Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Scammed!


  • Please log in to reply
13 replies to this topic

#1 Fantasyfreak

Fantasyfreak

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 09 November 2010 - 01:05 PM

Hi everyone!

Ok, so not sure that this is in the correct forum, so mods please move if not.

So we got a new laptop a little while back, it's my first time with an authentic copy of windows, my partner kept recieving calls from windows support.
They finally called while I was in about an hour ago, she handed over the phone to me.

Now because my partner said they were from Microsoft, I didn't question it.
They told me they were recieving error reports from my computer and they wanted to help me out, I've sent error reports before so thought fair enough.

Thought it seeemed a bit dodgy, but went ahead after asking a few questions.
They asked to connect to my computer through teamview, like an idiot I did.
I watched them open google chrome and go to a site 'majorgeeks' and tried to download something.

At this point the smell of a rat was too strong and I disconnected and switched off the computer.
I then entered safe mode and ran Malwarebytes' anti malware, it got rid of a trojan (I ran MAM last night so this was new)
I then deleted all internet history and any references I could find to teamview.

So, my question is;

What should I do now?
What harm could they have done?

I'm very angry with myself for being such an idiot.

Please help!

Thanks,
Ben

Edited by Fantasyfreak, 09 November 2010 - 01:56 PM.


BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 09 November 2010 - 06:10 PM

Were you watching them the whole time? If so, then there was not much they could that you could not see.

#3 Fantasyfreak

Fantasyfreak
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 10 November 2010 - 09:41 AM

Hi,

Yes I was watching them the whole time, all they did was open chrome, go to 'majorgeeks' and tried to download, at this point I started moving the cursor erractly to put them off, disconnected and then switched off the computer, then did as described in my above post.

Could they not have dropped in a rootkit?
(you'll have to excuse me as my knowledge of computers is not comprehensive and I've just heard of these things)

Has anyone heard of this scam before?

I googled it and it threw out a few instances, but this guy seemed really professional until I said enough.
There was even a 'call centre' background noise and he was Dutch (sounded a lot like when you ring microsoft about the xbox 360).

What could they be after?
Passwords?

They went to a lot of trouble....

Edited by Fantasyfreak, 10 November 2010 - 09:42 AM.


#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 10 November 2010 - 09:51 AM

No, they could not do anything without you seeing it. Looks like you were subject to this:

http://www.digitaltoast.co.uk/supportonclick-systemrecure-scam

This has been a big problem in the UK.

#5 Fantasyfreak

Fantasyfreak
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 10 November 2010 - 12:52 PM

Thanks for letting me know and cheers for the link :thumbsup:

Would the Trojan have been dropped by them though somehow?
Any ideas what the download thing might have been that they tried? a key logger maybe for passwords, or was that what the trojan was?


Thanks

#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 10 November 2010 - 12:56 PM

Do you remember the name of the Trojan?

My guess is they were going to download and install a legitimate security program.

#7 Fantasyfreak

Fantasyfreak
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 10 November 2010 - 01:25 PM

In the mbam log it say Trojan.zbot, not sure if that is the name of it?

What would be the reason for installing a legitamate security program?

#8 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 10 November 2010 - 01:43 PM

They are basically trying to have you pay for technical support when there is nothing wrong with your computer.

As for the zbot, my guess is that came from somewhere else.

#9 Fantasyfreak

Fantasyfreak
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 10 November 2010 - 02:24 PM

Who would be stupid enough to pay for some tech support that you didn't ask for?
Maybe some people do actually fall for it though.

I just couldn't help thinking that it was something more sinister because of them going to all that effort and actually going into my system.

Thanks for all the help and suggestions Grinler, you've put my mind at ease :thumbsup:
This forum is one of the greatest ones going, and I frequent a lot of them on various subjects.



Just one more question if you'd indulge me further? (bit OT though)

My mcafee security subscription is out of date, is it imperative to subscribe to beat the viruses?, I see a lot of reccomendations on free virus programs on this site, would it be best to change?
If so, any advice, or a linky?

Thanks,
Ben.

#10 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 10 November 2010 - 06:30 PM

An anti-virus program with updated definitions is 100% imperative to stay clean on the Internet.

Whether you pay for the subscription with McAfee or use a free program like AVG, Avast, or Microsoft Security Essentials is up to you. I can tell you that just because a program is free does not make it inferior in any way.

#11 Romeo29

Romeo29

    Learning To Bleep


  • Members
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:09:06 PM

Posted 14 November 2010 - 01:52 AM

Who would be stupid enough to pay for some tech support that you didn't ask for?
Maybe some people do actually fall for it though.


Read this article : http://nakedsecurity.sophos.com/2010/11/04/sick-of-call-centres/
Listen to this :
http://sophosnews.files.wordpress.com/2010/11/avoiding-fake-support-call-scams.mp3

Edited by Romeo29, 14 November 2010 - 02:00 AM.


#12 The Reflector

The Reflector

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:02:06 AM

Posted 16 November 2010 - 01:38 AM

No, they could not do anything without you seeing it. Looks like you were subject to this:

http://www.digitaltoast.co.uk/supportonclick-systemrecure-scam

This has been a big problem in the UK.



Hi

Yes it seems as if the op was subjected to this scam, It is rampant here In Ireland too at the moment, A guy calls supposedly from microsoft or other company and points some users in the direction of the "error log" page where of course all computers will have a complete list of error's which the caller will then say he can fix.

Its a huge scam at the moment and all computer users should beware of phone calls relating to your computer.

#13 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:09:06 PM

Posted 16 November 2010 - 11:21 AM

Thanks Reflector.

#14 Fantasyfreak

Fantasyfreak
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:03:06 AM

Posted 17 November 2010 - 01:36 PM

Thanks for all the extra info and links guys :)


Funnily enough, I recieved another call that I guess was this scam today.
I'm so used to getting calls from call centres though that I just ask what it is regarding before putting the phone down, unfortunately I put the phone down before him saying "it's about your computer" registered.
Otherwise I would've liked to wind him up for a bit.
The rate it's going though I should have another one within the week :wink:
If I do I'll record it and whack it up on the digitaltoast site :clown:


EDIT:
No sooner do I get away from typing this reply that the phone rang again.
This time is was a poor English speaking person from 'The Goverment'! (nothing to do with the computer scam, but nonetheless, nothing other than a nusance)
Missing my opportunity with the last call I decieded to stay on the and wind them up some.
It was a good laugh actually :thumbsup:
The information these 'companies' can get though is scary.

Edited by Fantasyfreak, 17 November 2010 - 01:56 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users