Windows 10: Attacked by Tech Support Scam Pop-Up Today (01-18-2018)

Today, at about 4:30 pm EST, I was hit by a Pop-Up Tech Support Scam. I couldn't close it out, but I could still use Windows Defender. I ran the Quick Scan (It only took about 3 minutes.), and it showed No Threats.

I then immediately ran the Full Scan -- it took one hour and 35 minutes. It detected the following:

SupportScam:JS/TechBrolo.F

I had Windows Defender delete it. I then reported the Scam to Microsoft.

The Pop-Up was accompanied by a male voice that ran on a loop for one minute, informing me to call an 800 number.

:)

 

Security virus in my computer

That's a fake alert/warning pop up, usually with a phone number to call. It's a so called Tech Support Scam.

It does not necessarily mean that your computer is infected and those pop ups are in general easy to close.

What really helps is the use of a good browser together with a good advertisment etc blocker.

Personally I use Firefox and uBlock Origin.

Suggestion to read:

• Beware of Phony Tech Support Scams
• Tech support scams - Windows Defender Security Intelligence
• Remove Tech Support Scam Pop-up Virus (Call For Support Scam)
  
• How to remove Tech Support Scam Popups in your Browser
  
• ad blockers & anti-trackers | Malwarebytes Labs
• List of advertisment blockers etc.

 

877-764-0380 adware

Remove Tech Support Scam pop-up (Call For Support Scam)

Remove Tech Support Scam Pop-up Virus (Call For Support Scam)

And see:

PSA: Tech Support Scams Pop-Ups on the Rise

PSA: Tech Support Scams Pop-Ups on the Rise - Malwarebytes Labs

See this post by GreginMich

1 888 2361 scam

 

Are you running the Tampermonkey extension on Edge ? If not, you should install it.

 

@Brink @Ztruker @dmholt57 @Samuria @zbook @Word Man

I had never heard of Tampermonkey. I went to the website below, and it says that it's Free; however, it doesn't say anything about it being an Anti-Virus or a type of detector. How would it help to stop Tech Support Scams?

Does anyone else have an opinion on Tampermonkey?

Your request appears to be from an automated process

This is what the Website says about Tampermonkey:

 

It's a Script blocker that will prevent what happened

 

There are websites that critique software and have user feedback. Downloads are also tested to be malware free. For the software in the post this is a link to downloads.com where there are comments on it:
Tampermonkey - Free download and software reviews - CNET Download.com

 

OP could pin Task Manager on his taskbar and then when popups like this happen again, just launch Task Manager and exit Edge. The rouge JScript will be in a Temp file and CCleaning would also take it out.

 

@zbook @Bat 1

Tampermonkey - Free download and software reviews - CNET Download.com

As you guys can understand, I am skeptical about additional downloads. The website above states that I would need Google Chrome to install most apps, extensions, and themes. I'll wait and see if some others weigh in on this before I make a decision to download.

Bat 1's suggestion, below, sounds like a good alternative.

I'll check this thread first thing tomorrow morning.

 

Run the Dell hardware diagnostics on your computer to have baseline results:
DELL hardware testing: Resolve Hardware Issues With Built-in and Online Diagnostics (ePSA or PSA Error Codes) | Dell US

 

If You click on the icon all the way to the right on Egde then extensions You'll see you download Tampermonkey from the Microsoft Store. There are also other extensions like AdblockPlus listed there too. I go to a lot of less-than-reputable websites so I also run Malwarebytes Premium. You might want to consider gifting a subscription to Malwarebytes to your brother *Smile

 

I have had this myself.
Here is the link with cleanup solution > Edge Browser hijack scam

 

Is Chrome susceptible to this exploit?

 

Hi folks
@Writer particularly

I've suggested what to do in these situations before but I'll repeat. It assumes you have a decent clean backup of your OS -- if you haven't then you need to start taking them.

1) SWITCH OFF COMPUTER IMMEDIATELY -- power off -- do not close windows or anything - simply POWER the machine off and REMOVE any external devices e.g external USB HDD's etc.

2) Disconnect from Internet (and LAN if you are on a Network).

3) Boot recovery program / restore program and delete current partitions -- if you have a stand alone partitioning program you can re-format HDD if you want - usually not necessary if using things like Macrium to restore as Macrium will delete target HDD partitions for the restore.

4) Boot restored computer -- DO NOT CONNECT TO INTERNET JUST YET

5) Test machine

6) if OK connect to Internet and connect any other devices.

7) If NOK then clean windows install is your only option.


ALWAYS ALWAYS ALWAYS have OS backups --with FREE MACRIUM there is NO EXCUSE not to have any.

I've posted on this ad Nauseam -- seems some people will never learn.

This method will work far faster than using any "Cleansing" or scanning software -- for starters I don't want to use an infected machine for a microsecond longer than necessary, and none of those "cleansing programs" which themselves may have been compromised by the hack can guarantee 100% that the problem is solved.

It's like someone saying a plane has a serious defect but can you fly it and repair it while it's in the air. !!! No thanks - I'll fix it on the ground !!!!!!

Cheers
jimbo

 

Guys, this is a standard online scam. All you do is disconnect from the internet, close the browser using Task Manager, then clean out the browser using Ccleaner. Run ADWCleaner to be sure there's nothing leftover, and problem solved. *Smile