Solved

popup issue on computer.

Posted on 2016-07-19
12
43 Views
Last Modified: 2016-08-22
we are getting a popup on a computer that locks up a computer and has the computer beeping. I have attached the error message, thank you for your help.
myra-s-issue.jpg
0
Comment
Question by:CocoCounty
  • 3
  • 2
  • 2
  • +3
12 Comments
 
LVL 17

Accepted Solution

by:
Roy_Cox earned 251 total points (awarded by participants)
ID: 41719460
Have you done a malware/virus scan. It doesn't look legitimate to me.
0
 
LVL 69

Assisted Solution

by:Éric Moreau
Éric Moreau earned 83 total points (awarded by participants)
ID: 41719472
don't call this phone number!

run antimalwarebytes (https://www.malwarebytes.com/antimalware/)
0
 

Author Comment

by:CocoCounty
ID: 41719474
we run malwarebytes, sophos virus removal tool.
0
 

Author Comment

by:CocoCounty
ID: 41719477
what this popup does is locks up the computer and the computer starts to beep.
0
 
LVL 45

Assisted Solution

by:Martin Liss
Martin Liss earned 83 total points (awarded by participants)
ID: 41719480
Please see this thread , particularly the last entry on page 1 (shown below) that describes what happened when someone called the number.
On Saturday July 18, 2015, I went on YouTube to research cars, I didn’t click on any advertisement, I only clicked on a channel called Motorman, and watched his video, because, he is very thorough in his explanations. I also looked at other videos about car performances. I left the youyube tab, clicked the plus sign of the browser to open a new tab. Once did that, a popup was displayed with a blue screen, stating “This site found that my computer was contaminated with a virus to call Microsoft at +1-855-922-7632"  I called the number, thinking it was Microsoft, because, I am using a pre released version of Windows 10, and expected to be helped.
When I called, the woman on the line told me my computer was infected with a  virus, of course it is, they planted it on youtube, otherwise, they have no way of knowing, and display their number, for the victim to call them. She tried to convince me to connect my tablet to the infected computer, I told her no, unless I can find one that I have never used to do banking with, or anything personal. I also told her what she was asking me to do didn’t make any sense. The reason I even entertained that idea was because, I thought it was Microsoft, since they didn’t tell me who they were. My mind was in a fog also, because, of personal worries.
I allowed her to access the computer, she ran a few scripts, and she told me to wait, she was going to escalate, because, she needed someone with more expertise. She called the tech, and all he did was browse my computer, and it seems to me he deleted the virus they implanted into the machine. He also transferred some file, but I wasn’t fast enough to catch with my camera, but was able to capture the window.
The tech didn’t run any antivirus on the machine, all he did was transfer some of my personal information to their site, clean their footprint the best he could, and still leave their communication program running. I feel this company creates viruses to get unsuspecting people to call, they retriever your personal information, keep monitoring your computer, and bill you.
After all this, I thought iTechHelps was done with the machine, and gone. For some reason, I was feeling I was just conned. I tried to call Microsoft again, stumble on another group of thieves, that company had the same goal, I made the same mistake. I allowed them into the machine, when they install their so called Antivirus program, and Registry cleaning program, and started their cleaning process. They somewhat mimic what a person should do when a computer is infected. Then they asked me for money using the same line as the iTechHelps, and I pulled the plug on them, I turned down their services, and shut own the machine.
After I shut down the machine, I gathered my thoughts over what just happened to me, I am ashamed to admit, because, I am a computer programmer, and should have known better. Those companies have only one purpose, create viruses, have the unsuspecting naïve computer user call, they still your identity, while they bill your credit card.
I left the machine as evidence, I didn’t change much if anything, in case it is needed by the authorities.
I have pictures I took of them milling about in the machine and a billing email they sent me, please help put these people out of business.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 46

Assisted Solution

by:noxcho
noxcho earned 83 total points (awarded by participants)
ID: 41719519
Do you have a backup where you can restore from? If yes then the best way is to restore the whole drive from backup.
Otherwise I would recommend you clean install of Windows.
0
 

Author Comment

by:CocoCounty
ID: 41719555
we will  be doing a clean install. but the same issue has happened before, so Im thinking the user is going to a website.
0
 
LVL 45

Expert Comment

by:Martin Liss
ID: 41719556
The user needs a good antivirus.
0
 
LVL 46

Expert Comment

by:noxcho
ID: 41719663
He needs an antivirus plus adblocker. Some websites can be infected and usually the virus sits in ads. Just click on the ad to close it can activate the virus.
0
 
LVL 91

Expert Comment

by:nobus
ID: 41720225
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Better way of using callback in javascript 7 53
Phone Dialer 5 36
Hidden Field Value 10 34
What .NET website keeps me current? 9 31
You can of course define an array to hold data that is of a particular type like an array of Strings to hold customer names or an array of Doubles to hold customer sales, but what do you do if you want to coordinate that data? This article describes…
Stuck in voice control mode on your Amazon Firestick?  Here is how to turn it off!!!
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now