Scam

Userlevel 7

+54

@ wrote:
All of a sudden I just had a pop up that said my pc had a virus and the Message claim it was from Microsoft Tech. I believe it was a scam said to call 1-844-789-6976.

Hi and welcome to the Community @

Yes that was a scam, well spotted. I hope you did not contact them although I am under the impression that you didn't.

Take a read of this for more information:

THIS IS A SCAM!! Neither Microsoft nor any other company sends emails, pop ups, or phone calls of any kind advising that you may have a problem.

If you clicked on any links, allowed them to remote into your computer, or went to any websites please submit a Trouble Ticket ASAP. (Now would be a good idea....)

If you would like more information, read on (After submitting that Trouble Ticket.....)

NEWS ARTICLE: Tech Support Scams are on the rise.

Microsoft never issues this type of warning or email or anything of a sort! Please see the following link for Microsofts official word on this:
http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx

"Neither Microsoft nor our partners make unsolicited phone calls (also known as cold calls) to charge you for computer security or software fixes.

Cybercriminals often use publicly available phone directories so they might know your name and other personal information when they call you. They might even guess what operating system you're using.

Once they've gained your trust, they might ask for your user name and password or ask you to go to a website to install software that will let them access your computer to fix it. Once you do this, your computer and your personal information is vulnerable."

Also see Avoid scams that use the Microsoft name fraudulently
http://www.microsoft.com/security/online-privacy/msname.aspx

For more information here iwhat the United States Federal Trade Commission has to say on the subject::
http://www.consumer.ftc.gov/articles/0346-tech-support-scams

"In a recent twist, scam artists are using the phone to try to break into your computer. They call, claiming to be computer techs associated with well-known companies like Microsoft. They say that they’ve detected viruses or other malware on your computer to trick you into giving them remote access or paying for software you don’t need.

These scammers take advantage of your reasonable concerns about viruses and other threats. They know that computer users have heard time and again that it’s important to install security software. But the purpose behind their elaborate scheme isn’t to protect your computer; it’s to make money."

This scam is common and has been around for quite a while. Here is a good Webroot Blog article from April 2013 by Threat Researcher Roy Tobin.
http://www.webroot.com/blog/2013/04/30/fake-microsoft-security-scam/

Also add a good free Ad Blocker like the ones suggested below:

For Internet Explorer Ad Block Plus: https://adblockplus.org/

For Firefox uBlock: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ss or Privacy Badger: https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/

Google Chrome uBlock: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en or Privacy Badger: https://chrome.google.com/webstore/detail/privacy-badger/pkehgijcmpdhfbdbbnkijodmdjhbjlgp

Thanks,

J

Userlevel 1

janieketchum
Author
Fresh Face
1 reply
8 years ago
5 December 2015

Thanks I thought it was !!

D

Userlevel 3

dawning
New Voice
12 replies
8 years ago
5 December 2015

I can find some people reported the number, even since last month at http://www.whycall.me/844-789-6976.html. All you need to do is just don't call the number, and next time, if there's someone cold calling you and ask for some information, just hung up immediately. Scammers are working hard nowadays.

W

hi i know this is a scam but why did i get url with ip - ~ snip please don't post bad links on the Community! snip ~

anyways i guest this is a good thing as i now know that the ip is from hong kong and there is only one website using this ip so im guessing contact the domain provider and tell them this site is phishing.

can you help me out by telling me what info is the provider as it usually comes up as domain host or registrar.

thank you come again

IP Location

Hong Kong Hong Kong Rm 905 Workingberg Comm Building
ASN

AS134519 NIL-HK NINERIVERS INTERNATIONAL LIMITED, HK (registered Aug 18, 2015)
Whois Serverwhois.apnic.net
IP Address103.17.94.194
Reverse IP1 website uses this address.
inetnum:        103.17.92.0 - 103.17.95.255
netname:        NIL-HK
descr:          RM 905, WORKINGBERG COMM BUILDING
descr:          41-47 MARBLE ROAD
country:        HK
admin-c:        NILA1-AP
tech-c:         NILA1-AP
status:         ASSIGNED PORTABLE
mnt-by:         APNIC-HM
mnt-routes:     MAINT-NIL-HK
mnt-irt:        IRT-NIL-HK
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
changed:

20130227
source:         APNIC

irt:            IRT-NIL-HK
address:        RM 905, WORKINGBERG COMM BUILDING, 41-47 MARBLE ROAD, Hong Kong
e-mail:

abuse-mailbox:

admin-c:        NILA1-AP
tech-c:         NILA1-AP
auth:           # Filtered
mnt-by:         MAINT-NIL-HK
changed:

20130131
source:         APNIC

role:           NINERIVERS INTERNATIONAL LIMITED administrator
address:        RM 905, WORKINGBERG COMM BUILDING, 41-47 MARBLE ROAD, Hong Kong
country:        HK
phone:          +85266956277
fax-no:         +85266956277
e-mail:

admin-c:        NILA1-AP
tech-c:         NILA1-AP
nic-hdl:        NILA1-AP
mnt-by:         MAINT-NIL-HK
changed:

20130131
source: APNICToolsMonitor Domain PropertiesToggle DropdownReverse IP Address LookupToggle DropdownNetwork ToolsToggle Dropdown

Userlevel 7

+56

RetiredTripleHelix
Gold VIP
13734 replies
7 years ago
27 June 2016
Answer

? Please don't post links to bad websites on the Community please!

Daniel

M

I got scammed last fall when a pop up from "microsoft" appeared on my new laptop warning me I had a virus. I stupidly believed it and ending up paying $250 for the "service" to go through all my drives and clean everything (and there was really nothing there) and then give me "Lifetime service" with WebRoot. Bad enough. Then this week the same person contacted me to do the "annual check" of my computer. I asked if this would cost anything and they said only if they find something. I said forget it. That's when I finally googled WebRoot scams and found out yes, I had been. So warning...it's not over with one scam. Wish there was someway these guys could be found and thrown in jail, but I'm sure they're out of the country. Wish that Microsoft would post warnings to consumers ahead of time that they never do this.

M

Userlevel 1

+2

@wwwdooot You can use the DNS toolbox website to find out who owns the IP.
https://tools.dnsstuff.com.

Use the WHOIS/IPWHOIS Lookup and enter the IP address in question, which looks like it was 103.17.94.194

Userlevel 7

+63

TripleHelix
Moderator
7224 replies
5 years ago
27 February 2019

@wwwdooot You can use the DNS toolbox website to find out who owns the IP.
https://tools.dnsstuff.com.

Use the WHOIS/IPWHOIS Lookup and enter the IP address in question, which looks like it was 103.17.94.194

Your replying to a 2 year old thread?

B

I'm glad the problem was solved. A frequently used service when querying unknown phone numbers, for example https://www.theunknowncall.com/508-507-2209, you can browse the data on this page. unknown numbers that do not forget regret.

Thank you..

9 replies

Reply

Reply

Sign up

Login to the community

Scanning file for viruses.

This file cannot be downloaded