Windows 10: HACKER - EVENT VWR

Hey, I'm honestly shaking right now, as I'm just a kid in the family who can speak English.

I recently got a call from Telstra saying I had a virus in my computer, immediately I had a feeling I was being scammed.

However, being so young, I still followed a few steps before I decided to piss them off, and troll them after realising they were Indian Scammers who munched on curry and had a fake ass voice, unwilling to give me Telstra details.

Here's what happened, and I need DESPERATE HELP/VERIFICATION.


1. He told me to go "window" + "r"
I DID THIS


2. He told me to type "eventvwr"

I ALSO DID THIS


3. He told me to go into "custom views" and click on "administrative events"
I ALSO DID THIS


THEN I GOT SOME RANDOM ERROR STUFF ON SCREEN, LIKE 2


THEN I REALISED THIS IS 99.999999999999999999% A SCAM. TOOK ME LONG ENOUGH.

So I decided to mess with him waste his time, end the call and not follow any other instructions.


Briefly, after this, I decided to restart my laptop, and IDK if it got slower cause I got hacked or because I just restarted or nothing happened but I'm just imagining things because I'm scared.



DID I GET HACKED? YES OR NO. Please also give reason and explanation. I'm still shaking after 30 minutes.

:)

 

foreign hackers

• Can you provide more detail?
• Who told you foreign hackers corrupted your system?
• Who says you need to buy an SQL SERVER?
• How did this whole situation play out?

 

Export All Administrative Events to Excel


To analyze events, from the Windows Event Viewer, there is a simple way to export all Administrative Events to Excel, with PowerShell.

Exporting all Administrative Events to Excel is a simple two Step process, as described here:

Step 1 - Create the Administrative Events View .xml file

1. Open Eventviewer (%windir%\system32\eventvwr.msc)
2. Navigate to: Event Viewer (Local) > Custom Views > Administrative Events
3. In the “Actions” pane select “Filter Current Custom View”.
4. Select the the XML tab.
5. Press Ctrl+A to select all the XML code of the Custom View.
6. Open a notepad, paste the selected code and save the file to your Desktop as AdmEvtView.xml

Step 2 - Create the csv file with the events

1. Download the ExportEvtCSV.zip file, which contains the script ExportEvtCSV.ps1 and unzip it, on your Desktop.
   It's not a fancy script, just basic PowerShell commands to create a csv file on the Desktop.
2. In Windows Search, type “ISE” (without the quotes) to open “Windows PowerShell ISE” and Run as administrator
   
3. To allow running the script, change the ExecutionPolicy, for this session. To do that, in the Console pane type:
   Code:
   
   Code:

   Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass -force

4. In the Windows PowerShell ISE, open and run the script: ExportEvtCSV.ps1
   The script will create a csv file with a name YYYYMMDD.HHMM.csv on the Desktop
5. When done, open the newly created .csv file, format the columns as needed and optionally save it as .xlsx, if you wish.

That’s it! You now have all the Administrative Events in Excel for filtering and further analysis.

Now to the more technical hard stuff... *Confused

There is a reason for running the script from within PowerShell ISE!

It would be great if everything was also working perfectly, when running the script from an elevated PowerShell too.

We can run it from an elevated PowerShell, which means that you just follow the Step 1, as above but for the Step 2 instead of the ISE you run the script from an elevated PowerShell.

The problem is that it will work only for anybody who has en-US format for the dates. Everyone else, who has another format (i.e. en-GB, fr-FR, el-GR etc.), the dates are not translated properly by Excel (although the script uses the –UseCulture switch) and remain as text in the en-US format.

I'm not sure if this a bug of the "export-csv" cmdlet, but although it runs the way it supposed to from within the ISE, from PowerShell there is a problem with the dates format.
As I haven’t found a way to overcome this obstacle, any suggestion from the PowerShell gurus of the forum (like my good friend Shawn @Brink, for instance), is welcome.

 

Calender events disappeared

Hi,

Thank you for posting your query on Microsoft Community.

In order to assist you further with the issue could you please confirm a couple of things:

• How do you access Calendar? Is it through a Web Browser or an Email Client?
• Are you referring to the default Calendar app?
• Did you make any changes to your account before you encountered the issue?
  

Nevertheless, I suggest you to follow the steps below and check whether you're able to see the events in your Account:

• Go to Outlook – free personal email and calendar from Microsoft
• And check whether you're able to see all your Calendar events.

Please get back to us with the updated status of the issue so that we can work on it to help you better.