Windows 10: Scammed by Ultraviewer

A scammer loaded Ultraviewer on my laptop yesterday. Actually saw my bank accounts. I saw them viewing my various other screens. Including an Investment account. Do they download my whole computer? Even my tax files and TurboTax? My bank is aware so luckily there wasn’t any money taken but how do I know how much information did they get? I deleted the software/apps they uploaded to my computer.

:)

 

Is Ultraview a scam program?

UltraViewer is just a remote support software. Itself not a scam or harmful program. But the technician who contacted you may be a scammer. So do not allow him to remote control your computer if you could not verify his identification.

 

UltraViewer Scam + Bitlocker Recovery

Hello,

My dad recently fell for a scam and downloaded UltraViewer and provided the scammer with access to his computer. While he didn't provide any information other than his name and last 4 of his SSN on the phone (and hung up when he caught on) he was on the phone for almost an hour and never disconnected/shut off the computer for several days afterwards.

Upon finding out I removed UltraViewer and ran several scans with Microsoft Defender/Malwarebytes. Microsoft Defender came up with the following threat detected: "virtool:win32/DefenderTamperingRestore", status: active, and that the threat has not been completely remediated. The Affected items notes: regkeyvalue: hklm\software\microsoft\windows defender\DisableAntiSpyware. There is no option to remove or disable this threat...should I be concerned by this? Is it likely tied to the UltraViewer scam or possibly something else?

Additionally, I tried to run the Microsoft Defender Antivirus offline scan. When I did this the computer restarted and loaded a Bitlocker Recovery Screen. I don't recall ever setting up Bitlocker on this computer (it's only a few months old), and I'm uncertain if I should be concerned by this popping up or if it's legitimate and okay to fill in. The Bitlocker screen provides a Recovery Key ID, which does not match up with the Recovery Key ID listed under their Microsoft account for this computer.

Finally, I've never dealt with a scam like this before. UltraViewer was removed, I ran several scans, and I even had a Dell representative access and scan through the computer for any malicious content/software. The Dell rep said he didn't seen anything concerning and they should be okay if they change their passwords and just let their banks know. Is this really sufficient? I had planned to Factory Reset the PC just in case, but if it's overkill I'll just have them monitor for suspicious activity.

Thank you in advance for any help you can provide!

 

UltraViewer 6. "Additional files"?

Hello Linda,

You can try using the Geek Uninstaller to remove all the footprints of the UltraViewer app. Here are the steps:

1. Download and install Geek Uninstaller from their official website.
   
2. Open Geek Uninstaller and wait for it to load all the installed programs on your computer.
   
3. Locate UltraViewer in the list of installed programs and select it.
   
4. Click on the Uninstall button and follow the prompts to remove the program.
   

If that doesn’t work, you can try manually deleting the app files by following these steps:

1. Press CTRL + SHIFT + ESC to open Task Manager.
   
2. Click on the Details tab.
   
3. Check if UltraViewer is among the currently running programs.
   
4. Right-click on UltraViewer and click on Open file location.
   
5. Manually delete all files from the directory.
   

I hope this helps,

Fathia