Computer Locked Up Microsoft Scam

[natwhit]

Hi,
My computer was locked up with a message to call MS at 888-614-6797. It says if I shut down or restart, it may lead to lost data or ID theft.

It has a step by step process for removing this malware. But there's one big problem. How do I follow the steps if my computer is locked? Nothing works, not my mouse or anything.

Is it safe to restart the computer? Will it unlock it so I can follow the steps? Or what should I do?

Thanks.

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

This is a SCAM do not call them.

Read this topic.
Book mark the link for further reference.

How tech support scams work

Tech support scams: help and resource page | Malwarebytes Labs

We've gathered all the information we've collected over time on tech support scams into one place you can use as a go-to resource on how tech support scams work, how to get help if you've already been scammed, and how to report them.

blog.malwarebytes.com

I suggest you restart your computer normally.

All should be well.

If any issues download and run this program.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:

Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Please attach the logs for my review.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
[img=[URL]http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png[/URL]]

Let me know what problems persists.

Wait for further instructions

p.s.
This program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
OR, you should restore the program from the Quarantine folder.
====