Windows 10: Bitlocker followed by tech support scam popup

After booting an older laptop, I was greeted by a bitlocker prompt. Once I finished unlocking and restarting the system, I received the scan popup asking me to "not shut down and call this number". How compromised is this computer?

:)

 

Tech Support Scam followed by Bitlocker recovery screen - are these related?

Hi Nathalie_748,

Welcome to Microsoft Community.

I'm Hahn and I'm here to help you with your concern.

I understand your concern regarding the BitLocker recovery screen appearing after experiencing a tech support scam pop-up. It's good that you did not call the number or provide any information to the scammers.

Microsoft does not send unsolicited email messages or make unsolicited phone calls to request personal or financial information, or to provide technical support to fix your computer. If you didn't ask us to, we won't call you to offer support. Protect yourself from tech support scams - Microsoft Support

The BitLocker recovery screen can indeed appear if the computer is shut down unexpectedly, such as by unplugging it. This is because BitLocker is designed to protect your data, and an abnormal shutdown could be interpreted as a potential security threat, prompting BitLocker to ask for the recovery key upon the next startup.

Entering the BitLocker recovery key should not give the scammers access to your system. The recovery key is used to unlock your encrypted drive and does not grant remote access or control over your computer. It's a security measure designed to protect your data in case of unauthorized access or changes to system configurations.

After unlocking the drive, run a thorough scan of the system using Windows Defender to check for any potential malware or security issues.

Stay safe!

Your Sincerely

| Microsoft Community Support Specialist

 

problem with browser Tech Support popup

@shall999

If you get these popups in Windows 8.1, it means that your computer is already infected.

You need to run some scans.

See this free, multi-step removal guide:
http://malwaretips.com/blogs/remove-tech-support-scam-popups/

If need be, run multiple scans with each of the tools and also
reboot after each scan.

Note: You might not need Hitman Pro.

Cheers,

J

 

Tech Support Scam

If you allowed them remote access either time, you have some work to do.

It's a common scam that you could have ended with the Task Manager. Now you must consider everything on your computer has been compromised. Passwords, PIN numbers, financial account information.
A clean install of Windows is the best option and what I would do myself. See the following and decide if you want to tempt fate not knowing what they may have installed on your computer.

From Quietman, see: I have been hacked...What should I do?

Answers to common security questions - Best Practices - Anti-Virus, Anti-Malware, and Privacy Software


And this from the FTC:

Tech Support Scams

How To Spot, Avoid, and Report Tech Support Scams

Next, follow the instructions here even if the pop up is gone.

http://malwaretips.com/blogs/remove-tech-support-scam-popups/

Also run this tool.

SuperAntiSpyware (Free version)

Anti-Malware & Spyware Removal Software | SUPERAntiSpyware

Please read:

PSA: Tech Support Scams Pop-Ups on the Rise

https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/

Breaking down a notably sophisticated tech support scam M.O.

https://blogs.technet.microsoft.com...-notably-sophisticated-tech-support-scam-m-o/