**Microsoft Warning Alert** scam

I was on my computer this afternoon reading through new feeds when a **Microsoft Warning Alert** screen popped up. It stated that a "Mal1cious P0rn0graphic  Spyware/Riskware Detected  Error #0x80072ee7 and "to please call us immediately at: 1-877-644-0337.   The warning continued to tell me that "if you close this page, your computer access will be disabled to prevent further damage to our network." I called the number provided on the "Microsoft"-looking website that was provided.  Of course, I was lead down the rabbit hole to a final request for a scanned check in the sum of $200. Please be careful with these hackers! I told the Indian accent on the other end that this whole process sounded suspicious.  He became defensive, so I hung up and called the 1-877 # provided on the Official Microsoft website and reported the scam.

 

Discussion Info


Last updated December 8, 2019 Views 155,065 Applies to:

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

While scrolling through a Costco grocery store advertisement in yahoo mail, I got same popup bogus "Microsoft Warning Alert" on Mal1cious P0rn0graphic spyware/risk detected Error # 0x80072ee7 saying Please call us immediately at 877-465-7009 ... financial information is being stolen.  The whole thing was being read through my computer speakers as below.  My browser locked up, and I could not close the popup.  I somehow got the computer to turn off while clicking around trying to clear the popup.  On another computer, I contacted Microsoft, and was told this is not a MS phone number and be glad I did not call that number because it is a scam.  I have not been on any pornographic websites.  Closest thing done is go through and delete some emails in SPAM folder on yahoo.com.  Some of the emails were advertisements for Russian and Asian, etc. dating websites plus many many other typical SPAM type emails that were apparently spammed by yahoo because I did not spam the emails. There must be about 100 emails automatically going to spam each day.   I am planning to run MS Defender OffLine on my computer.  Not necessary because of this problem but just to be safe.    

****Below is message in bogus popup****

This site says...
"Microsft Warning Alert"
Mal1cious P0rn0graphic spyware/risk detected
Error # 0x80072ee7
Please call us immediately at (877) 465-7009
Do not ignore this critical alert
Your computer has alerted us that it has been infected with a Pornographic Spyware and riskware.  The following
information is being stolen...
>Financial Data
>Facebook Logins
>Credit Card Details
>Email Account Logins
>Photos stored on this computer
You must contact us immediately so that our expert engineers
can walk you through the removal process over the phone to
protect your computer from being disabled or from any information loss.

 Thank you for your post. I will look into my spam folder and delete those emails! 
To me, it seems to be an obvious hacking job. But I haven't found any solution yet.

On windows 10, this directory contains a file for every tab open by Edge:

C:\Users\%user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active

I killed Edge with task manager, went into this directory and browsed the DAT files located here with notepad. There is one file for every open tab in Edge. Found the file with entries associated with the malicious page. I deleted that DAT file. I did not touch the "RecoveryStore.xxxxxxx" file also located in his directory.

Restarted Edge, no more malicious popup and all my other tabs are still there.

While I don't have a solution, the important thing to note in this comment was that the user was in Yahoo.  That appears to be the common thread in my own experience and that of others who have gotten that "warning".

Yahoo claims it's not them but Yahoo is the common denominator to when this "warning" comes up.  In every instance I run scans, delete cookies, dump caches I'm not otherwise infected.

Windows please take note and see what the fix is since Yahoo seems unable to do so. 

I, also, received this alert and was foolish enough to call and allow access to my computer.  I just received another pop-up.  Would like to know how to remove this from pc ASAP!   Thank you

I, also, received this alert and was foolish enough to call and allow access to my computer.  I just received another pop-up.  Would like to know how to remove this from pc ASAP!   Thank you

If you allowed remote access, you are in trouble now. First, what you should do if you see this.

******************************************************

It's a common scam. Click the X to close the window. You should then see a box at the bottom, Do not allow this site to create new messages. Check it and then close that window and finally the popup.


If that doesn't work, for Edge, follow the instructions by Scott_Ki here:
https://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/edge-frozen-with-virus-warning-popup/7212a393-90ad-48d0-ab55-4ffe1f21a554?page=2&msgId=7618ae67-bf16-4155-bf90-d8a7405ee199   


For all other browsers, use the Task Manager to exit the browser. Reboot and see if the pop-up goes away.


How to Use the New Task Manager.
http://www.wikihow.com/Open-Windows-Task-Manager   


If the problem persists, for any browser:


Remove Tech Support Scam pop-up (Call For Support Scam)
http://malwaretips.com/blogs/remove-tech-support-scam-popups/   


Please read:


PSA: Tech Support Scams Pop-Ups on the Rise
https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/   


Breaking down a notably sophisticated tech support scam M.O.
https://blogs.technet.microsoft.com/mmpc/2017/03/02/breaking-down-a-notably-sophisticated-tech-support-scam-m-o/   

For more information, see this post by GreginMich
https://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning-windows_10/my-computer-was-blocked-how-do-i-unblock-it/4735ea26-4e01-40eb-9c34-c991d11ad194#LastReply

********************************************************

And since you let them in.......................................

It's a common scam that you could have ended with the Task Manager. Now you must consider everything on your computer has been compromised. Passwords, PIN numbers, financial account information. A clean install of Windows is the best option and what I would do myself. See the following and decide if you want to tempt fate not knowing what they may have installed on your computer.  

From Quietman, see: I have been hacked...What should I do?
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/?p=3071944    

And this from the FTC:

Tech Support Scams
https://www.consumer.ftc.gov/articles/0346-tech-support-scams    

Next, follow the instructions here even if the pop up is gone.
http://malwaretips.com/blogs/remove-tech-support-scam-popups/     

Also run this tool.

SuperAntiSpyware (Free version)
http://www.superantispyware.com/     

Please read:

PSA: Tech Support Scams Pop-Ups on the Rise
https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/     

Breaking down a notably sophisticated tech support scam M.O.
https://blogs.technet.microsoft.com/mmpc/2017/03/02/breaking-down-a-notably-sophisticated-tech-support-scam-m-o/  

===== ===== ===== ===== ===== ===== ===== ===== ===== =====
☞ Avoid a post. Backup your data. ☜

Bruce Hagen
MVP: 2004 ~ 2010
2014 ~ Present
Imperial Beach, CA
This solution by howard4KJ worked for me. Thank you!

hi

I just fell victim to this same scam and I did phone the number and gave access to my computer before I realised it was a scam when they asked for money.

do you know if this means the scammers have any of my information like bank details?

kind regards 

caitlin 

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.