Fake Certified Microsoft Support Phone Number Pop-up

[mslocke15]

Hello Everyone!

I have came across something that has been getting on my nerves the past month. I work at a small IT store and we have been getting a lot of calls about this pop-up. What it does is it pops up a block saying computer is infected and you have to call this random number to get it fixed. The number is never the same. I have found there are a lot of junk programs that are installed. For example, Optimzer Pro, Cross Browse, PC Tuner to name a few. I have also noticed that most of the computers DNS servers get set static. Current computer i am working on is set to 81.218.119.5 and 82.163.142.130.

I have done some research and find that every DNS i see goes to Israel. I have been removing the infection by running multiple tools. Malwarebytes, Hitman Pro, Adwcleaner, Superantispyware and resetting all the Browsers, but it has been coming back on occasion. I also have been uninstalling the LAN and reinstalling with a newer driver because seeing a DNS get set static by a bug is something i have never seen before.

Wondering if you guys have any suggestions. It has happened on windows 7 and windows 8 computers.

Thanks

 

[SIW2]

Similar ransomware has been around a while. Maybe there is new onslaught of it at the moment.

 

[audare]

Having the same problem

Hi,

I am having this exact problem on my computer. Unfortunately I am not tech savvy. How can I get rid of this and clean up my computer without paying an arm and a leg? Thanks
Audare

Hello Everyone!

I have came across something that has been getting on my nerves the past month. I work at a small IT store and we have been getting a lot of calls about this pop-up. What it does is it pops up a block saying computer is infected and you have to call this random number to get it fixed. The number is never the same. I have found there are a lot of junk programs that are installed. For example, Optimzer Pro, Cross Browse, PC Tuner to name a few. I have also noticed that most of the computers DNS servers get set static. Current computer i am working on is set to 81.218.119.5 and 82.163.142.130.

I have done some research and find that every DNS i see goes to Israel. I have been removing the infection by running multiple tools. Malwarebytes, Hitman Pro, Adwcleaner, Superantispyware and resetting all the Browsers, but it has been coming back on occasion. I also have been uninstalling the LAN and reinstalling with a newer driver because seeing a DNS get set static by a bug is something i have never seen before.

Wondering if you guys have any suggestions. It has happened on windows 7 and windows 8 computers.

Thanks

 

[Jacee]

81.218.119.5 is 81.218.119.5/bzq-218-119-5.red.bezeqint.net IP Address Whois | DomainTools.com
You might want to ask your infected users why they're installing such 'non help' programs?....
:shock:

Get rid of the garbage programs (uninstall), then flush the dirty DNS cache, and restore MS's Hosts File:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Right click on the flush.bat file to run it as Administrator.
The computer should reboot itself.

Hope that helps in most cases.