Tweet
Buzzing Dhol is a Trojan from the Rogue.Tech-Support-Scam family that displays a screen that pretends to be a fake Windows 10 crash that is designed to try and scare you into calling a remote tech support number. This screen will overlay the desktop and state that the computer has encountered a HAL_INTIALIZATION_FAILED error. As the screen overlays the desktop and there are no visible ways to disable it, it can easily be confused as the real error. It does this so that you will be tricked into calling the listed phone number so they can sell you unneeded support services. Furthermore, when I called this number, they answered as Microsoft Support and claimed to work for Microsoft.
Remove the PC Ran into a Problem 1-888-479-3649 Scam
Buzzing Dhol is a Trojan from the Rogue.Tech-Support-Scam family that displays a screen that pretends to be a fake Windows 10 crash that is designed to try and scare you into calling a remote tech support number. This screen will overlay the desktop and state that the computer has encountered a HAL_INTIALIZATION_FAILED error. As the screen overlays the desktop and there are no visible ways to disable it, it can easily be confused as the real error. It does this so that you will be tricked into calling the listed phone number so they can sell you unneeded support services. Furthermore, when I called this number, they answered as Microsoft Support and claimed to work for Microsoft.
When installed Buzzing Dohl, configured autorun entries so that it starts every time a user logs in. Once started, it will extract a image resource from the executable and display it as a fake Windows crash. The text of this alert is:
Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you. (0% complete) If you'd like to know more, you can search online later for this error: HAL_INTIALIZATION_FAILED
If you'd like to resolve the issue over the phone you can call our support at 1-888-479-3649
As you can see, this program was created for the sole purpose of displaying fake Windows alerts in order to scare you into purchasing remote support services. If you are infected with this program, please ignore any alerts that are displayed and do not call the displayed number. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Buzzing Dhol Files %Desktop%\Buzzing Dhol.lnk C:\Windows\Buzzing Dhol\ C:\Windows\Buzzing Dhol\Buzzing Dhol\ C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Uninstall.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Uninstall.ini File Location Notes:
%Desktop% means that the file is located directly on your desktop. This is C:\DOCUMENTS AND SETTINGS\\Desktop\ for Windows 2000/XP, and C:\Users\\Desktop\ for Windows Vista, Windows 7, and Windows 8.
View Associated Buzzing Dhol Registry Information HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Buzzing Dhol C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Buzzing Dhol.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Buzzing Dhol 9.1.1
Click here to view the article.
Remove the PC Ran into a Problem 1-888-479-3649 Scam
- Tue, 19 Apr 2016 15:55:02 EDT
- Read 618 times
Buzzing Dhol is a Trojan from the Rogue.Tech-Support-Scam family that displays a screen that pretends to be a fake Windows 10 crash that is designed to try and scare you into calling a remote tech support number. This screen will overlay the desktop and state that the computer has encountered a HAL_INTIALIZATION_FAILED error. As the screen overlays the desktop and there are no visible ways to disable it, it can easily be confused as the real error. It does this so that you will be tricked into calling the listed phone number so they can sell you unneeded support services. Furthermore, when I called this number, they answered as Microsoft Support and claimed to work for Microsoft.
When installed Buzzing Dohl, configured autorun entries so that it starts every time a user logs in. Once started, it will extract a image resource from the executable and display it as a fake Windows crash. The text of this alert is:
Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you. (0% complete) If you'd like to know more, you can search online later for this error: HAL_INTIALIZATION_FAILED
If you'd like to resolve the issue over the phone you can call our support at 1-888-479-3649
As you can see, this program was created for the sole purpose of displaying fake Windows alerts in order to scare you into purchasing remote support services. If you are infected with this program, please ignore any alerts that are displayed and do not call the displayed number. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Buzzing Dhol Files %Desktop%\Buzzing Dhol.lnk C:\Windows\Buzzing Dhol\ C:\Windows\Buzzing Dhol\Buzzing Dhol\ C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Uninstall.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Uninstall.ini File Location Notes:
%Desktop% means that the file is located directly on your desktop. This is C:\DOCUMENTS AND SETTINGS\\Desktop\ for Windows 2000/XP, and C:\Users\\Desktop\ for Windows Vista, Windows 7, and Windows 8.
View Associated Buzzing Dhol Registry Information HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Buzzing Dhol C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Buzzing Dhol.exe C:\Windows\Buzzing Dhol\Buzzing Dhol\Buzzing Dhol.exe HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Buzzing Dhol 9.1.1
Click here to view the article.