Computer Locked Up Microsoft Scam

Status
Not open for further replies.

natwhit

New Member
Thread author
Jul 2, 2021
1
Hi,
My computer was locked up with a message to call MS at 888-614-6797. It says if I shut down or restart, it may lead to lost data or ID theft.

It has a step by step process for removing this malware. But there's one big problem. How do I follow the steps if my computer is locked? Nothing works, not my mouse or anything.

Is it safe to restart the computer? Will it unlock it so I can follow the steps? Or what should I do?

Thanks.
 
  • Like
Reactions: Nevi

nasdaq

Moderator
Verified
Staff member
Nov 5, 2019
741
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

This is a SCAM do not call them.

Read this topic.
Book mark the link for further reference.

How tech support scams work

I suggest you restart your computer normally.

All should be well.

If any issues download and run this program.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:
L7kNU5y.jpg

Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Please attach the logs for my review.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
[img=[URL]http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png[/URL]]

Let me know what problems persists.

Wait for further instructions

p.s.
This program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
OR, you should restore the program from the Quarantine folder.
====
 
Status
Not open for further replies.