Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

microsoft bluescreen scam - am i infected?


  • Please log in to reply
12 replies to this topic

#1 princessdew

princessdew

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 02 June 2015 - 02:08 PM

HP 2000 NOTEBOOK 2D09WM

BITDEFENDER INTERNET SECURITY SUITE

MALWARE BYTES PRO

 

A friend told me last week that while surfing she got a blue screen that said contact Microsoft at a certain phone number. She exited internet explorer and turned the computer off. I got the computer and found nothing in scans and could not recreate it. 

 

She called last night and had the same thing happen.  I told her to just shut the lid on the laptop and I picked it up this morning.  I turned it on and IE was open.  It is a blue screen saying

 

WINDOWS WARNING ERRORS

 

0X000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING OPERATIONS

WINDOWS HEALTH IS CRITICAL

DO NOT RESTART

 

**I HAVE A PIC OF THE SCREEN IF YOU NEED**

 

Over this blue screen in a white pop up screen stating:

 

There is a .net frame work file missing du to some harmfull virus. (harmfull is spelled that way)

 

Deub malware error 895-system 32.exe failure

 

Please contact Microsoft technicians to rectify the issue. 

 

yada yada

 

Tollfree Helpline at 1-855-922-7632

 

and more text. 

 

***I HAVE A PORTION OF A PIC OF THIS***

 

The website address shows www.bluescreenerror  

 

 

 

 

 

I saw she was trying to access Youtube through a yahoo search.  I looked and noted that the first entry was not the real youtube link.  I took the chance and clicked that link and was able to recreate the blue screen pages she received. 

 

I don't think she is infected and have ran the following:

 

I have ran malware bytes pro and nothing found.

I ran Bitdefender Internet Security 2015 scan and nothing found,

 

Should I do anymore or is this just the scam to get you to call and let them have access to your computer?

 

Thank you and sorry for so out of context and I hope it makes sense.  :)

 

 

 



BC AdBot (Login to Remove)

 


#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:03:45 AM

Posted 02 June 2015 - 02:22 PM

Hi there,

What you described is indeed a tech support scam - the real Microsoft BSoD (for Windows 7) looks like this:
unmountable-boot-volume.png
If your friend closed the window and did not do anything, then she is safe. This is mainly an ad by tech support scammers trying to entice people into calling them and letting them have access to the computer.

Regards,
Alex

#3 princessdew

princessdew
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 02 June 2015 - 02:26 PM

Thank you!  I searched the phone number and other "highlights" from the pages.  that is what I thought also. 

 

I am going over there tomorrow to give her some "helpful" hints on surfing and to make her some quick links on

her Favorites Bar for her most common links. 

 

You all rock here! 

 

:)



#4 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:03:45 AM

Posted 02 June 2015 - 02:29 PM

Here are some resources that might prove useful in that direction:

Best Practices for Safe Computing - Prevention of Malware Infection
How Malware Spreads - How did I get infected
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs)

#5 princessdew

princessdew
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 02 June 2015 - 02:37 PM

Thank you!  I will pass that on to her. 

 

I have to say this and I don't mean it in a hateful way but she just surfs.  She is not a computer person and no matter how many times over the past 6 years I have shown her and explained things - well she just surfs and clicks.   It is like the saying "oh, look a squirrel" lol 

 

Usually I am cleaning up malware and virus on her laptop (putting the malware bytes pro and bitdefender did slow that down) so this was a new one on me.

 

:)



#6 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:03:45 AM

Posted 02 June 2015 - 02:44 PM

It might sounds a bit mean, but I would suggest you let her clean the infections herself. Most of the time people only learn how to prevent malware by the hard way - digging themselves out of infections :wink:

I can understand your circumstance, I have a friend that is exactly like that. Emsisoft Internet Security and Malwarebytes Premium do a good job keeping things off her computer, but I am still dreading another checkup call from her. :lol:

#7 princessdew

princessdew
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 02 June 2015 - 02:57 PM

you are very correct there.  I'm seriously considering doing that or at the very least make her wait a few days or a week before I am "available" to do it. I honestly don't think she could clean it.  Maybe if I do the hold out time and her be without her laptop a bit, it will make her think about just clicking. 

 

Oh, well.   Thanks and have a great day!! 



#8 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:03:45 AM

Posted 02 June 2015 - 03:08 PM

You are welcome :)

Have a nice (malware-free) day, and stay safe on the 'Net!

Alex

#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:45 PM

Posted 02 June 2015 - 03:50 PM

For others reading this topic...these are examples of scam BSOD messages....

1-855-399-8171.png

bsod-error-333-registry-failure-popup.jp

.
Microsoft does not call, send email or solicitic Windows customers to offer Tech Support.
 

Cybercriminals often use the names of well-known companies, like ours, in their scams. They think it will convince you to give them money or your personal information. While they usually use email to trick you, they sometimes use the telephone, instead....We do not send unsolicited email messages or make unsolicited phone calls to request personal or financial information or fix your computer. If you receive an unsolicited email message or phone call that purports to be from Microsoft and requests that you send personal information or click links, delete the message or hang up the phone. Microsoft does not make unsolicited phone calls to help you fix your computer.

Avoid scams that use the Microsoft name fraudulently
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 princessdew

princessdew
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:10:45 PM

Posted 02 June 2015 - 09:08 PM

yes that is it!  Thank you for showing the images.   I am just so glad she didn't call the number! 



#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:45 PM

Posted 03 June 2015 - 05:00 AM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 jourdanbennett

jourdanbennett

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:45 PM

Posted 05 April 2016 - 03:58 PM

So my Dad made the mistake of making the call and giving the guy access to his PC.  He did not give a cc number or anything.  What should I do to make sure he is not safe.  I didn't see anything installed out of the ordinary

 

Thanks for the help.



#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:45 PM

Posted 05 April 2016 - 08:32 PM

Information about this scam is provided in Beware of Phony Tech Support Scams with suggestions for scans to perform listed at the end.

If you need individual assistance with a malware infection, you should start a new topic in the Am I infected? What do I do? forum instead posting in another user's topic which causes confusion.

If you want a comprehensive check of your system by experts, please read and follow the instructions in the Malware Removal and Log Section Preparation Guide. When you have done that, start a new topic and post your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users