Event Log service unavailable

[Duckie2]

Received phone call today from Support1000. Remote session was done on my laptop, event log had a a lot of errors. Tech spent about 2 hrs and now he states he shut the event log to prevent my system from being hacked. How does the event log service have anything to do with the system being hacked?

 

[DocBrown]

Welcome Duckie2

Who is Support1000 ? Was it a random call to you saying your computer had problems ? There are a bunch of scams / frauds going arround to get your money for help and stealing info off your computer. They are the hackers !!!

 

[Duckie2]

Thank you DocBrown

Web site is Support1000.com

 

[Brink]

Hello Duckie,

Yep, I'm afraid that you have been scammed. I would recommend that you do a clean install of Windows to make sure nothing is left of what they may have put on it.

I would also strongly recommend that you change your passwords for anything that you accessed on that computer to be safe.

Keep an eye out for any suspicious activities on your bank and credit card accounts if you have accessed them online from that computer. If anything shows up, you better be fast to report it, close the account, or have the account numbers changed.

 

[LMiller7]

Shutting of the Event Log service would not prevent hacking. It would more likely do the opposite.
I quote from the service description:

"Stopping this service may compromise security and reliability of the system."

I think that is an understatement.

 

[Duckie2]

Thank you

I'm setting up alerts on my bank account and changing passwords and other account information.

 

[DocBrown]

How much did you have to pay them ? Did you use a Credit Card or a Debit Card ?

They probably turned OFF your event log so you could not see what they did or when they connect to you again.

What program did they use to connect to you ?

 

[Duckie2]

Payed 99.00 to paypal. Teamviewer QuickSupport was used. Also CCleaner was installed, Glary Utilities 5 and BullSecurity and also Norton Antivirus

 

[Brink]

Duckie,

You might also report this to PayPal to see if they may be able to reverse the transfer.

https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Help/general/TopQuestion4-outside

https://www.paypal.com/us/webapps/helpcenter/helphub/article/?solutionId=FAQ2422&m=CLL

 

[Duckie2]

Thank you Brink

Office is closed Pacific time. Will call first thing in morning.

I want to attempt to restart the Event service, can you assist me. I feel so violated.

 

[Brink]

Personally, I wouldn't even waste your time doing that, and do a factory restore or clean install instead.

 

[Duckie2]

Dear Brink

I'm going to do a clean install. Thank you for all of your help.

 

[DocBrown]

We have a lot of members that will help you for FREE. I am not well versed on the event service. So somebody else will help with that. But I am a long term user of TeamViewer for myself & friends. The first thing I need to know is if they set up a permanent user defined password in TeamViewer to load when the computer boots up. If so we need to change or delete it so you cannot be hacked by them. What version of TeamViewer was installed. I have a older V-4 on this particular computer, but have some newer versions of many of my other computers.

 

[Duckie2]

DocBrown

It is teamviewer QS ver. 7.0.17271.0
There is a user ID that consists of numbers and a password with 4 numbers and a pointer that looks like a c
Which if you click on it then asks to create new random password or copy random password to clipboard.

 

[DocBrown]

I think that version is the Quick Connect QS version. I have the same ver. 7.0.17271.0 but not QS on a computer next to me. I think it would be best to delete TV via Control Panel > Programs & Features for now. The re-boot your computer.

Follow Brink's advice for a clean re-Install.
Read the Tutorial by gregrocker for the clean install without the bloatware by the computer manufacturers.

:ar: http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html#post1839164


Make sure you have your Win7 COA Key Code for activation !

Take your time and ask questions for help if you need it

 

[Duckie2]

Thank you All

TV does not show up in programs and features so I can delete it. That's odd getting ready to do install.

 

[DavidE]

TV Quick Support is a "Standalone / Portable" version so you won't see it in programs and features.

 

[Duckie2]

To Everyone that has Assisted Me Thank You

Have contacted Paypal and filed a Dispute, also have contacted my bank and will be following up with Claim. I have learned a good lesson, one I will never forget. Paypal states the seller has 7 days to respond and if he does not respond my money will be taken out of their account. I have learned not to conduct any business transactions when you are mentally and physically exhausted.

 

[Brink]

Good luck. I hope they are able to get your money back.