[AusNOG] Windows Virus people [slightly OT]

[Andrew Cox]

Hi Andrew,

My parents get quite a few of these.. am staying with them for a week and
took one last night, leading the caller on a wild goose chase.

I was firstly informed to go to computer -> manage -> event viewer ->
windows logs -> application logs where they claimed that the errors and
warnings I could see were indications of viruses and computer corruption.

By this time I had setup a virtual machine with XP with which to continue on
the ruse. Long story short they had me install an application for remote
access and then tried to convince me to pay for "software warranties and
support" (via paypal, and then their website because my card didn't work -
fake card of course) to 'fix' the viruses on my machine :-)

If anyone is interested I recorded the whole conversation as well as taking
screen caps of the sites they had me visit at the time, unfortunately no
caller ID at parents place however it sounded like it was coming from a call
center of sorts.

Kind Regards,

Andrew Cox
Senior Network Administrator
AccessPlus / BigAir Universe Broadband
www.accessplus.com.au | www.bigair.com.au



On 12 August 2011 13:10, Andrew Yager <andrew at rwts.com.au> wrote:

> Hi,
>
> Just had an interesting call from Microsoft Windows Support telling me my
> computer had a virus.
>
> I told them that the Kernel was missing and it kept restarting.
>
> They have given me a phone number to call them back on - does anyone have a
> good way to find the carrier who holds that number to alert them to their
> customers "dubious" activity? It's quite obviously a VoIP service - sounds
> like an ILBC codec at one point (at least).
>
> Thanks,
> Andrew
>
>  --
> *Andrew Yager, Managing Director*   *(MACS BCompSc MCP)*
> Real World Technology Solutions Pty Ltd  - IT people you can trust
> ph: 1300 798 718 or (02) 9037 0500
> fax: (02) 9037 0591 mob: 0405 152 568
> http://www.rwts.com.au/
>
>
>
>
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20110812/ff836897/attachment.html>