Expert
Website(s): itechexpert.us
Phone number(s): 1-844-823-6218
Affiliate(s): N/A
Remote control software: TeamViewer
Payment processor: N/A
Price: $369.99
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 01/12/2015
Incident ID: 0000035

Company name and aliases: OneBit IT
Website(s): onebitit.com
Phone number(s): 1-844-663-2484
Affiliate(s): N/A
Remote control software: LogMeIn: 930301
Payment processor: N/A
Price: $350
Reason for blacklisting: #3
Incident date: 01/22/2015
Incident ID: 0000036

Company name and aliases: Yoda Care
Website(s): yodacare.com
Phone number(s): 1-877-228-1097
Affiliate(s): fake pop up
Remote control software: LogMeIn: 752681
Payment processor: N/A
Price: $320
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 01/23/2015
Incident ID: 0000037

Company name and aliases: MyPCTech24
Website(s): mypctech24.com
Phone number(s): 1-888-831-6421
Affiliate(s): N/A
Remote control software: LogMeIn: 424826
Payment processor: N/A
Price: $299
Reason for blacklisting: #1 ,#2 ,#3 ,#4
Incident date: 02/10/2015
Incident ID: 0000038

https://blog.malwarebytes.org/tech-support-scams/
 
[h=2]URL blacklist (pop ups, fakes, etc.)[/h]
hxxp://www.1.pc8.us/
hxxp://supportpcclean.com/pc22/index8.php?domain=www.youporn.com&sxid=ucb74f334386
hxxp://hpsafe.isupportcorp.com/
hxxps://instanttechexpert.com/7945/hp_computer_support.html
hxxp://computertechsupport.us/new/Norton
hxxp://www.fix100.com/8155036/mar/norton-support.html
hxxp://techieschoice.com/l2/support-for-norton.php
hxxp://www.fix100.com/
hxxp://securitylog.systems/50/index2p.php?sxid=4eryag334430
hxxp://www.antivirus-help.com/norton-help-and-support.php
hxxp://91support.com/Symantec-Support.html
hxxp://allprosafe.com/support-for-malwarebytes.php
hxxp://antivirus.igennie.net/malwarebytes/support.html
hxxp://asustechsupport247.com
hxxp://browserssupport.com
hxxp://cinfoways.co.in/techsupport/support-for-malwarebytes.html
hxxp://dbstechy.co.uk
hxxp://delwyn.us/MALWAREBYTES-Support.html
hxxp://drpc247.com/malwarebytes-antivirus.php
hxxp://fingertipsupport.com
hxxp://fixforworldservices.com/privacy.html
hxxp://fixnow.us
hxxp://fixyoursoftware.com
hxxp://fluxifi.co.uk
hxxp://fluxifi.net/support-for-epson-printer.php
hxxp://gatewaytechsupport.co
hxxp://goliveitsolutions.com/MALWAREBYTES-Support.html
hxxp://googlechromesupportnow.com/setting-up-secure-email-in-outlook-2007/
hxxp://goshakha.com/support_malwarebytes.aspx
hxxp://gowyn.com/technologies.aspx
hxxp://gts24x7.com
hxxp://healthcareassociates.us
hxxp://iappgeek.com/MAC-Support.html
hxxp://install-antivirus.com/Malwarebytes
hxxp://invalidxmlfix.com/fixing-xml-errors/dealing-with-the-operation-failed-and-object-cannot-be-found-issue-in-outlook-2007/
hxxp://itechguard.com/services.html
hxxp://java-techhelp.com/contact.html
hxxp://jmdsolutions.yolasite.com
hxxp://lenovo-techsupport.com
hxxp://livepcassist.com/STOPzilla-Support.html
hxxp://livepcsolution.com/MALWAREBYTES-Support.html
hxxp://livetechresolvers.com/Lenovo-Support.html
hxxp://logitechinfo.us/MALWAREBYTES-Support.php
hxxp://microsoft-chat.com
hxxp://microsofthelpnow.com
hxxp://microsoftoutlookhelp.com/contact-us/
hxxp://microsoftproblems.com
hxxp://microsoftsecurityhelp.com/microsoft-help-and-support/microsoft-adds-tls-and-pfs-encryption-with-their-cloud-services/
hxxp://microsoftsupportnow.com/microsoft-help-2/microsoft-offers-hp-pavilion-2-in-1-pc-at-199-holiday-shoppers-targeted/
hxxp://microsofttechsupportnow.com/tech-support/tech-support-for-identifying-the-type-of-ddr-ram-you-are-using/
hxxp://microsoftupdateshelp.com/ask-toolbar-removal/tips-to-remove-the-ask-toolbar/
hxxp://microsoftwindowssupport.com
hxxp://microsoftwindowstechs.com/how-to-remove-yahoo-toolbar-2/steps-to-get-rid-of-the-yahoo-companion-toolbar/
hxxp://mozillafirefoxsupport.com/steps-to-play-quicktime-videos-in-firefox/
hxxp://onlinecomputertechnology.com/?page_id=56
hxxp://outlookemailsetup.com/contact-us/
hxxp://outlookemailtech.com/contact-us/
hxxp://outlookexpresshelp.com
hxxp://outlookproblemshelp.com/contact-us/
hxxp://outlookrepairhelp.com/privacy-policy/
hxxp://outlooksetting.com/test/
hxxp://outlooksettings.com/outlook-help/efficient-use-of-the-outlook-program/
hxxp://outlook-support.com/outlook-setting/using-add-ins-in-ms-outlook/
hxxp://pcecare.com
hxxp://pchardwarepro.com/how-to-fix-hp-laptop/unable-to-start-the-hp-laptop/
hxxp://PcSupport.com
hxxp://routershelp.us/D-link_router.htm
hxxp://rudrainfosolutions.com/contact-us/
hxxp://safe-support.com.au/MALWAREBYTES-Support.html
hxxp://security.iyogi.com
hxxp://service.iyogi.com
hxxp://shpex-garage-doors.com/sanfrancisco/garage-door-repair.html
hxxp://softech247.com/?page_id=23
hxxp://supertechsolution.com/MALWAREBYTES-Support.html
hxxp://support-for-dell.techvedic.co.uk
hxxp://support-for-malwarebytes.techvedic.com
hxxp://supporthub247.com/sitemap.xml
hxxp://supportoid.com/MALWAREBYTES-Support.html
hxxp://supportv2.com/support-for-malwarebytes/
hxxp://sysrescue.net/malwarebytes-support.html
hxxp://systemhelp.org/Comodo-Support.html
hxxp://technogeeksonline.net/malwarebytes-technical-support/
hxxp://techzglobal.com/support-for-malwarebytes.html
hxxp://toshibatechssupport.com
hxxp://totalpcsolution.net/windows_support.html
hxxp://tplaza.info/renewal.php
hxxp://vedicfix.com/acer_desktop_laptop.html
hxxp://vistaproblems.com/windows-vista-help-2/how-to-deactivate-automatic-restart-in-windows-vista-during-system-failure/
hxxp://warranty.iyogi.com
hxxp://windows7.iyogi.com/support/features/windows-7-malwarebytes.html
hxxp://windows7helpdesk.com/contact-us/
hxxp://windows8problems.com/windows-8-help/windows-8-and-windows-8-1-slowly-increasing-market-share/
hxxp://windowslivemailtech.com/contact-us/
hxxp://windowsoutlookhelp.com/remove-yahoo-toolbar-2/remove-yahoo-toolbar-from-ie/
hxxp://windowssupportnow.com/computer-repair/
hxxp://windows-techsupport.net/Contact_us.html
hxxp://worldpccare.com/f-secure-support/
hxxp://www.247pcsecurity.com/MALWAREBYTES-Support.html
hxxp://www.acertechssupport.com/contact.html
hxxp://www.affiliatedhelp.com/support-for-malwarebytes/index.html
hxxp://www.antivirus-techssupport.com/malwarebytes.html
hxxp://www.apple-mac-techsupport.com/itune.html
hxxp://www.askithelp.com/index.php?qry=support-for-malwarebytes
hxxp://www.avgnumber.com
hxxp://www.belkintechsupport247.com
hxxp://www.call-iyogi.com/norton.html
hxxp://www.callsupportline.com/malwarebytes.html
hxxp://www.d-linktechsupport.com/contact.html
hxxp://www.easytechy.co.uk/premium-support/brand/malwarebytes/
hxxp://www.easytechy.com/premium-support/router-support/
hxxp://www.ezonlinesupport.com/malware-support/
hxxp://www.fastpc.co
hxxp://www.fix100.com
hxxp://www.futuretech24x7.com/windows-support/
hxxp://www.globaltechexpert.com
hxxp://www.globaltechi.com/malwarebytes-tech-support-800-814-7017.html
hxxp://www.gotruehelp.com/customer_advocacy.php
hxxp://www.iappgeek.com/index-2.html
hxxp://www.in2pcfix.com/antivirus/malwarebytes/customer-support-for-malwarebytes-antivirus.html
hxxp://www.instantpccare.com
hxxp://www.isupportteam.com/support-for-malwarebytes.php
hxxp://www.iyogiblog.com/contactus.html
hxxp://www.iyogishop.com/contact-us
hxxp://www.linksyswirelesshelp.com/linksys_router_reset.html
hxxp://www.livesupportforpc.com/MALWAREBYTES-Support.html
hxxp://www.lostdatarecovery.us/index.html
hxxp://www.maggievalleycountryclubvacation.com/services.html
hxxp://www.netgearrouterhelp.com
hxxp://www.netgeartech.support
hxxp://www.omnitechsupport.com/remote-support.php
hxxp://www.onrequestsupport.com/MALWAREBYTES-Support.html
hxxp://www.pandajetech.com/support-for-malwarebytes.php
hxxp://www.pccarewiz.com/contact.html
hxxp://www.pceyetech.net/malwarebytes-support.php
hxxp://www.pconlinehub.com/support-for-malwarebytes.html
hxxp://www.pcsupport.com
hxxp://www.pcsupportandcare.com/services.html
hxxp://www.pcxpertz.net/malwarebytes_support.php
hxxp://www.printer-techsupport.net
hxxp://www.robantech.us/support-for-malwarebytes.html
hxxp://www.safetech24.com/support_for_malwarebytes.php
hxxp://www.siamtechcs.com/support.php
hxxp://www.stopallpopup.com
hxxp://www.supportgigs.com/F-Secure-Support.html
hxxp://www.supportmega.com/support_for_malwarebytes.php
hxxp://www.techexpertsolution.com/microsites/microsoft-outlook-support.html
hxxp://www.techgenie.com
hxxp://www.techiex.net/malwarebytes.html
hxxp://www.techsintime.com/pc-protection/
hxxp://www.techsupportmart.co.uk
hxxp://www.techsupportpro.com
hxxp://www.tekzie.com/mac-support.html
hxxp://www.windowsonlinesupportnow.com/contact-us/
hxxp://www.windowssupportnumber.com/
hxxp://www.windowsvistahelpnow.com/windows-tech-support/chrome-extends-support-for-windows-xp-until-2015/
hxxps://ramzpcsupport.com/wp-content/themes/html/pay.php?amnt=99.99&pln=1
hxxp://www.sunrisepcsupport.in/aboutus.html
hxxps://sunrisepcsupportsi.wordpress.com
hxxp://sheffield-rlfc.co.uk/category/computers/
hxxp://sunrisepcsupportonline.blogspot.com
hxxp://www.sunrise-pc-support.org/services
hxxp://test.supportme.in/landing/
hxxp://www.sunrisepcsupport.com/scam-alerts/
hxxps://kasmacpcsupport.com/?page_id=37
hxxp://www.wertechnicians.com/mcafee-support.php
hxxp://www.24x7mcafeesupportnumber.com/gateway-support.php
hxxp://helptofix.co/contact.html
hxxp://mcafeemyaccount.com
hxxp://www.wearetech24x7.com/support-for-internet-explorer.html
hxxp://anti-virusinstall.com
hxxp://wertechnicians.com/acer-support.php

[h=2][/h] Source.https://blog.malwarebytes.org/tech-support-scams/
 
Aiisseee....for the non-computer people kwakweli ni rahisi sana kuingia kingi....
 
This reminds me of the call I got from someone who claimed to be a representative of Microsoft and that they monitored a virus in my computer. I told the guy I knew he was a fake but he insisted that it was important that I let him access my computer to fix the problem or it would leak my info to the internet. I declined and hung up. It's been a week and nothing came up.
 
I got the caller's phone number and reported it to Callercenter.com. In just about a week, 12 others posted responses that confirmed the call was a scam.
 
You must log in or register to reply here.

Similar Discussions

Menu
Log in
Register
Cookies are required to use this site. You must accept them to continue using the site. Learn more…