Messing With Fake Tech Support #2 | Windows Cannot Find "msconfig"
This was a fun call to Support Buddy, messing with them by renaming all the programs they use to something different. ex. cmd123 so when the scammer searched for "cmd" they got an error. ... https://www.youtube.com/watch?v=KDDqFtkjEbc
This tech scammer had a fake disconnected message so when you called you thought it was disconnected, For example if they called you and you tried to call back.
This scammer played all the usual tricks:
Event viewer scam, windows prefetch, csrss.exe scam, Msconfig scam, cmd tree command.
Time Stamps:
Event Viewer Scam 11:32
Windows prefetch scam 13:43
...
https://www.youtube.com/watch?v=iVmcmq41SLg
This is just a channel update and as the title says, plans for 2017.
Links:
IT Advocates Video:
https://www.youtube.com/watch?v=Bti6l5MfZjY
Newspaper Article:
https://www.stopphonescammers.com/2016/12/26/sps-goes-in-the-newspapers/
...
https://www.youtube.com/watch?v=7RmBU1yaU3I
I received a robo call on my softphone of someone claiming that there may be ransomware on my computer. This of course I know is false. They called the wrong guy. Once the scammer was connected to my virtual machine, he performed many of the same scamming tactics that are commonly seen among these types of scammers. Lying about the connections in netstat, saying that the services in msconfig or task manager are not normally stopped and lying claiming that the normal errors and logs in event viewer are all viruses when they aren't. He also, lied and said that I had no security on my computer however, he didn't even bother checking to see if I had security before saying that. If he would have looked, he would have saw that I have security and it's working just fine. After all this, he wanted to charge me an insane amount of $299.99 for problems I don't have and services I don't need.
Date of Scam:
6/19/17
Information I have on this company:
The people I talked to: (These are their fake names)
Roy Singh Ext. 1022 (The "Technician")
Dan Clay (The Billing Manager)
...
https://www.youtube.com/watch?v=vpNzO2Hu8ZE
This tech support scammer installed adware and malware on my computer with the software "SpeedyPCPro" which generates fake errors that are wrong with your computer. This is a clean vm and there was nothing wrong. Then she tried to tell me that the windows prefetch folder contained "infections" Then she lied and said that the unknown service we did not know who manufactured it, when literally it said Comodo Internet Security right next to it then she also did the usual scam that those disabled services are not supposed to be disabled. She said I had no firewall which was a lie.
ScammerRevolts: https://www.youtube.com/channel/UC0uJKUXiU5T41Fzawy5H6mw/videos
Sources for SpeedPCPro:
http://www.networkworld.com/article/2223118/microsoft-subnet/loathe-lowdown-scareware-scams--lawsuit-claims-speedy-pc-pro-is-fraudulent-software.html
https://malwaretips.com/blogs/speedy-pc-pro-virus-removal/
...
https://www.youtube.com/watch?v=g4Bhc9xd7Pc
I was on a road trip all week and I'm home! I have many video ideas coming soon so stay tuned for those! I will have more information on the newsletter in another video.
Be sure to comment on this video for the 500 sub Q&A! or Tweet at me on twitter @StopPhoneScammr
Stop Phone Scammers Partners:
http://stopphonescammers.x10.mx/our-partners/
...
https://www.youtube.com/watch?v=cBRcg1RHKdg
In this video we call another scammer that claims to be Gmail Support, but as we find out, they aren't Gmail Support and they are nothing but simple tech support scammers trying to rob you of your money.
ScammerRevolt's fake Pop-Up:
https://scammerrevolts.com/software/
Date of Scam:
7/25/17
Information I have on this company:
Number I called:
...
https://www.youtube.com/watch?v=6JB55fP0HhI
This company, I would say is just about your average tech support scammer. Once the scammer was connected to the VM the first thing he did was look at the bait program and said that he would check to see if there were any virus' or infections that were giving me troubles, He opens event viewer and lies to me and says that all the logs that show up are "Infection Logs" and that I was getting an "unwanted application or infection on my computer". This is a lie, the logs are NOT infection logs, they are normal computer logs that ANY computer would have. He then opens up msinfo32 and goes to system drivers and says that the drivers have been infected because they were stopped. This is completely false, these drivers are normally stopped drivers and they all do not need to be running all at once. They are stopped because many of them aren't being used and are not necessary for all computers. For example, the AMD Processor Driver, that is stopped because I don't have an AMD Processor so it would make sense that it wouldn't need to be running. Next, he goes to the Network access protection from control panel and lies and says that NAP needs to be enabled and that since it was off it meant that the infection was present. This is completely false, NAP only needs to be enabled if you are on a domain network. If you aren't it's disabled by default and that is completely normal and has nothing to do with an infection.
Keep in mind that up to this point, he still HAS NOT done any LEGIT scan to check to see if there really is anything in my computer.
He then goes to Google and searches for Super Anti-Spyware and downloads the Pro Trial version. He starts a quick scan and tells me it will take about 2 min. After, sometime he tells me not to do any banking on this computer until they install a security and the work is done. He told me that Malwarebytes wasn't protection my computer and that it wasn't even compatible. He went into the properties of Malwarebytes and said that it would only run on Windows XP. This is completely false, Malwarebytes was running perfectly fine on Windows 7 and was protecting my computer as it should. After, this he opened a notepad and wanted me to type my info in the same computer that was supposedly infected, makes complete sense. Next, he tells me that I have spyware BEFORE SuperAntiSpyware is even DONE (and it still hadn't detected anything). He then tells me everything he is going to do to "fix" the computer and then wanted me to pay $199.99 for problems that didn't exist and for FAKE services I didn't need. After, this I confront him (Little bit of strong language!)
ScammerRevolts's Bait Program:
http://scammerrevolts.com/software/
Date of Scam:
3/27/17
...
https://www.youtube.com/watch?v=a_lvKkDLcts
Hey everyone, Devon here.
I'm back.
We're going to be having major changes take place here in the near future. I kind of explain this in the video but stay tuned for more info.
---------------------------------------------------------------------------------------------------------
Our website: https://stopphonescammers.com
...
https://www.youtube.com/watch?v=pVJVSsmxSDY
In this video we call a scammer known as "The Phone Support" when the scammer answered the call, she said my name insinuating that I have called before. This company has some form of relation to Maxware Soft and Safeapzz soft as well. Once the scammer was connected and the call began, she used this shitware program from Safeapzz that gave fake results on everything. She ran the "Scan" on it and it showed that I had 221 junk files when in reality, when she opened the temp folder, I only had 17, and when she deleted them, the remaining 2 that wouldn't delete she said that these were the spywares on my computer. When in reality, they are still junk files, but they were open in Windows Explorer and that's why it wouldn't delete. She also lied about stopped services, saying that the stopped services needed to be removed from the computer. This of course, is false. Those services are needed, however, they all don't need to be running, They run when they are needed to run and don't run when they aren't. After all this she wanted to charge me $599.99 for issues I don't have and services I don't need.
Special Thanks to ScammerRevolts for the fake pop-up.
Full Scam-Bait:
https://youtu.be/p3a4ogipvF8
ScammerRevolt's Fake Pop-Up:
https://scammerrevolts.com/software/
...
https://www.youtube.com/watch?v=Aw80DRxGORA