Today, I got a phone call supposedly from Microsoft saying you were getting many problem messages from my computer and they gave me the above website address to verify the call. They said that my computer has a virus and they wanted to delete the virus.
I am really uneasy about this supposed contact from Microsoft.
They gave me a company name of Ammyy Administrators, 108 W 13th Street, Wilmington, Delaware 19801, phone 213-550-1062. Are they a legitimate representative of your company?
I would appreciate hearing from you about whether I now have to be worried about identity theft or having my computer hijacked by these people. Thank you for your response.
This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread.
You did not say you actually had installed anything, I though you were checking before you did,
1. Uninstall their software NOW!
2. Do a System Restore back to before you did that NOW! (after 1. we want to be as sure as
possible it is gone though these are not 100%.)
3. Change ALL your passwords and contact any on-line sites such as banks, credit cards, and
others by PHONE (not using the computer) to notify them of a possible breach. Those such as
email and others you have to change on-line do so after (6) if possible but do not waste time
on Credit Cards and Banks (call them NOW).
4. Contact the previously mentioned organizations for information to help.
6. After the Uninstall and System Restore run these :
If you need to check for malware here are my recommendations - these will allow you to do
a thorough check and removal without ending up with a load of spyware programs running
resident which can cause as many issues as the malware and maybe harder to detect as the
No one program can be relied upon to detect and remove all malware. Added that often easy
to detect malware is often accompanied by a much harder to detect and remove payload. So
its better to be overly thorough now than to pay the high price later. Check with these to an
extreme overkill point and then run the cleanup only when you are very sure the system is clean.
These can be done in Safe Mode - repeatedly tap F8 as you boot however you should also run
them in regular Windows when you can.
TDSSKiller.exe. - Download to the Desktop - then go to it and Right Click on it - RUN AS ADMIN
it will show any infections in the report after running - if it will not run change the name from
tdsskiller.exe to tdsskiller.com. Whether it finds anything or not does not mean you should not
check with the other methods below. http://support.kaspersky.com/viruses/solutions?qid=208280684
Download malwarebytes and scan with it, run MRT, and add Prevx to be sure it is gone.
(If Rootkits run UnHackMe)
Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN
Hitman Pro is a second opinion scanner, designed to rescue your computer from malware
(viruses, trojans, rootkits, etc.) that have infected your computer despite all the security
measures you have taken (such as anti virus software, firewalls, etc.). http://www.surfright.nl/en/hitmanpro
If needed AFTER you are sure the machine is clean of all malware. (DO NOT USE IF
MALWARE IS STILL PRESENT.)
You can try an In-Place Upgrade or a repair installation.
You can use another's DVD as they are not copy protected however you will need you own
Product Key. It has to be the same 32 or 64 BIT OEM version of Vista. Also the System
maker will usually sell the disk cheap since you already own Windows. Be sure to do a
good backup or 3 (safety in redundancy).
Norton Power Eraser - Eliminates deeply embedded and difficult to remove crimeware
that traditional virus scanning doesn't always detect. Because the Norton Power Eraser
uses aggressive methods to detect these threats, there is a risk that it can select some
legitimate programs for removal. You should use this tool very carefully, and only after
you have exhausted other options. http://us.norton.com/support/DIY/index.jsp
7. Consider re-installion of Windows back to factory specs in order to be sure the machine is clean.Credit Cards, banks, investments and other sensitive information is critical so do
those while doing 1 and 2 NOW - call those - do not attempt on-line contact until
the machine is VERY VERY clean.
Hope this helps.
Rob Brown - MS MVP - Windows Desktop Experience : Bicycle - Mark Twain said it right.
Rob Brown - Microsoft MVP - Windows and Devices for IT 2010 - current Windows Insider MVP 2016 - current
Did this solve your problem?
Sorry this didn't help.
Great! Thanks for marking this as the answer.
How satisfied are you with this reply?
Thanks for your feedback, it helps us improve the site.