Posted 01 August 2012 - 09:50 PM
My Dad got scammed by either pcsoftwareservices dot com or pcssoftwareservices with two SS
They called him up and told him he had a virus, but they could remove it....etc etc and my dad went along with it.
Several minutes later, he decided it wasn't such a good idea and unplugged it from the internet and called me. I had him power the laptop down.
Someone else in this forum got scammed by the same people. Another search on google indicates this might be part of Ransom scam to change your PC password.
My dad dropped off his laptop, but forgot the power-cord, so I am limited on what I am trying to accomplish tonight. My Dad is vague on details, so I having to piece together what might have happened.
Based on the browser history, he downloaded Teamviewer....The last EXE to show was TeamViewerQS_en.exe. This appears to be a legit Remote access tool, but I am only guessing.
Then the guy probably took remote control and first went to pcSSoftwareservices dot com then went to pcSoftwareservices dot com.
IF they downloaded something else, it is not showing in the history.
I keep Avast on his laptop ( Vista Home Premium ). For whatever reason, the laptop starts in safe-mode and I missed the boot screen. Even a quick scan with Avast will probably zap the power, so I will wait until I have the power cord.
After Avast finishes scanning, what is next ?