Spam phone call from "Microsoft Tech Support"

If this is the wrong place to post this. Please move it. A warning about a phone scam I had today. Reported it to Microsoft @ 1-800-426-9400

Caller ID said Tech 540-242-8120 Wife picked it up and the caller said he was from Microsoft Tech Support. My computer is sending info out and could be infected. She put me on the phone.

He tells me they have been sending me info to contact them thru my computer. Hmm, really. How so? Asked me to press the windows key and R at the same time. Type in CMD. Enter. Asks me do you see your computers name there? Yup. Has me look on the bottom for zfsendtotarget=CLSID\. He reads me off the same # I see after the \ . Tells me only he and I know that # so he's legit. ( After calling M/S later they tell me that # is on most computers.) Still didn't trust him but lets see where this goes.

He then has me do RUN again and eventvwr, another screen pops up and he has me click on custom views and then Administrative events. That's where we have been sending you info. Lots of warnings and errors. Hmm, still ask him. Don't know if you are legit. In case we get disconnected. Whats your phone #? Tells me. 530-564-8475. All the while I'm google searching both phone numbers and getting a blank while talking to him. Also googled the M/S phone scams. -> http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx All while I'm talking to him.

He then wants me to do the windows R, type in www->teamviewer-> com, no ->'s I see what it is. Remote access. I don't think so!!

I remember years ago. Trouble with a Dell I had. While I was on the phone with support, they walked me thru and did a computer to computer. And told me step by step what I would see next. This guy needs a 3rd party? Told him I won't do it till I see if you are legit. Can I call you back? He said shure and gave me the 2nd #. Asked for his name and he tells me anyone answering the # can help me.

I listed both #'s in case someone else gets a call. Calling the Microsoft #. They explained the event log, ect. All general info. After talking to Microsoft, they are going to put a fast track on trying to catch them. Hope this helps someone else.

 

This is a well-known scam, been going around for years. You should have never done anything he asked, hung up immediately, and reported the call. Don't know if how far you actually went compromised anything on your system or not.

 

Never ever respond to these calls or let anyone that you don't know do a remote of any kind.

I get these calls all the time and I just say " this call is being monitored by the DEA because I am a convicted drug dealer".:-D:-D

They slam the phone down, until the next one calls....rolleyes

 

Also, area code 530 is Lake Tahoe, California side. Area code 540 is Virginia. Nowhere near Microsoft, or even each other..

 

Doing the CMD. Not saying what I see other than the numbers matched. ( The real Microsoft tech I called later. Said those numbers were a common # on any computer. ) Never said what I saw on the event viewer.

Real M/S Tech said what I saw there was common. Hopefully they will call those #'s up and see if they can catch them.

I never heard of team viewer before, but knew what it does. Think I'm going to close everything, Restart. Use Ccleaner, Malwarebytes, Super-anti-Spyware

 

If I were you, since you let him into your comp - I would do a clean install to be sure you have a clean comp.

I would also change all passwords, especially if you do online banking.

 

I like that phone response. May I use it?

 

It's not patented!:-D

Be my guest!:wave

Paul

 

Here's another one I used yesterday - seems these calls are now coming on a regular basis.:eek

"You have called "Microsoft Fraud Division" - you can expect a visit from law enforcement within the hour".:-D

 

Be believed, or be gone 'Loco'..