I wrote about this scam many months ago to warn people when AOneTechSquad.com first started calling random people who fell for the scam. At that time they were putting a password on the computers after they gained remote access. They have stepped up the game now and are infecting web pages and downloads to pop up a page to warn you that your computer in infected and to call them. They even have voice warnings.
I recently had a client who brought a computer to me that would continue to go to command prompt on login c:\windows\system32 . She told me that she got a pop up that was telling her and showing a warning that her computer was infected. She was scared and called them. She allowed them remote access to her computer and they showed her the event viewer warnings, and explained that they were caused by viruses. At the same time they were maneuvering through her computer and making changes that she wasn’t aware of. They then restarted her computer and it would only come up to the command prompt after login. She told them she could no longer login and they then told her that she would have to pay them $150.00 to fix it.
She shut her computer off and called me. This was new and it took me a minute to fix it. I tried System Restore, it didn’t work. I tried the registry backup, it didn’t work. Looked on line to see if anyone had ever seen this. Couldn’t find any information on this. So this was the result of my labor to fix this problem: 1. First I pushed Ctrl, Alt, Del on the keyboard, 2. Next I chose Task Manager, 3. Then more details, 4. Chose File and New Task, 5. Typed Explorer.exe which brought me to my desktop where I immediately saw that the computer was running in Safe Mode, 6. Pushed Windows Key and the letter R on the keyboard and typed msconfig in the command line, 7. When the Configuration utility came up I chose the Boot Tab and unchecked Safe Boot Option, applied it and restarted the computer where it came up normally, 8. Ran the utilities provided at http://www.youhaveavirus.com and fixed the computer.
How many times will people fall for this scam?
TARUN YADAV
EXT:1286
TOLL FREE:1-800-208-0798
———————————————–
1 YEAR 249.99
199.99
