Tweet
The 1-844-879-7840 Suspicious Activity Tech Support Scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake Windows alert that states suspicious activity has been detected in Windows. The alert goes on to say that access to the computer has been removed due to a network breach. The reality is that this is nothing more than a fake alert that is designed to scare you into calling the phone number listed in the alert. Once a victim calls the number, the scammers will try to sell them unnecessary services and software.
Fake Suspicious Activity Tech Support Scam Removal Guide
The 1-844-879-7840 Suspicious Activity Tech Support Scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake Windows alert that states suspicious activity has been detected in Windows. The alert goes on to say that access to the computer has been removed due to a network breach. The reality is that this is nothing more than a fake alert that is designed to scare you into calling the phone number listed in the alert. Once a victim calls the number, the scammers will try to sell them unnecessary services and software.
The text of the Suspicious Activity Scam alert is:
Microsoft has detected some suspicious activity on this computer. All access to this device has been revoked due to a network security breach. Attackers might attept to steal personal information, banking details, emails, passwords and other files on this system.
Please contact a Microsoft certified technician on
+1-844-879-7840
How did the 1-844-879-7840 Suspicious Activity Scam get on my computer?
It is important to note that this Trojan is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
Without a doubt, this scam was created solely to trick you into calling the listed number so they can trick you into spending money on unnecessary services or product keys. For no reason should you call this number, and if you have already have and purchased services, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software for free, please use the removal guide below.
Array
View Associated Fake Suspicious Activity Tech Support Scam Files C:\Windows\pss\ C:\Windows\pss\FreeDownloadmanager.exe.Startup %UserProfile%\AppData\Roaming\MicrosoftExch\ %UserProfile%\AppData\Roaming\MicrosoftExch\Interop.IWshRuntimeLibrary.dll %UserProfile%\AppData\Roaming\MicrosoftExch\Interop.Scripting.dll %UserProfile%\AppData\Roaming\MicrosoftExch\PlatformInfo.dll %UserProfile%\AppData\Roaming\MicrosoftExch\tascmgr.exe %UserProfile%\AppData\Roaming\MicrosoftExch\tascmgr.exe.config %UserProfile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FreeDownloadmanager.exe File Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
Click here to view the article.
Fake Suspicious Activity Tech Support Scam Removal Guide
- Tue, 06 Sep 2016 10:19:15 EDT
- Read 595 times
The 1-844-879-7840 Suspicious Activity Tech Support Scam is a Trojan from the Rogue.Tech-Support-Scam family that displays a fake Windows alert that states suspicious activity has been detected in Windows. The alert goes on to say that access to the computer has been removed due to a network breach. The reality is that this is nothing more than a fake alert that is designed to scare you into calling the phone number listed in the alert. Once a victim calls the number, the scammers will try to sell them unnecessary services and software.
The text of the Suspicious Activity Scam alert is:
Microsoft has detected some suspicious activity on this computer. All access to this device has been revoked due to a network security breach. Attackers might attept to steal personal information, banking details, emails, passwords and other files on this system.
Please contact a Microsoft certified technician on
+1-844-879-7840
How did the 1-844-879-7840 Suspicious Activity Scam get on my computer?
It is important to note that this Trojan is installed by other programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you cancel the install and not use the free software.
Without a doubt, this scam was created solely to trick you into calling the listed number so they can trick you into spending money on unnecessary services or product keys. For no reason should you call this number, and if you have already have and purchased services, I advise you to dispute the charges with your credit card company. To remove this Trojan and any related software for free, please use the removal guide below.
Array
View Associated Fake Suspicious Activity Tech Support Scam Files C:\Windows\pss\ C:\Windows\pss\FreeDownloadmanager.exe.Startup %UserProfile%\AppData\Roaming\MicrosoftExch\ %UserProfile%\AppData\Roaming\MicrosoftExch\Interop.IWshRuntimeLibrary.dll %UserProfile%\AppData\Roaming\MicrosoftExch\Interop.Scripting.dll %UserProfile%\AppData\Roaming\MicrosoftExch\PlatformInfo.dll %UserProfile%\AppData\Roaming\MicrosoftExch\tascmgr.exe %UserProfile%\AppData\Roaming\MicrosoftExch\tascmgr.exe.config %UserProfile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FreeDownloadmanager.exe File Location Notes:
%UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7/8, and c:\winnt\profiles\ for Windows NT.
Click here to view the article.