Support.me Scam

masu485

masu485

New Member
Good afternoon,

I would just like a little information about this. This afternoon, my father stupidly was on the phone with one of these scammers, gave them the code to enable them to take over his computer, but thankfully did not give them a credit card number when they offered him security package deals, and said he was going to look for it. They are calling back tomorrow.

He did all this foolishness on his own laptop, so I have two questions.

1. Is the scam just to steal money, or is his laptop in danger right now? Should he consider himself in the clear because he's not giving any money, or should he still be concerned.

2. If there is concern, could this affect the other two computers in the house? or would it be localized to only his laptop? We all share wi-fi.

Thanks in advance.
 
Thanks for the reply. I don't know the specifics, but I think he went to support.me and then clicked 'yes' on something, then he either saw a list of "viruses" (which I know are all fake), or a DOS screen that showed him the computer would shut down permanently when it reached 100%, the number was almost at 100 (I also knew this to be fake). I don't know if that is considered a download or what, but I am concerned that he gave them actual control of his mouse.

I am so fed up with everything he's been doing lately that I am just concerned that they could somehow get to the other two computers in the apartment.

But in any case, what would work to remove the download? Any anti-virus?
 
Are there any new icons on the desktop? Start off by doing this.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com but DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Vista and Windows 7 users must right click on the hijackthis icon and click on run as. If the run as option doesn't appear then press and hold the shift key while right clicking on the icon to get it to appear.



Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
 
Last edited:
You must log in or register to reply here.
Back
Top