Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Fake Certified Microsoft Support Phone Number Pop-up

10 Jun 2015   #1
mslocke15

Windows 7 Professional
 
 
Fake Certified Microsoft Support Phone Number Pop-up

Hello Everyone!

I have came across something that has been getting on my nerves the past month. I work at a small IT store and we have been getting a lot of calls about this pop-up. What it does is it pops up a block saying computer is infected and you have to call this random number to get it fixed. The number is never the same. I have found there are a lot of junk programs that are installed. For example, Optimzer Pro, Cross Browse, PC Tuner to name a few. I have also noticed that most of the computers DNS servers get set static. Current computer i am working on is set to 81.218.119.5 and 82.163.142.130.

I have done some research and find that every DNS i see goes to Israel. I have been removing the infection by running multiple tools. Malwarebytes, Hitman Pro, Adwcleaner, Superantispyware and resetting all the Browsers, but it has been coming back on occasion. I also have been uninstalling the LAN and reinstalling with a newer driver because seeing a DNS get set static by a bug is something i have never seen before.

Wondering if you guys have any suggestions. It has happened on windows 7 and windows 8 computers.

Thanks


My System SpecsSystem Spec
.
10 Jun 2015   #2
SIW2

Microsoft Community Contributor Award Recipient

Vista x64 / 7 X64
 
 

Similar ransomware has been around a while. Maybe there is new onslaught of it at the moment.
My System SpecsSystem Spec
10 Jun 2015   #3
audare

windows 7 64 bit
 
 
Having the same problem

Hi,

I am having this exact problem on my computer. Unfortunately I am not tech savvy. How can I get rid of this and clean up my computer without paying an arm and a leg? Thanks
Audare

Quote   Quote: Originally Posted by mslocke15 View Post
Hello Everyone!

I have came across something that has been getting on my nerves the past month. I work at a small IT store and we have been getting a lot of calls about this pop-up. What it does is it pops up a block saying computer is infected and you have to call this random number to get it fixed. The number is never the same. I have found there are a lot of junk programs that are installed. For example, Optimzer Pro, Cross Browse, PC Tuner to name a few. I have also noticed that most of the computers DNS servers get set static. Current computer i am working on is set to 81.218.119.5 and 82.163.142.130.

I have done some research and find that every DNS i see goes to Israel. I have been removing the infection by running multiple tools. Malwarebytes, Hitman Pro, Adwcleaner, Superantispyware and resetting all the Browsers, but it has been coming back on occasion. I also have been uninstalling the LAN and reinstalling with a newer driver because seeing a DNS get set static by a bug is something i have never seen before.

Wondering if you guys have any suggestions. It has happened on windows 7 and windows 8 computers.

Thanks
My System SpecsSystem Spec
.

10 Jun 2015   #4
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

81.218.119.5 is 81.218.119.5/bzq-218-119-5.red.bezeqint.net IP Address Whois | DomainTools.com
You might want to ask your infected users why they're installing such 'non help' programs?....


Get rid of the garbage programs (uninstall), then flush the dirty DNS cache, and restore MS's Hosts File:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0


Save as flush.bat to your desktop.
Right click on the flush.bat file to run it as Administrator.
The computer should reboot itself.

Hope that helps in most cases.
My System SpecsSystem Spec
Reply

 Fake Certified Microsoft Support Phone Number Pop-up




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Fake Microsoft phone call
Hi All I read the following post : Fake Microsoft PhoneCalls - Page 3 - Tech Support Guy Forums on the Microsoft Phone scams. Now in this post Eddie5659 posted about running OTL on the infected PC... but that was basically where the physical tech support ended... My brother had a similar...
System Security
Microsoft windows 7 Uk support number?
Hey I'm having trouble finding Microsoft windows 7 support number in the uk. I have had a look on the box and only gives me numbers to us & Canada.I have Also had a look on the installation cd as well. not On there either. Have had a look on the Internet and can only find Xbox support cant find...
General Discussion
Microsoft windows 7 Uk support number?
Hey I'm having trouble finding Microsoft windows 7 support number in the uk. I have had a look on the box and only gives me numbers to us & Canada.I have Also had a look on the installation cd as well not I have had a look on the Internet and can only find Xbox support cant find Microsoft's number...
General Discussion
Microsoft to support same IE9 security, privacy features on phone ....
Microsoft to support same IE9 security, privacy features on phone and desktop | ZDNet
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:34.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App