Print this page | Go back to previous topic
Forum nameThe Computer Forum
Topic subjectI Been Hacked Screen
Topic URLhttp://www.pcqanda.com/dc/dcboard.php?az=show_topic&forum=2&topic_id=564404
564404, I Been Hacked Screen
Posted by TV Man 436 163, Tue Jul-25-17 05:07 PM
OS = Windows 10 Pro

I had just done a Acronis True Image Backup before I attempted the removal of my original AV program.

I removed my normal AV program (Kaspersky) to install a new AV program.I was unable to install the 2 AV programs I wanted to try out.

AV Program at this time was Windows Defender.

I then went on using Windows Edge and I was using Google search
When My screen went to a different color.
The new message on my screen stated all my passwords were stolen and I should call this phone number. I did not call
I could not get out of this screen.

To get out I pressed Ctrl Alt Del
I got into the task manager and shut down the program that was running and I was able to restart my computer.

I restored my computer using Acronis.
I did a Kaspersky virus scan. No virus were found.

Has any one ever had a problem like this?


564405, RE: I Been Hacked Screen
Posted by therube, Tue Jul-25-17 05:40 PM
I'd suspect a bogus ad, phishing, but otherwise not nefarious (as in it did not actually drop any malware into your system).
564406, RE: I Been Hacked Screen
Posted by KJT, Tue Jul-25-17 05:44 PM
I've experience similarly worded web pages. So far I have always been able to close my browser - IE11 - and thus the offending web page simply by using Task Manager.

Nothing has ever turned up on subsequent AV and anti-malware scans.

As long as you can do this with Task Manager, I wouldn't be overly alarmed.

Jim.
564407, RE: I Been Hacked Screen
Posted by bobbo, Tue Jul-25-17 08:46 PM
Those popups are a constant annoyance, and I also go to Task Manager and stop the threat. After closing the browser, I run a search via Super Anti Spyware, or another scanner. I recently had my browser hijacked and ran Malwarebytes which cleaned a ton of causative entries, returning the browser to normal function.


564408, RE: I Been Hacked Screen
Posted by TV Man 436 163, Tue Jul-25-17 09:08 PM
Thank all of you for your Quick replies.
TV Man 436 163
564409, RE: I Been Hacked Screen
Posted by KJT, Wed Jul-26-17 02:00 AM
This popped up earlier this evening:



Of course I didn't click "OK" or "Back To Safety", nor did I call the phone number.

Task manager dispatched it instantly.

Jim.


564410, RE: I Been Hacked Screen
Posted by TV Man 436 163, Wed Jul-26-17 11:34 AM
KJT
That is the exact screen I got.
564411, RE: I Been Hacked Screen
Posted by bobbo, Wed Jul-26-17 04:09 PM
Same ones I get and remove.

564412, RE: I Been Hacked Screen
Posted by GreyFalcon, Wed Jul-26-17 07:05 PM
I saw one on my neighbors computer this morning. I too suspect it is a phishing scam hoping someone will call or push a bogus button that will unleash hell on your computer. His computer is undergoing a detailed scan just in case.
564413, RE: I Been Hacked Screen
Posted by Ttech, Wed Jul-26-17 11:46 PM
USUALLY, this is a ploy to get you to call the tech support phone scammers in India. I tell my customers that if they see this, they should just hold the power button until the computer shuts off, then wait 15 seconds before turning it back on. Check to see if the message returns, if it doesn't, just a scan with Malwarebytes should be sufficient. If it does return then they will probably need professional help to get it cleaned up.

If you do call the number, the slick talking people on the other end will go to great lengths to scare you into letting them remote control your computer. They will then use deceptive tactics to show you all the terrible things that are wrong with your computer. They usually open Event Viewer and sort by Level, this puts all the critical items with red icons at the top of the list. They know their game plan well. If you don't agree to purchase their "support plan" they will become very aggressive and even rude to try to get you to give them your credit card number. If you agree, they will charge you several hundred dollars for barely legitimate services. They will delete temp files and cookies and maybe install an anti-malware or anti-virus program. They will leave TXT, PDF or HTML files on your desktop with a phone number to call, but phony company name and a phony location in the USA, they're all in India. They will tell you that you have unlimited support, but if you call them back at a later date, they may tell you you need to pay more.

Some of these scammer are extra aggressive and if you let them onto your computer they will set a Syskey password (look it up), this is a password for the Registry files and if they set it, you won't be able to easily get back into your computer without the password that they set. This is a tactic to get you to call back if you don't agree to pay them initially. There are ways to remove the Syskey password, but its not a simple procedure.

These scammers prey on elderly and retired people because they are usually not very computer literate. So please warn all your elderly family, relatives and friends about this.
564414, RE: I Been Hacked Screen
Posted by bobbo, Thu Jul-27-17 01:28 AM
Thanks for this good advice.