friend scammed

Page 1 of 2 12 LastLast

  1. Posts : 75
    W10
       #1

    friend scammed


    W10 ver 1909

    My friend knows very little about computers He fell for the Microsoft scam where he had to call their “support line.” They took control of his computer. He realized just in time that there was a problem and managed to hang up and shut down. But, when I had him check things, we found Go To Assist Customer from Logmein on his computer. When we tried to UNINSTALL it said there were other users on. We continued anyway but it asked for a password. How do we eliminate the program?

    Mel
      My Computer


  2. Posts : 16,155
    Win 10 Pro 64-bit v1909 - Build 18363 Custom ISO Install
       #2

    Hello @compiler7,

    compiler7 said:
    W10 ver 1909

    My friend knows very little about computers He fell for the Microsoft scam where he had to call their “support line.” They took control of his computer. He realized just in time that there was a problem and managed to hang up and shut down. But, when I had him check things, we found Go To Assist Customer from Logmein on his computer. When we tried to UNINSTALL it said there were other users on. We continued anyway but it asked for a password. How do we eliminate the program?
    [1] DON'T let him connect to the Internet!
    [2] Has he got a recent System Image?
    [3] Has he got a recent System Restore Point?
    [4] Can he see either Go To Assist Customer or LogMeIn under Programs on his computer?

    I hope this helps!
      My Computer


  3. Posts : 75
    W10
    Thread Starter
       #3

    I told him all that. I suggested he disconnect from the internet and try to delete it again. It was too much for him to do.
    I suggested restoring from a B/U, but he has no idea of what a B/U is. Sigh...

    But this story has a happy ending. He called his anti-virus company, Mcaffee, and they were able to remove it.

    He still doesn't know how he could have anti-virus software and still get a virus.

    Mel
      My Computer


  4. Posts : 1,567
    Windows 10 Pro
       #4

    Like vampires, those are the kind that only come in if you invite them.
      My Computer


  5. Posts : 16,155
    Win 10 Pro 64-bit v1909 - Build 18363 Custom ISO Install
       #5

    Hello @compiler7,

    compiler7 said:
    But this story has a happy ending. He called his anti-virus company, Mcaffee, and they were able to remove it.
    That is good news!

    Perhaps you could sit down with him and show him how to create a System Image, they are worth their weight in gold.

    I will add though, if it was me, I would backup all my files etc and perform a clean install. The reason I say this is because you DON'T really know what else they have done or installed on the HDD. They could already have usernames, passwords, credit card details, bank account numbers, sort codes, names, addresses etc [ you get the point ]. He needs to change ALL his usernames and passwords IMMEDIATELY. Things like eBay, PayPal, FaceBook, Bank, Forums etc.

    It could be like waiting for a time bomb to go off without knowing quite when!
      My Computer


  6. Posts : 6,971
    windows 10
       #6

    The program isn't a virus that's why it wasn't detected it's a genuine program. As you don't know what they have done a clean install is needed they may have got password and other information so he needs to change every password
      My Computer


  7. Posts : 5,829
    Win 11 Pro (x64) 21H2
       #7

    compiler7 said:
    How do we eliminate the program?
    Assuming you (they) have backups (and hopefully they do) wipe the PC and start fresh. Simple.

    If they don't have backups they could create one before wiping the PC, but I'm not a fan of creating backups "after" a PC has been compromised as who knows where the malware went. In this case they'd have to make a decision.

    My two cents.
      My Computers


  8. Posts : 56,110
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #8

    Once you realize you have been compromised, it's too late. Whatever was going to happen had already happened. Unfortunately, these sleezeballs and scumbags are very good at what they do. They have the attack well rehearsed and honed. They've had plenty of victims to practice on and work out their bugs. The really good ones are killing machines. Only a few milliseconds and they have enough to do damage.

    If it sounds like I'm being melodramatic and trying to scare you (your friend), I am.

    The only safe recourse for you and your friend is a complete wipe of that drive and a clean install, along with a painful and time consuming password change on all aspects of your electronic life.

    If you believe there was any chance that CC or bank PWs were compromised, contact the credit card and/or bank immediately and tell them so they can freeze the accounts and re-issue cards.

    My 2 cents worth.......
      My Computers


  9. Posts : 75
    W10
    Thread Starter
       #9

    I agree with you guys totally.
    He has no clue what backing up is!

    He says he has no compromising stuff on his computer.
    He has one bank account, which has amazingly 2-factor authorization.

    Mel
      My Computer


  10. Posts : 56,110
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #10

    compiler7 said:
    I agree with you guys totally.
    He has no clue what backing up is!

    He says he has no compromising stuff on his computer.
    He has one bank account, which has amazingly 2-factor authorization.

    Mel
    Introduce him to the world of Backup.

    Macrium Software | Macrium Reflect Free
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:15.
Find Us




Windows 10 Forums