Just got call from someone claiming to represent MS Tech - knew CLSID

[Nisko]

I just received a telephone call from someone (with an Indian accent) who knew my CLSID. He also knew that I had over 19,000 events in my Event Viewer/Administrative Events. For that reason, he wanted to take control of my PC and fix the problems because he said that, any day, my system could crash because of these events. His direct telephone number is 315.215.3520, his name is Ethan Carter and his Microsoft ID is (supposedly) MS1075. Of course, I didn't allow him to take control of my PC - I told him I wanted to verify that he, indeed, worked for Microsoft. A few years ago, I called Canon for tech support and the phone was answered by an Indian who sold me a lifetime PC protection package call SmartLocker 2.2. I only agreed because he answered the Canon Tech Support line and fixed some problems I had. That may have been how someone got my CSLID. In any case, I need some knowledgeable guidance. Someone has a link into my computer and I don't know what they have access to. This is SERIOUS!!!

 

[strollin]

A CLSID is associated with a COM object in Windows and is unique to that COM object but not unique to a particular machine. In other words, for a given COM object in Windows 7, all machines will have the same CLSID.

Support Desk Scams: CLSID Not Unique

To my knowledge, MS would not ever call you.

 

[ignatzatsonic]

The 315 area code is in New York.

This is a scam.

Microsoft is not going to call you.

If you had allowed him to access your PC, he would have offered to "fix" it for a fee.

Ignore him, change your phone number, screen your phone calls, do whatever you have to do, but don't play along.

 

[Nisko]

Thank you very much. Now:
1. What is a COM object?
2. How could this man know how many errors I have in my Event Viewer/Administrative Events?
3. Does he have access to any of my data or any other part of my PC?

Thanks again..............

 

[whs]

Nah, he is just guessing. Everybody has a slew of errors in event viewer. I have over 10.000.

 

[ignatzatsonic]

Component Object Model - Wikipedia, the free encyclopedia

Com object described at above link.

How do you know 19,000 errors in Event Viewer is correct? How did you confirm that?

Have you run thorough malware and virus scans?

 

[ignatzatsonic]

Phone Scam - Windows Customer Support and CLSID | Steve Roy

Nisko:

Read the above link about someone's experience with this same scam.

The CLSID you were told about is found on millions of PCs. This guy likely knows NOTHING about your PC.

The CLSID shown at the above link when you run the "assoc" command is the very same one found on my own PC. And probably on your own PC.

 

[LMiller7]

The caller initially didn't even know you had a computer, it just being a reasonable guess. Many people who have never owned a computer have received such calls. They are very skilled at gaining your trust. Among other things they will quote well known CLSID numbers that are no more unique than where windows installed. Unless you granted remote access the caller knows nothing specific about your computer other than what you may reveal.

Microsoft or it's authorized representatives will never call you except as part of a ongoing issue where you initiated the contact. Otherwise they would have no way of knowing your phone number. In that event they would clearly identify who they are and answer any questions you may have. They would never ask for control of your computer or ask for money. Scamers will be evasive about any questions not directly related to what they want you to do. Everything they tell you is suspect.

Any phone number you might obtain about them is almost certainly fake.

These calls have been going on for years. They are successful often enough for the practice to continue.

 

[Berton]

The calls I've gotten have been very careful to not mention Microsoft, have always been from Windows Technical Support or Windows Support Group. Not saying Microsoft [which understandably in peoples' minds is the same as Windows] keeps the callers from running afoul of Trademark and Copyright laws, harder to prosecute.

 

[Nisko]

Thank you all for your help and explanations. I feel much safer now knowing these things and not allowing this guy to take over my computer.

 

[strollin]

My son used to work at Staples in their tech department. One of the tactics they wanted him to use (he wouldn't do it) was to bring up the event viewer and show the customer all of the errors logged there in an attempt to convince them that they needed some cleanup service Staples offered.

If you find a computer that doesn't have errors logged in the event viewer then either the event logging process is broken or the event viewer has recently been cleared.

 

[Nisko]

That's interesting - thanks. And kudos for your son!!!