{"id":12533,"date":"2017-03-07T19:01:45","date_gmt":"2017-03-08T00:01:45","guid":{"rendered":"http:\/\/www.thundercloud.net\/infoave\/new\/?p=12533"},"modified":"2017-03-08T06:52:36","modified_gmt":"2017-03-08T11:52:36","slug":"microsoft-is-never-going-to-tell-you-that-your-computer-is-infected","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/microsoft-is-never-going-to-tell-you-that-your-computer-is-infected\/","title":{"rendered":"Microsoft is NEVER Going to Tell You That Your Computer is Infected!"},"content":{"rendered":"<h1>Microsoft is NEVER Going to Tell You That Your Computer is Infected<\/h1>\n<p>In the past, most people who have run into the Tech Support or Microsoft Tech Support Scam have been contacted by scammers and warned by telephone that their computers are infected or compromised.<\/p>\n<p>But lately, it&#8217;s been the fake &#8220;your computer is infected with **you name the non existent virus\/Trojan** or the **your computer has been compromised and your personal information is at risk** popup that appear, seemingly out of nowhere, when browsing the web.<\/p>\n<p>Just in the past week, we have had at least a dozen people who wrote to us and told us that they fell for or almost fell for a scam. The one that seems to trick the most people is the one we&#8217;re going to call the Microsoft Tech Support Popup Scam.<\/p>\n<p>Most all of these fake &#8220;Your computer is infected&#8221; or &#8220;Your computer is compromised&#8221; or other dire warnings that pop up out of nowhere, are almost popups ads. They&#8217;re not viruses, or Trojans or malware. They&#8217;re ads that try to trick you into into calling a phone number for support. They&#8217;re scams.<\/p>\n<p>And regardless how many times the scam popups mention Microsoft or show the Microsoft logo, or how many times the ads refer to &#8220;Certified Microsoft Technicians&#8221; there&#8217;s a 100% certainty that\u00a0they&#8217;re scams.<\/p>\n<p>We have warned our readers about scams many times, but we are once again seeing more and more people losing a great deal of\u00a0money to these criminals&#8230; and many times they&#8217;re being tricked because they see the Microsoft logo or Certified Microsoft Technicians on the fake warning, and that convinces them the warning is legitimate and they let down their guard and call the phone number and then allow the crooks access to their PC.<\/p>\n<h2>Please remember this!<\/h2>\n<h3><span style=\"color: #ff0000;\"><em>Microsoft is never going show you a popup warning you that your computer is infected or compromised. Microsoft is never going to show you a popup with a telephone number and urge you to call Microsoft Support to fix or clean your PC. Never. Not today. Not tomorrow. Not ever.<\/em><\/span><\/h3>\n<p>For this post, we&#8217;ve collected a few of these fake warning popups, and we posted tehm them at the bottom of this article. Keep in mind, these are just a very\u00a0few of the many variations of scam popups out there&#8230; there are hundreds of them. Some have\u00a0different wording, slightly different colors, some look more realistic than others, but they all have\u00a0the same mission: \u00a0To get you to call a number so they &#8220;fix&#8221; the non-existent virus infections, computer problems or errors.<\/p>\n<p>People who do call will be told that the &#8220;technician&#8221; needs to connect to their PC so they can run special scans. The scans, of course, are fake and always turn up dozens, sometimes hundreds of infections, errors and problems. Not to worry, they&#8217;ll tell the victim&#8230; \u00a0they all can be fixed&#8230; for a price. We have heard from people who have been bilked out of hundreds of dollars. One\u00a0person who wrote us recently, lost $1000 on this kind of scam.<\/p>\n<p>There&#8217;s\u00a0a newer version of the support scam or Microsoft Tech Support Popup Scam, where the victim calls a phone number and the technician runs the fake scan or scans, then tells them what&#8217;s wrong (all fake) then tells them they need to buy a\u00a0couple hundred dollars worth software programs to clean, fix and protect their computer and their privacy. \u00a0Of course, they&#8217;ll want your credit card number &#8211; would you actually give your credit card number to a criminal? No, of course not. But because people think they&#8217;re dealing with Microsoft, they do\u00a0give out their credit card numbers and lose hundreds of dollars to scammers.<\/p>\n<p>Please do not fall for these kinds of scams. When you see one of these fake popup alerts or warnings, close all your browser windows. If you should see a warning that your hard drive will be wiped if you close your browser, it&#8217;s not true. I you can&#8217;t close your browser window(s) the usual\u00a0way, open Task Manager by pressing the CTRL+SHIFT+ESC keys. In Task Manager, click on the &#8220;Processes&#8221; tab at the top. In the list of processes, right-click on each instance of your browser you see running and choose &#8220;end task&#8221;. Note: Google Chrome usually shows a process for every tab open and every Chrome extension running. You&#8217;ll need close as many of these as necessary until you see the browser window with the scam in it close. \u00a0If you can&#8217;t still can&#8217;t get the windows closed, shut down your computer and restart it.<\/p>\n<p>We want you to be safe. Don&#8217;t be tricked by these sophisticated thieves and con artists. Remember what you read here and remember what you saw here. Be wary &#8211; not paranoid. Don&#8217;t panic. Think. \u00a0And remember:<\/p>\n<p><em>Microsoft is never going show you a popup warning you that your computer is infected or compromised. Microsoft is never going to show you a popup with a telephone number and urge you to call Microsoft Support to fix or clean your PC. Never. Not today. Not tomorrow. Not ever.<\/em><\/p>\n<p>As promised, here are some screen shots of scam popups. Remember: These are but a few of the hundreds of different scams out there &#8211; but most tech support scams use the same basic techniques to get you to all a phone number for help. All the references to Microsoft are just to lure you into to trusting the scammer. Microsoft has nothing to do with any of these scams.<\/p>\n<p>SOME SAMPLES OF WHAT THESE KINDS OF SCAMS LOOK LIKE:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake0a.png\" alt=\"Cloudeight InfoAve\" width=\"600\" height=\"401\" \/><br \/>\nAbove: One of the more common tech support scams. Note the dire warnings that your bank account and credit card details are at risk. In this case, they&#8217;re not lying. They are very at risk if you fall for this scam. \u00a0As you can see they add your IP address and the date to make it look official. This scam has been making the rounds for at least two years.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake1b.png\" width=\"600\" height=\"382\" \/><br \/>\nAbove&#8230; don&#8217;t let all the Microsoft logos and &#8220;Microsoft Certified Live Technicians&#8221; trick you. This is all a fake and it&#8217;s not even coming from your computer.\u00a0Notice at the top of warning it says &#8220;Message from webpage&#8221;. A dead giveaway that this scam did not come from your PC, but from the Web \u00a0Plus, if you&#8217;re not using Microsoft Security Essentials you should immediately recognize this as a scam.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake2c.png\" width=\"600\" height=\"228\" \/><br \/>\nThe scam up closed. Notice &#8220;Message from webpage&#8221;. That tells you that this popup did not come from your PC, but it&#8217;s just a popup ad from web page. Notice they don&#8217;t use &#8220;Microsoft technicians&#8221;, but &#8220;Microsoft \u00a0Certified Live Technicians&#8221;. What else would they say, dead technicians? They&#8217;re not technicians at all &#8211; they&#8217;re thieves and miscreants and criminals out to get your money.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake3.png\" width=\"617\" height=\"166\" \/><\/p>\n<p>Another &#8220;Microsoft&#8221; alert. It&#8217;s not from Micrsoft, it&#8217;s not from your PC. It&#8217;s just a web page popup ad. Again we have the &#8220;Microsoft Certified Live Technicians&#8221; back for an encore. It&#8217;s just another scam.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake4.png\" width=\"600\" height=\"330\" \/><\/p>\n<p>Are you getting the idea that there are an endless number of scams out there trying to trick you and steal your money? Don&#8217;t let them fool you.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake5.png\" width=\"600\" height=\"425\" \/><\/p>\n<p>Above: A very real-looking scam pop-up, with the Microsoft logo at the top and Microsoft referenced near the body. Showing your IP address may scare some people, but your IP address is visible to every web site you visit. Want to see? Just go to<a href=\"http:\/\/thundercloud.net\/start\/useragent.htm\" target=\"_blank\"> http:\/\/thundercloud.net\/start\/useragent.htm<\/a> . Your IP is part of the details your browser always shows automatically.\u00a0Clicking the &#8220;Back to safety&#8221; button above, leads to another scam, and calling the number posted would lead you right to the nest of criminals. This is just another scram.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake6.png\" width=\"600\" height=\"404\" \/><br \/>\nJust another scam with a bit of drama. It&#8217;s going to delete your hard drive contents if you close this page. However, if you close the page, the only think that will happen is you&#8217;ll be getting away from these miscreants. Notice that this one tells you to call &#8220;Microsoft Support Now!&#8221; and gives you a toll-free number. But, trust us, if you do call that number, you won&#8217;t be talking to Microsoft or even a technician, but you will be talking one and one with a real, live scammer.<\/p>\n<p>See the close up below. See, they&#8217;re going to delete your hard drive&#8217;s contents if you close this page. However, that will not happen. They&#8217;ll just lose a potential victim.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake7.png\" width=\"599\" height=\"322\" \/><\/p>\n<p>The one below is very common. This warning tells you you&#8217;ve got a rootkit Trojan! With the scary name of ROOTKIT_TROJAN_HIJACK.EXE . Wow! They have all the key words that would send shivers down the spine of most users, but not you! You know better, right? And notice the Microsoft references. This one has making the rounds for a long time. The name of the Trojan changes, but not the scam is the same.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake8.png\" width=\"600\" height=\"272\" \/><\/p>\n<p>One more. This one makes it looks like you computer was scanned and lots of malware and bad stuff is lurking on your PC and you better call and get it off or your PC will explode and your privacy up in cloud of smoke (no pun intended). Notice the Microsoft logo at the bottom and the Microsoft Security Essentials logo at the top. Now, if you&#8217;re not using Microsoft Security Essentials, why would you ever be fooled by this. And if you are using Microsoft Security Essentials, you should\u00a0recognize this as a scam, if or no other reason that the theatrical way they try to get you to call &#8220;Tech Support&#8221;.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake9.png\" width=\"600\" height=\"393\" \/><\/p>\n<p>There are hundreds of these kinds of scams out there just waiting to trick you. They may all look slightly different, but they all have the same goal&#8230; to get you to scare you and make you believe that\u00a0your computer is compromised or infected &#8211; and scare you into calling a number to get your PC fixed. These are scams no matter how many Microsoft logos you see or how many times they use &#8220;Microsoft Certified Technicians&#8221;. They want you to call so the can run fake scans,\u00a0that show you how badly your computer is infected or compromised, and tell you that even though your PC is very badly infected or compromised, don&#8217;t you worry &#8211; they can fix you right up for a price. DON&#8217;T! Do not call these criminals. Do not give your credit card information to them.<\/p>\n<p>If you fallen for a scam like this, call your credit or debit card company and tell them you&#8217;ve been scammed. Don&#8217;t be embarrassed to admit it. Millions and millions of people are tricked by scams like these every year.<\/p>\n<p>Our mission is to help keep you safe. We hope this helps you recognize a scam if you ever seen one.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft is NEVER Going to Tell You That Your Computer is Infected In the past, most people who have run into the Tech Support or Microsoft Tech Support Scam have been contacted by scammers and warned by telephone that their computers are infected or compromised. But lately, it&#8217;s been the fake &#8220;your computer is infected with **you name\u2026 <span class=\"read-more\"><a href=\"https:\/\/www.thundercloud.net\/infoave\/new\/microsoft-is-never-going-to-tell-you-that-your-computer-is-infected\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1655,1678,1669,1670,1680,1656,1674,10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12533"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=12533"}],"version-history":[{"count":7,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12533\/revisions"}],"predecessor-version":[{"id":12540,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/12533\/revisions\/12540"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=12533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=12533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=12533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}