We published this article in May 2017. At that time we were more focused on on the Microsoft support scams that were popular then. Since then we’ve updated this article and still, people are getting fooled by these kinds of scams. So here is another update and another reminder:<\/span><\/p>\n So you will not fall victim to these kinds of scams. Read this article and you’ll be better prepared\u00a0 when you see a tech support scam because:<\/span><\/p>\n WE DO NOT WANT YOU TO FALL FOR A TECH SUPPORT SCAM!<\/strong><\/span><\/p>\n Whether it\u2019s a Microsoft support scam or any tech support scam, you need to know that these kinds of scams everywhere and it’s only a matter of time before you’re face-to-face with one.<\/span><\/p>\n OH YES! THEY ARE STILL OUT THERE!<\/strong><\/span><\/p>\n We still receive at least a dozen emails each week from folks who encounter these kinds of scams and are convinced their security software has let them down\u2026 and woe\u2026 now they\u2019re infected. But it\u2019s not true. Most support scams are carefully crafted advertisements cunningly created to make you think these warnings are coming from your own computer your security software or even from Microsoft.<\/span><\/p>\n Tech support scams are alive and well and in full vigor. So it is our hope you\u2019ll read this article, look that the images here, so that you\u2019ll know, right away, when you\u2019ve encountered one of these scams… and you’ll know what to do. When we wrote the original article in this series, the \u201cYou-have-been-infected-with-the-Zeus-Virus\u201d scam was the ruse-of-the-day. The so-called Zeus virus was really awful sounding, but it\u2019s is and always was a fake. Whether it’s the Zeus virus or some other dreadful sounding name, there will always be a \u201cvirus-du-jour\u201d\u00a0 with the tech support scammer clique.<\/span><\/p>\n In the past, most people who have run into the Tech Support or Microsoft Tech Support Scam have been contacted by scammers and warned by telephone that their computers are infected or compromised.<\/span><\/p>\n But lately, it\u2019s been the fake \u201cyour computer is infected with **you name the nonexistent virus\/Trojan** or the **your computer has been compromised and your personal information is at risk** popups that appear, seemingly out of nowhere, when browsing the web.<\/span><\/p>\n Just in the past week, we have had at least a dozen people who wrote to us and told us that they fell for or almost fell for a scam. The one that seems to trick the most people is the one we\u2019re going to call the Microsoft Tech Support Popup Scam.<\/span><\/p>\n Most all of these fake \u201cYour computer is infected\u201d or \u201cYour computer is compromised\u201d or “Your personal information is at risk” or any of the other dire warnings that pop up out of nowhere, are almost always nothing more than popups advertisements, cleverly disguised as dire warnings. They\u2019re not viruses or Trojans or malware at all. They are advertisements that try to trick you into calling a phone number for support, or clicking a link in an email, or downloading something that they claim will scan and clean your computer. Whatever the angle used, they’re all just scams.<\/span><\/p>\n And regardless how many times the scam popups mention Microsoft or show the Microsoft logo, or how many times the ads claim to come from \u201cCertified Microsoft Technicians\u201d … we can tell you with\u00a0 100% certainty that they\u2019re all scams.<\/span><\/p>\n We have warned our readers about these kinds of scams many times, but we are once again seeing more and more people falling victim to these criminals. Many times they\u2019re being tricked because they see the Microsoft logo or Certified Microsoft Technicians on the fake warning, and that convinces them the warning is legitimate and they let down their guard and call the phone number, click a link, or download something and allow the crooks access to their computers.<\/span><\/p>\n For this post, we\u2019ve collected a few of these fake warning popups, and we posted them at the bottom of this article. Keep in mind, these are just a few of the many variations of scam popups out there\u2026 there are hundreds of them. Some have different wording, slightly different colors, some look more realistic than others, but they all have the same mission: \u00a0To get you to call a number so they \u201cfix\u201d the non-existent virus infections, computer problems or errors. Or to click a link and download some miracle software that will cure whatever ails your PC.<\/span><\/p>\n People who do call will be told that the \u201ctechnician\u201d needs to connect to their PC so they can run special scans. The scans, of course, are fake and always turn up dozens, sometimes hundreds of infections, errors, and problems. Not to worry, they\u2019ll tell the victim\u2026 \u00a0they all can be fixed\u2026 for a price. We have heard from people who have been bilked out of hundreds of dollars. One person who wrote to us recently lost $1000 on this kind of scam. I just spent 4 hours cleaning up a fake tech support scam and the consequences thereof from a friends computer.<\/span><\/p>\n People who download the scam software will run it and find that their computer has 567 or 1296 or 5406, or some scary number of “serious” problems and while the software can find all the problems for you “fre59e of charge”, it will cost you to “clean and fix” the problems. Of course, the “serious” problems don’t exist. It’s just a scam to get your money.<\/span><\/p>\n This same technique is used with Microsoft Tech Support Popup Scams, where the victim calls a phone number and the technician runs a scan, then tells the victim that his\/her computer is full of problems, viruses,\u00a0 and other bad stuff\u00a0 (all fake) then tells them they need to buy a couple of hundred dollars worth software programs (from his company of course) to clean, fix and protect their computer and their privacy.\u00a0 And – you guessed it – they\u2019ll want your credit card number. If you know the truth, would you actually give your credit card number to a criminal? No, of course not. But because people think they\u2019re dealing with Microsoft or some legitimate tech support service, they give out their credit card numbers and lose hundreds of dollars to scammers. We’re not making this up. We have seen dozens of people get ripped off just as described above.<\/span><\/p>\n Please do not fall for these tech support scams<\/strong><\/span><\/p>\n When you see one of these fake popup alerts or warnings, close all your browser windows. If you should see a warning that your hard drive will be wiped if you close your browser, it\u2019s not true. If you can\u2019t close your browser window(s) the usual way, try using ALT+F4. If that does not work try CTRL+F4. If that does not work open Task Manager by pressing the CTRL+SHIFT+ESC keys. In Task Manager, click on the \u201cProcesses\u201d tab at the top. In the list of processes, right-click on each instance of the browser you see running and choose \u201cend task\u201d. Note: Google Chrome usually shows a process for every tab open and every Chrome extension running. You\u2019ll need close as many of these as necessary until you see the browser window with the scam in it close. \u00a0If you can\u2019t still can\u2019t get the windows closed, shut down your computer at the switch and restart it.<\/span><\/p>\n We want you to be safe. Don\u2019t be tricked by these sophisticated thieves and con artists. Remember what you read here and remember what you saw here. Be wary \u2013 not paranoid. Don\u2019t panic. Think. \u00a0And remember:<\/span><\/p>\n Microsoft is never going to show you a popup warning you that your computer is infected or compromised. Microsoft is never going to show you a popup with a telephone number and urge you to call Microsoft Support to fix or clean your PC. Never. Not today. Not tomorrow. Not ever.<\/em><\/span><\/p>\n As promised, here are some screenshots of scam popups. Remember: These are but a few of the hundreds of different scams out there \u2013 but most tech support scams use the same basic techniques to get you to call a phone number or download a program or click a link to get help. All the references to Microsoft are just to lure you into trusting the scammer. Microsoft has nothing to do with any of these scams.<\/span><\/p>\n SOME SAMPLES OF WHAT THESE KINDS OF SCAMS LOOK LIKE<\/strong><\/p>\n Forewarned is forearmed. \u00a0Commit these images to memory so if\/when you encounter one similar to these you\u2019ll know exactly what to do.<\/span><\/p>\n Above: Looks like your computer is a goner unless you call the [fake] Microsoft support number. Just another scam.<\/span><\/p>\n Above: Oh my! My data is going to be lost or corrupted if I don\u2019t call that number! Woe is me. NO! Not woe is me. It\u2019s just a tech support scam.<\/span><\/p>\n Above: Another scam. This one is verbose. All kinds of dire warnings and not-so-veiled threats in this one. But it\u2019s just a scam. It\u2019s a scam I tell ya!<\/span><\/p>\n Another \u201cMicrosoft\u201d alert. It\u2019s not from Microsoft, it\u2019s not from your PC. It\u2019s just a web page popup ad. Again we have the \u201cMicrosoft Certified Live Technicians\u201d back for an encore. \u00a0When will they start using dead technicians? \u00a0Live or dead, this is just another scam.<\/span><\/p>\n Above: 4Are you getting the idea that there is an endless number of scams out there trying to trick you and steal your money? Don\u2019t let them fool you.<\/span><\/p>\n Above: A very real-looking scam pop-up, with the Microsoft logo at the top and Microsoft referenced in the body. Showing your IP address may scare some people, but your IP address is visible to every web site you visit. Want to see? Just go to\u00a0http:\/\/thundercloud.net\/start\/useragent.htm.<\/a> Your IP is part of the details your browser always shows automatically.\u00a0Clicking the \u201cBack to safety\u201d button (above) leads you to another scam, and calling the number posted would lead you right tin o the nest of criminals that want to steal your money. It\u2019s just another scam designed to trick you into giving up your money.<\/span><\/p>\n See the close up below. Woe is you! They\u2019re going to delete your hard drive\u2019s contents if you close this page. However, that will not happen. If you close this page, the criminals will just lose a potential victim.<\/span><\/p>\n The one below is not as common these days, but it\u2019s still making the rounds. This one\u2019s warning tells you that you\u2019ve got a rootkit Trojan! With the scary name of ROOTKIT_TROJAN_HIJACK.EXE. Wow! They have all the keywords that should send shivers down the spine of most users, but not you! \u00a0By now, you know better, right? And notice the Microsoft references. This one has been around a long time. The name of the Trojan changes, but not the scam\u2026 it\u2019s the same old, same old.<\/span><\/p>\n Just one more. \u00a0Take a look at the image below. This scam makes it looks like your computer was scanned and lots of malware and bad stuff was found lurking on your PC. Looks like you better call and get it off or your PC will explode and your privacy will go up in a cloud of smoke (no pun intended). Notice the Microsoft logo at the bottom and the Microsoft Security Essentials logo at the top. Now, if you\u2019re not using Microsoft Security Essentials, why would you ever be fooled by this scam? And if you are using Microsoft Security Essentials, you should know better. Use something else. And you should recognize this as a scam, if for no other reason than the theatrical way they try to get you to call \u201cTech Support\u201d.<\/span><\/p>\n There are hundreds of these kinds of scams out there just waiting to entrap you. Don’t be fooled.<\/span><\/p>\n They may all look slightly different, but they all have the same goal\u2026 to get you to scare you and make you believe that\u00a0your computer is compromised or infected \u2013 and scare you into calling a number to get your PC fixed. These are scams no matter how many Microsoft logos you see or how many times they use \u201cMicrosoft Certified Technicians\u201d. \u00a0They are scams if they show you a phone number to call, Microsoft or not. They are scams when they tell you if you close the window you\u2019ll lose all your data.<\/span><\/p>\n Want more pictures? OK here you go!<\/strong><\/span><\/p>\n <\/span> FAKE MICROSOFT SCAM<\/span><\/em><\/p><\/div>\n <\/span> OH NO! Your hard drive is deleted. SCAM!<\/span><\/em><\/p><\/div>\n <\/span> Oh No! “Your Windows Key is No Good” Tech Support Scam<\/span><\/em><\/p><\/div>\n <\/span> It may say “Netflix” but if you dare call that number, you’ll be involved in full-blown tech support scam.<\/span><\/em><\/p><\/div>\n These criminals want you to call the number shown on the warning so they can run fake scans,\u00a0that show you how badly your computer is infected, and tell you that even though your PC is very badly infected or compromised, don\u2019t you worry \u2013 they can fix you right up for a price. DON\u2019T CALL IN THE FIRST PLACE. DON\u2019T PAY. Do not give your credit card or checking account information to them.<\/span><\/p>\n If you have fallen for a scam like these, call your credit or debit card company immediately and tell them you\u2019ve been scammed. Don\u2019t be embarrassed to admit it. Millions and millions of people are tricked by scams like these every year.<\/span><\/p>\n Our mission is to help keep you safe. We hope this helps article will help you to recognize a scam if and when see one.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":" Tech Support Scams Are Still Riding High We published this article in May 2017. At that time we were more focused on on the Microsoft support scams that were popular then. Since then we’ve updated this article and still, people are getting fooled by these kinds of scams. So here is another update and another reminder:\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":13950,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1655,1462,1678,1669,2509,1670,1680,1656,10],"tags":[1034,2540,3200,1739,1776],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/16856"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=16856"}],"version-history":[{"count":2,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/16856\/revisions"}],"predecessor-version":[{"id":16858,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/16856\/revisions\/16858"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media\/13950"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=16856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=16856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=16856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Please remember this!<\/span><\/h2>\n
Microsoft is never going to show you a popup warning you that your computer is infected or compromised. Microsoft is never going to show you a popup with a telephone number and urge you to call Microsoft Support to fix or clean your PC. Never. Not today. Not tomorrow. Not ever. <\/em><\/span><\/h3>\n
No legitimate security software company or software program is ever going to tell you that your files are going to be deleted if you close a dialog or window, or that your identity is being stolen and if you click a link or call a number you can stop the threat.\u00a0 Not even the worst legitimate security software would do that. Not today, not tomorrow, not ever.<\/em><\/span><\/h3>\n
![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/zeus0.png\")
<\/span>
\nThe image above looks authentic \u2026 very real. Its message is dire. But\u2026 this is just a scam, folks. Scam. Scam. Scam.<\/span><\/em><\/p>\nAll of the images below are scams too.<\/span><\/h3>\n
![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/zeus1a.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/zeus2.png\")
<\/span>
\nAbove: Whoa! It\u2019s that big, bad Zeus virus again. No, it\u2019s not. It\u2019s just another tech support scam.<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/zeus3.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/zeus4.png\")
<\/span><\/p>\n![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake0a.png\")
<\/span>
\nAbove: Note the dire warnings that your bank account and credit card details are at risk. In this case, they\u2019re not lying. They are very at risk if you fall for this scam. \u00a0As you can see they add your IP address and the date to make it look official. That\u2019s easy to do. This scam has been making the rounds for years.<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake1b.png\")
<\/span>
\nAbove\u2026 don\u2019t let all the Microsoft logos and \u201cMicrosoft Certified Live Technicians\u201d trick you. This is all a scam and it\u2019s not coming from your computer.\u00a0Notice at the top of warning it says \u201cMessage from webpage\u201d. A dead giveaway that this scam did not come from your PC, but from the Web \u00a0Plus if you\u2019re not using Microsoft Security Essentials\u2026 DUH! You should immediately recognize this as a scam.<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake2c.png\")
<\/span>
\nAbove: The scam up close. Notice \u201cMessage from webpage\u201d. That tells you that this popup did not come from your PC, but it\u2019s just a popup ad from a web page. Notice they don\u2019t use \u201cMicrosoft technicians\u201d, but \u201cMicrosoft \u00a0Certified Live Technicians\u201d. What else would they say, \u00a0dead Microsoft technicians? They\u2019re not technicians at all \u2013 they\u2019re thieves, miscreants, and criminals out to get your money.<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake3.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake4.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake5.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake6.png\")
<\/span>
\nAbove: \u00a0Another scam with a bit of drama. It\u2019s going to delete your hard drive contents if you close this page. However, if you close the page, the only thing that will happen is you\u2019ll be getting away from the den of thieves behind this scam. \u00a0Notice that this one tells you to call \u201cMicrosoft Support Now!\u201d and gives you a toll-free number. But, trust us, if you do call that number, you won\u2019t be talking to Microsoft or even a technician, but you will be talking one on one with a real, live con artist.<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake7.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake8.png\")
<\/span><\/p>\n![](\"http:\/\/thundercloud.net\/infoave\/images\/2017\/scamfake9.png\")
<\/span><\/p>\n![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2019\/scam.png\")
<\/span>
\nWindows support scam.<\/span><\/em><\/p>\n![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2019\/scam1.png\")
![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2019\/scam3.png\")
![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2019\/scam4.png\")
![\"Cloudeight](\"http:\/\/thundercloud.net\/infoave\/images\/2019\/scam5.png\")