Announcement

Collapse
No announcement yet.

Remove VMC Media Player and FatalError Tech Support Scams

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Remove VMC Media Player and FatalError Tech Support Scams

    This guide is for the VMC Media Player and Fatalerror Scam program from the Rogue.Tech-Support-Scam family. When this infection is installed it will pretend to be installing the VMC Media Player, but will instead install a file called fatalerror.exe, which display fake Windows crashes. It will then automatically shutdown your computer, while displaying a Thank You prompt. Once the computer reboots, your Windows desktop will be replaced with a fake Blue Screen of Death or BSOD.

    Remove VMC Media Player and FatalError Tech Support Scams

    • Wed, 27 Jul 2016 10:31:41 EDT
    • Read 552 times








    This guide is for the VMC Media Player and Fatalerror Scam program from theRogue.Tech-Support-Scam family. When this infection is installed it will pretend to be installing the VMC Media Player, but will instead install a file called fatalerror.exe, which display fake Windows crashes. It will then automatically shutdown your computer, while displaying a Thank You prompt. Once the computer reboots, your Windows desktop will be replaced with a fake Blue Screen of Death or BSOD.
    The fake Windows crash screen will state that there was a DRIVER_IRQL_NOT_LESS_OR_EQUAL with gv3.sys or that the Zeus malware was detected. It then prompts you to download a key or to call the listed 1-866-933-5430 number. Once you call the number, these scammers will try to sell you unneeded services and software.
    On this fake crash screen will be a Microsoft Help button, which when clicked will open the site http://www.microsoft.aios.us. From there you can download various remote support tools like TeamViewer, Supremo, or Ammyy, which will be used by the scammers to further scare you into thinking you need their help.
    Last, but not least, the fake crash screen will also prompt you to download and run a file called license_key.exe. This will just install another tech support scam called ProductKey. Please do not run this program.
    The text of this alert is:
    A problem has been detected and windows has been shutdown to prevent damage to your computer.
    DRIVER_IRQL_NOT_LESS_OR_EQUAL
    If this is the first time you've seen this stop error screen, restart your computer, If this screen appears again, follow these steps: or CONTACT US +1(866)933-5430
    Check to make sure any new hardware or software is properly installed. If this is a new installation, ask your hardware or software manufacturer for any windows updates you might need.
    If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing. If you need to use Start Windows normally to remove or disable components, restart your computer, press F8 to select Advanced Startup Options, and then select Start Windows normally.
    Technical information:
    *** Registry error: 0x00D1 (0x00C,0x002,0x00,0xF86B5A89)
    *** gv3.sys - Address F86B5A89 base at F86B5000, DateStamp 3dd9919eb
    Beginning dump of physical memory
    Physical memory dump complete.
    Contact your system administrator or technical support group for further assistance. CONTACT US +1(866)933-5430
    CONTACT US +1(866)933-5430
    Zeus is a very dangerous software used by criminals to steal personal data such as credit card information, access to banking accounts,passwords to social networks and e-mails.
    Zeus was detected and put in quarantine

    It goes without saying that you should not call the listed number.
    How did the VMC Media Player Scam get on my computer?

    It is important to note that this tech support scam is bundled with and installed by free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers youÂ*CustomÂ*orÂ*AdvancedÂ*installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
    As you can see, this program was created purely to scare you into thinking your Windows installation has a problem so that you will then call the listed number. For no reason should you call this number and buy tech support services, and if you have, you should contact your credit card company and dispute the charges. Please use this guide to remove all remnants of the FatalError or VMC Media Player scam from your computer for free.
    Array
    View Associated VMC Media Player Tech Support Scam Files C:\Program Files (x86)\VMC Media Player\C:\Program Files (x86)\VMC Media Player\fatalerror.batC:\Program Files (x86)\VMC Media Player\fatalerror.exeC:\Program Files (x86)\VMC Media Player\Uninstall.exeC:\Program Files (x86)\VMC Media Player\Uninstall.iniC:\Program Files (x86)\VMC Media Player\Windows Logoff Sound.wav


    View Associated VMC Media Player Tech Support Scam Registry Information HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell C:\Program Files (x86)\VMC Media Player\fatalerror.exeHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\shutdown\Comment Thank YouHKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VMC Media PlayerHKLM\SOFTWARE\Wow6432Node\vmcmediaplayer\Path C:\Program Files (x86)\VMC Media Player\fatalerror.exe







    Click here to view the article.
Working...
X