scammers allowed access

AndyPix

Hi, Sorry to hear about your Mums ordeal.
This sort of thing can be very disconcerting especially to the older generation.


Easy to sort out though.
Download these two programs to a usb memory stick from another computer ..


https://www.malwarebytes.com/mwb-download/thankyou/


And then


https://toolslib.net/downloads/viewdownload/1-adwcleaner/


Run both of those in that order and wait for them to complete, disable remote access as advised above and tell your Mum to ring you if in any doubt in future.


Tell her not to worry and you dont need to start going cancelling bank cards etc

DavidP24 wrote: »

You can expect that they will have copied data and sell it on forums to identity theft merchants.

Dont worry about this, the forums David speaks of are not interested in the odd partial identity detail that can have been gleaned from a remote session. This was not the modus operandi of this type of scam.


Andy

AndyPix

Legitimate Remote support programs can be removed from control panel as can AV software.
There is no need to use revo to clean reg keys, ADW will do that.


The things needed to be worried about are RATs and keyloggers, and nasties that change proxy settings.
All of which will be removed by said programs

AndyPix

DavidP24 wrote: »

In my experience there are two type of people that do this, those that pretend to be MS Support work out of India, they have a so called legit support biz and they ask for the payment. They do not install any malware or worms, just back doors and a few samples to be picked up by the scan to justify their intervention.

The other sort, encrypt your data, they work out of Russia and Eastern Europe, they most certainly do install malware.

True Dat ..

50Twuncle

a bit too late - but this is where backups are vital

AndyPix

Not really.
These guys arent after ransoming your data, that is a much more faceless threat and is never initiated in this way.


They simply want to con you out of your money by scaring you with imaginary computer problems.


Backups are neither here nor there

AndyPix

[EMAIL="B@5tards"]B@5tards[/EMAIL] arent they !!

DavidP24 wrote: »

monthly scheduled task to add it back. .

ADW would have removed that

bsod

another thread wandering off into no man's land, repeating what's already been said to an audience who left the theatre long ago.

The sensible route is to factory restore it and get on with their life. Wild speculation about what they did, and technically incorrect musings don't help anyone

AndyPix

bsod wrote: »

another thread wandering off into no man's land, repeating what's already been said to an audience who left the theatre long ago.

Always seems to be about the time when you get involved doesnt it ..

bsod wrote: »

The sensible route is to factory restore it and get on with their life..

Rubbish, unnecessary and overkill

bsod wrote: »

Wild speculation about what they did,..

No speculation needed

bsod wrote: »

and technically incorrect musings

Nothing technically incorrect here, and no musings

bsod wrote: »

don't help anyone

No, that you dont


This is a technical forum - If you'd rather not discuss the technical in's and out's then why are you posting, or even reading for that matter ??

bsod

The involvement started 18 hours before you came along for some mindless chat.

OP's generally don't read most of this !!!!, and rarely act on it, but sometimes they do, and they often pick on the most stupid post of the lot, to take their advice from.

AndyPix

bsod wrote: »

The involvement started 18 hours before you came along for some mindless chat.

OP's generally don't read most of this !!!!, and rarely act on it, but sometimes they do, and they often pick on the most stupid post of the lot, to take their advice from.

Why did you feel the need to come back with a pointless post ... AGAIN


What have you added to this discussion ?
You seem to miss the point that it is not only the OP that benefits from any information in the thread, but many more people who may be in a similar situation.
Otherwise there would be no point in an open forum now would there and all answers would be PM'd to the OP ..


Seems you need to maybe restrain yourself unless you have something to add to the topic of the thread.
The only mindless (and off topic) chat , seems to be your own