I received a Phone Call From Someone claiming I have a Virus

Hi,

It sounds like a version of "Do you have Prince Albert in a can?" or "This is the phone company
and we need you to help tighten the cables so pull real hard".

No one program can be relied upon to detect and remove all malware. Added that often easy
to detect malware is often accompanied by a much harder to detect and remove payload. So
its better to be overly thorough now than to pay the high price later. Check with these to an
extreme overkill point and then run the cleanup only when you are very sure the system is clean.

These can be done in Safe Mode - repeatedly tap F8 as you boot however you should also run 
them in regular Windows when you can.

TDSSKiller.exe. - Download to the Desktop - then go to it and Right Click on it - RUN AS ADMIN
it will show any infections in the report after running - if it will not run change the name from
tdsskiller.exe to tdsskiller.com. Whether it finds anything or not does not mean you should not
check with the other methods below.
http://support.kaspersky.com/viruses/solutions?qid=208280684

Download malwarebytes and scan with it, run MRT, and add Prevx to be sure it is gone.
(If Rootkits run UnHackMe)

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Malwarebytes - free
http://www.malwarebytes.org/products/malwarebytes_free

SuperAntiSpyware Portable Scanner - Free
http://www.superantispyware.com/portablescanner.html?tag=SAS_HOMEPAGE

Run the Microsoft Malicious Removal Tool

Start - type in Search box -> MRT  find at top of list - Right Click on it - RUN AS ADMIN.

You should be getting this tool and its updates via Windows Updates - if needed you can
download it here.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN
(Then run MRT as above.)

Microsoft Malicious Removal Tool - 32 bit
http://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Microsoft Malicious Removal Tool - 64 bit
http://www.microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en

also install Prevx to be sure it is all gone.

Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN

Prevx - Home - Free - small, fast, exceptional CLOUD protection, works with other
security programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back
here or use Google to see how to remove. 
http://www.prevx.com/   <-- information

http://info.prevx.com/downloadcsi.asp?prevx=Y  <-- download

PCmag - Prevx - Editor's Choice
http://www.pcmag.com/article2/0,2817,2346862,00.asp

Try the trial version of Hitman Pro :

Hitman Pro is a second opinion scanner, designed to rescue your computer from malware
(viruses, trojans, rootkits, etc.) that have infected your computer despite all the security
measures you have taken (such as anti virus software, firewalls, etc.).
http://www.surfright.nl/en/hitmanpro

--------------------------------------------------------

If needed here are some online free scanners to help

http://www.eset.com/onlinescan/

-----------------------------------

Original version is now replaced by the Microsoft Safety Scanner
http://onecare.live.com/site/en-us/default.htm

Microsoft Safety Scanner
http://www.microsoft.com/security/scanner/en-us/default.aspx

----------------------------------

http://www.kaspersky.com/virusscanner

Other Free online scans
http://www.google.com/search?hl=en&source=hp&q=antivirus+free+online+scan&aq=f&oq=&aqi=g1

Hope this helps.

---

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle <- Mark Twain said it right.

Hello, I'm trying to understand the scenario. 

When you received the phone call from someone claiming from Microsoft, what were they asking you to do?

Thanks

Microsoft will never cold call users asking for personal information or access to your PC. Whenever possible these calls should be reported to your local consumer protection agency.

In the United States you can visit the FTC website to report issues such as these:
http://www.ftc.gov/bcp/edu/pubs/consumer/telemarketing/tel19.shtm

For more information and helpful tips on how you can protect yourself from fraud, please visit:
http://www.microsoft.com/protect/yourself/default.mspx

Thanks!

Hi MrBoo

I regret to say that I was one of the stupid, nieve, egg-headed, no mind, fool who fell for that phone call. The man on the phone claimed to be a Microsoft technician and asked me if I was online and if so was my computer performing slowly. I wasn't online right at that moment but was noticing earlier that day that my computer was moving like a snail. He then told me to turn the computer back on and we will time how long it takes to startup. By now my stupid computer was, of course, starting up extremley slow. He indicated that my computer was infected. He then instructed me to go to the device manager to view the Event Viewer to verify that if there were more than 5 or 6 Errors in the log, it was a positive infection. Anyways, I'm trying to make a long story short, he had me go to a website and type in a work order code and advised me that a Microsoft tech was going to fix and rid of the virus by remote. Well, all of a sudden, the technician had total control of my computer, changing all my personal settings and disabling stuff. I was p***ed!!!!!!! (Sorry about the language) Immediately, I was trying to tell the guy that I didnt like what was going on and wanted more information. He was telling me not to be afraid and that everyone was downloading their 'MaleWare Bytes' software. My most dummest moment caused my computer to get a virus from them. Took about 4 days to restore my computer back to my settings and perform a systems restore to factory settings. I later learned that thousands of people who live here in Las Vegas had their computer infected and money taken from their bank accounts. Good thing that I don't have a whole lot of money.

telefather,

Read:
http://en.wikipedia.org/wiki/Social_engineering_(security)

Contact Microsoft Product Support Services.

Visit the Microsoft Virus Solution and Security Center for resources and tools to keep your PC safe and healthy.  If you are having issues with installing the update itself, visit Support for Microsoft Update for resources and tools to keep your PC updated with the latest updates. 

For support outside the United States and Canada, visit the Product Support Services Web page.

To report Internet crime, contact IC3 or your local FBI field office (http://www.fbi.gov/contact/fo/fo.htm).

Hope this helps,

---

Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & Security - Since 2003. ~~~ My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

Vincenzo,

Thanks for the good read. Very informative. I am just taking that experience as a rough lesson learned.

telefather,

You're welcome. Glad to help and thank you very much for your feedback.

Good luck,

---

Vincenzo Di Russo - Microsoft MVP Windows Internet Explorer, Windows Desktop Experience & Security - Since 2003. ~~~ My MVP Profile: https://mvp.support.microsoft.com/profile/Vincenzo

Wow. I got one of these calls and simply didn't believe it was microsoft calling me.  I'm so glad that I hung up on them. I got another one of these calls today from some company claiming to be "global something or other" and they were babling about files down loaded from the net affecting my computer. I think it was a version of the same thing. Thankfully I told them I didn't know them from Adam and didn't trust them and hung up on them.  Both times these were from Indian call centers and unsolicited phone calls.  I'll bet a lot of people fall for this.  They've got a hide though doing it on our home phone numbers.

The man I was talking to was and East Indian and so was the Lead Technition. After the dust settled, I discovered that the name of the phone solister company was "On support Click". I'm just not sure if they were the ones that had taken money from people's accounts. I'm glad they didn't get access to my accounts.