Pop-up Scam or Microsoft?

Today I received a pop-up telling me to call 888-560-7881 and not to shut down before

calling the number.  The tech said they were Microsoft and made me go to anydesk.com

and run it from the computer so he could check the machine. 

Did I get a scam today or did I get Microsoft legitimate?

 

Question Info


Last updated October 13, 2019 Views 6,252 Applies to:
Hi Bryan. I'm Greg, a volunteer installation specialist and 8 year Windows MVP, here to help you.

That's a Fake Virus scam which can emanate from a mistyped URL it occupies.

Close the Browser window using whichever method is necessary, as it cannot escape the browser unless you download something from the page.

If you cannot close the browser window, right click the Task Bar or press Ctrl + Alt + Delete keys to open the Task Manager, choose Show Less Details, highlight the browser and choose End Task.

If this fails hold the power button to Shut Down. If you do this Edge may reload the page when it starts back up, but it will also give you an option to Start Fresh to avoid opening the previous tabs.

Also in Edge, if you try to X out of the browser WIndow, it may present a dialogue box to end the session. The webpage is allowed to put text in the box but cannot stop it from closing the WIndows when you choose OK, so that is safe to do.

If you called the scammers and they installed anything on your PC, open Settings>Apps, organize by Date, uninstall anything on that date you didn't install yourself. Then run a full scan with Malwarebytes and AdwCleaner. You can turn off the MB trial version in it's Control Panel.
http://filehippo.com/download_malwarebytes_anti...
http://www.bleepingcomputer.com/download/adwcle...

If you paid them anything, notify your bank that you were scammed.

I hope this helps. Feel free to ask back any questions and let us know how it goes. I'll keep working with you until this is resolved.
----------------------------------
I am a volunteer and not Microsoft.

Over 100,000 helped in forums for 10 years. I don't quit for those who are polite and cooperative.

Windows MVP 2010-20

31 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Its a tech support scam.

Its a scam, Microsoft does not call anybody to provide support.

Warning: There are "Tech Support Scams" pretending to be Windows 10 Activation Technologies. Please be vigilant. Microsoft never calls users to inform them their license is expiring. Neither should you get an email. Learn more in the following article:

PSA: Beware of Windows 10 Activation Tech Support Scams
http://www.groovypost.com/news/beware-of-window...

Report it:
https://www.microsoft.com/reportascam/


Tech support scams - Windows Defender Security ... - Microsoft
https://www.microsoft.com/en-us/wdsi/threats/su...

Protect yourself from tech support scams - Microsoft Support
https://support.microsoft.com/en-us/help/401340...

Scan your computer:
https://www.groovypost.com/howto/clean-virus-in...
Best,
Andre
Windows Insider MVP
MVP-Windows and Devices for IT
twitter/adacosta
groovypost.com

5 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Greg,

Okay.  I've installed Malwarebytes and ADW cleaner.  Ran full scans for each and am only coming up with one element for Malwarebytes. 

Unfortunately, I did call the number today but did not offer financial account numbers or information to anyone.  
I changed the main vault password for my LastPass password manager. 

If there are any other things please feel free to come back and offer advice.  I can't believe I was so bad to fall for it.

6 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

A good idea would be to report this too. I think you have made the necessary actions.
https://www.microsoft.com/en-us/reportascam/
Sumit
Windows Insider MVP 2018-2020 and Volunteer Moderator

2 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

The machine now has the PUP.Optional.Legacy that Malware and ADW cleaner can’t remove for good.  It detects on ADW cleaner, asks for a reboot then returns after windows 10 starts again.  

LMK

2 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Did you use the ESET Sysrescue offline scanner as described in the article I linked to scan the computer?

You can also use Malwarebytes and Norton Power Eraser.
Best,
Andre
Windows Insider MVP
MVP-Windows and Devices for IT
twitter/adacosta
groovypost.com

4 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.