Tweet
The TrojanHorseXXX.com tech support scam is a program from the Rogue.Tech-Support-Scam family that displays a fake Windows crash in a browser Window and then prompts you to call a tech support number. When installed, TrojanHorseXXX will open numerous browser Windows that display the trojanhorsexxx.com site. This site will display a fake System Error Warning that states that a serious malfunction has been detected and that you should contact the (844) 465-8251 remote support number for help.
How to remove the Trojanhorsexxx.com Tech Support Scam
The TrojanHorseXXX.com tech support scam is a program from the Rogue.Tech-Support-Scam family that displays a fake Windows crash in a browser Window and then prompts you to call a tech support number. When installed, TrojanHorseXXX will open numerous browser Windows that display the trojanhorsexxx.com site. This site will display a fake System Error Warning that states that a serious malfunction has been detected and that you should contact the (844) 465-8251 remote support number for help.
When you call this number, you will be told that your computer is infected or has a serious problem and that you should purchase remote support services. They will then attempt to scare you into purchasing services or software that you do not need. It goes without saying that should not purchase services from this remote support company.
The alerts and text of the System Error Warning page that is displayed in your browser are:
Dear customer,
A serious malfunction has been detected with Windows 7 / Server 2008 R2 7 and your Chrome 50.0.2661.75. Please call the toll-free number below for a Microsoft-Certified technician to help resolve the issue:
(844) 465-8251
For your safety, closing the Chrome browser has been disabled without support of the Microsoft-Certified technician to avoid corruption to the registry of your Windows 7 / Server 2008 R2 64-bit operating system.
BSOD Drive Problem
PLEASE CALL PC SUPPORT TECHNICIAN:
(844) 465-8251
How did the TrojanHorseXXX.com Scam get on my computer?
It is important to note that this program is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this program was created for the sole purpose of displaying a fake security alerts and warnings to scare you into calling the listed remote support number. For no reason should you call this number, and if you have already purchased services from them, I would advise you to dispute the charges on your credit card company. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Trojanhorsexxx.com Tech Support Scam Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ChromieoBrowser.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MusicPlayer.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WindowsProblem.lnk%UserProfile%\AppData\Roaming\ChromeBrowser.exe%UserProfile% \AppData\Roaming\Interop.WMPLib.dll%UserProfile%\AppData\Roaming\MusicDrawer.exe%UserProfile%\AppDat a\Roaming\Resouce_Monitor.exe%UserProfile%\AppData\Roaming\Resouce_Monitor.InstallState%UserProfile% \AppData\Roaming\WindowsProblem.exeFile Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
View Associated Trojanhorsexxx.com Tech Support Scam Registry Information HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8E999199-4711-4CA1-8040-ACAEE9C33CD6}HKLM\SOFTWARE\Wow6432Node\MusicPlayerHKLM\SOFTWARE\Wow6432Node\MusicPlayer\MusicPlayer
Click here to view the article.
How to remove the Trojanhorsexxx.com Tech Support Scam
- Tue, 19 Jul 2016 14:27:06 EDT
- Read 845 times
The TrojanHorseXXX.com tech support scam is a program from the Rogue.Tech-Support-Scam family that displays a fake Windows crash in a browser Window and then prompts you to call a tech support number. When installed, TrojanHorseXXX will open numerous browser Windows that display the trojanhorsexxx.com site. This site will display a fake System Error Warning that states that a serious malfunction has been detected and that you should contact the (844) 465-8251 remote support number for help.
When you call this number, you will be told that your computer is infected or has a serious problem and that you should purchase remote support services. They will then attempt to scare you into purchasing services or software that you do not need. It goes without saying that should not purchase services from this remote support company.
The alerts and text of the System Error Warning page that is displayed in your browser are:
Dear customer,
A serious malfunction has been detected with Windows 7 / Server 2008 R2 7 and your Chrome 50.0.2661.75. Please call the toll-free number below for a Microsoft-Certified technician to help resolve the issue:
(844) 465-8251
For your safety, closing the Chrome browser has been disabled without support of the Microsoft-Certified technician to avoid corruption to the registry of your Windows 7 / Server 2008 R2 64-bit operating system.
BSOD Drive Problem
PLEASE CALL PC SUPPORT TECHNICIAN:
(844) 465-8251
How did the TrojanHorseXXX.com Scam get on my computer?
It is important to note that this program is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
As you can see, this program was created for the sole purpose of displaying a fake security alerts and warnings to scare you into calling the listed remote support number. For no reason should you call this number, and if you have already purchased services from them, I would advise you to dispute the charges on your credit card company. To remove this Trojan and any related software, please use the removal guide below.
Array
View Associated Trojanhorsexxx.com Tech Support Scam Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ChromieoBrowser.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MusicPlayer.lnkC:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WindowsProblem.lnk%UserProfile%\AppData\Roaming\ChromeBrowser.exe%UserProfile% \AppData\Roaming\Interop.WMPLib.dll%UserProfile%\AppData\Roaming\MusicDrawer.exe%UserProfile%\AppDat a\Roaming\Resouce_Monitor.exe%UserProfile%\AppData\Roaming\Resouce_Monitor.InstallState%UserProfile% \AppData\Roaming\WindowsProblem.exeFile Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
View Associated Trojanhorsexxx.com Tech Support Scam Registry Information HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8E999199-4711-4CA1-8040-ACAEE9C33CD6}HKLM\SOFTWARE\Wow6432Node\MusicPlayerHKLM\SOFTWARE\Wow6432Node\MusicPlayer\MusicPlayer
Click here to view the article.