Microsoft or tech support scam - Locating the scammers

three one three three one three eight eight now soon you will get a pop up on your computer screen trustworthy once you got that click on the trust worthy okay trustworthy okay i'm sure yep click on that trustworthy yep now that's wonderful now congratulation you are securely get connected to the certified technician right now okay by which you are able to see the small hidden problem and you will get an idea that why those services get stopped and why those hacking software uh getting to your computer day by day okay and meanwhile i'll just be requesting you that get a pin paper handy meanwhile this server will give you the protection in your computer first all right because it's very important okay and get a handy paper pen paper handy and let me know once you got it okay okay yep uh let me see let me get a note here okay i've got a pen and paper now all right that's wonderful now you got the id and the password on your computer screen okay now just do one thing be in front of the computer i will simply transferring this call to the head technician and by which you are able to see those more hidden problem and you will better understand things okay okay right yeah i'm transferring this call today all right okay all right hello hi hello here am i talking to you love you hi there sir nicole has been transferred to me i'm the head technician over here josh carter how are you josh hello josh um yeah i'm not too bad okay great now have you understood why the reason we are phoning you what problems are given to your computer do you know exactly that um i think the the other guy was saying that um i had something in event viewer and something in ms config from what i remember okay right right now let me just show you those jobs which my technician is talking about okay now with your consent right with your consent only i will be commanding my server to go ahead and help you to show you those infections which you have not seen in your computer okay all right right and keep telling me whatever you see over there because i am unable to see those right because i'm not there with you neither in front of you right okay who's got my um who's got a hold of my computer then at the moment is that you typing no your computer is see your computer is now connected to my server not to me or any person in this world it is connected to a technology which is called secure server right okay right and that's what i'm telling you whatever you see over there keep telling me right then only i will be able to help you and guide you accordingly okay okay yep tell me what do you see now on your computer screen there um it looks like event viewer again you can see event viewer there uh well you're showing some warnings and um errors right right now do you have my technician explained you what are these error warning are and what they can do on your computer um not very well no um can you tell me no okay right because see i'll tell you exactly what they are okay these are normally coming to the internet right from the network access production agent which is a service you should run in your computer which has been stopped we have that information right right we're just going to find out the way why these are being stopped into your computer and how okay okay now tell me what do you see now on your computer screen there so you're running ms config system configuration right okay that's called search configuration now in that the server is going to help you out to check whether how many servers are running and how many are stuck now right now do you see service manufacturer status and the disabled do you see that i see that yeah right right now you are able to see what the tigers they are running out they are stopped um some are running some are stopped some are running and some are stopped right just check go through with all the things and scroll the page down and check it there uh yeah so summer stopped some running yep right okay now my server is just going to highlight there a service right which has to run okay is the service running or not okay just check it so it says telephony i guess that style it was stopped that's a credential manager yep credential manager okay right right now do you exactly know what the service helps you to run on your computer um uh well i don't think most people would know that um sorry i don't think most people would know that exactly i'll tell you telephony is a service which protects your telephone part right in which you are talking to me that's why what is happening the voice is not working good right right okay that's why it's not happening there correctly right and the other thing was what the credential manager right that is a service which protects your personal information your personal data right cash render but that has also been stopped right right and do you see application layer gateway service do you see that uh yeah i do right which means like is it running or is it stopped it looks like it stopped okay and do you exactly know what application layer gateway service is therefore um application get right here service no no not okay i'll tell you i'll tell you that service is that for you to use your application part which protects the application part if that part is not working there computer won't work properly because every computer has four major parts application system administrator and the networking part right only part of the computer has been damaged right okay and now the answer of the question why those error warning are there because services of your computer are getting stopped right yeah now why they are getting stopped because we have the information that there are certain hacking software being found into your computer there all right and because of that only the server is now fluctuating and there are so many services which have been stopped okay right now what do you see now on your computer screen there uh you've opening inf hacking softwares right now do you exactly know what for hacking software means uh no i'm not sure okay listen that means that information about the hacking factor because the box which you see there it's called run type the name of a program pull the document or enter results and windows will open it to you which means whatever you type over there if that directory this given your computer will be simply opening for you right but if that thing is not there it will simply give you as result unknown no such result found right right okay now we just just helping you to check whether there is any kind of hacking software or not right now do one thing give one left click on ok and check whether there is any hacking software that is not i could just check it okay um it's got the windows and what do you see um windows and you are able to see that the files and folders right yeah yeah which means you can see number of hacking stocks have been found into your computer correct right okay now just tell me the first name of the particular file folder what that is the first name of it says.net clr data okay andy next one on.netsealer networking so do you have any idea what those software can do into your computer i really don't know i'll tell you plr data means they are put in a hacking software which can control the data of your computer and networking means they are now using your ip address your internet protocol address to which they have hacked your computer okay okay right and just tell me instead of this computer do you have any other laptop or desktop for yourself or any tablet ipad or phone in which you use internet not really it's just this computer i must say um why sorry um it's just really just it's just this pc is all i use really i'm not getting you okay i i i i only use this pc i don't have any tablets or ipads or anything okay okay you only have that pc correct yeah right right right which means the information if you are planning to buy any other laptop or desktop or anything that wouldn't be also being protected because we have to secure not only this computer even your networking part okay yeah okay right now now as you can see there that's the reason why services of your computer are getting stopped okay okay now i believe now you will be having a question how this hacking software came into your computer right yeah okay right now for that only now straight away we are going to uh run a scan on your computer okay and that scan will be giving us the result why these phones are happening into your computer and what stuff you have to take to make your computer good right to make everything work now all right okay and once you see the scan is running over there right just let me know about that okay now do you see the scan is running in the black box over there yeah i see that okay and what do you see keep telling me whatever you see over there all right right so it's saying something about critical system files and so many executables and so on yes tell me about everything whatever you see then only i will be also having the exact location from where they have had your computer or they have ever had or not and from what route these problems are coming into your computer right right it's talking about critical files protection expired tracing information that says your system was hacked from japan germany sweden alaska with an ip address can you please tell me the ip addresses yeah it says 184.17 thank you very much right now do you see over there windows has detected your computer performance is slow do you see that um it talks about color scheme no i'm talking about this do you see the warning there windows have detected your computers performance is slow right yeah right so windows firewalls crashed all stopped all processes viruses activated from startup hitch h4x 10385 viruses have been found computer certificate expired please renew the system security licenses right please press any key now have you understood about the whole standard what was there um no can i see that again it just disappeared have you understood the scan was scanning your computer it has given you the result from where they are happening now do you exactly know from where they are happening in your computer there's a lot of there's a lot of things on my desktop now that i never have lots of do you see lots of icons yeah the icon then right how do you see them yep and what they are can you please name me any one of them let's just sleep right sleep something yeah which means c which means the thieves were hidden into your computer right yeah keys were hidden into your computer and they were hiding by those cyber hackers okay and these are the sleep time is when your computer is going to crash down but don't worry we are looking after it to make it good right now as you see there the computer specification is now expired right yeah yeah now in order to work into your computer right you only need to activate that all right yeah and once that's done right you won't be able to face any problems onto your computer anymore right okay right all right yeah that would be good now once we once you activate that then only you will be able to work into your computer and work things out for you right yeah and once you see the plan packages over there just let me know about that all right i'm here about to buy our time okay um i just see your notepad at the minute now what do you see what they tell me okay you've got a option a one-time investment plan won this two-year plan for 139 five year 2019 lifetime 309 for three computers is that right yeah in for which means if we are planning to buy any of the computer it will be carry forwarded in those computer as well right because for that you didn't have to buy any kind of protection or any kind of service from anyone that'll be for no cost for from our end okay right okay so according to your convenience just let me know whichever you think is good for you so i'll be able to help you regarding it right well i only have one computer so that that first one i think at 139.99 yeah please okay right okay now we should never shoot with that right now just tell me like uh do you have a paypal account a paypal account um no i don't no you don't have it no no issue with through paypal because that's we also trust in that right and most of our customer through paypal that's the safest and the quickest way to which you can get the money done right yeah okay yeah and once you get the page over there right just let me know off paypal all right right sorry okay but before i kind of pay anybody who am i actually paying i don't know who you are really sorry i don't know who you are really i mean you've just said win windows maintenance department okay i'll tell you i'll tell you i'll tell you i'll tell you who we are i'll take you to my website there all right sure of course do you see who we are tech consultancy services we work for microsoft windows computer and for apple mac computer right we provide services globally all over the world right okay right okay now you just have to don't worry because once once you make the payment there straight away from our department right you'll be getting the invoice of your payment that received that you are now activated your certification from microsoft corporation from our department to our department all right right right now i'll just take you to the paypal account there right so we can go ahead and make a temporary account for you right so which you can make the payment there all right okay right now just tell me what do you see now um okay you've got just the paypal.com put your email address put all the other things over there right it's empty put your email address first okay right oh done okay continue oh i believe you have a account with paypal maybe i do okay yeah yeah yeah yeah you just do one thing just log into your account okay i believe you do remember your password right yeah i think so let me see now okay oh i can't remember just put the correct password right which you remember i can't remember it you know you can't remember no i'll say i can't right now i'll help you to get your password number should i help you to get your password no issue just wait let me just help you buy my server now put down your email address over there okay uh right i think i've got enough information here anyway um right i'm not going to bother signing up for anything because you're pulling a scam here and you know you're pulling a scam all right you're thinking i'm pulling a scam over you yes you are yeah you said you said event for your contains hacking activity you know it contains normal logs you said ms config contains stop services when they're quite normal stop services when you typed in hacking softwares you know it just shows the end directory what you put on my desktop is a simple scam i can edit that file and all it's going to do is echo some useless security information to the screen you also you also encrypted my password um database um i have your your ip address by the way you i know you're based in kolkata i know that your broadband service provider is meg blah in kolkata um i will be contacting magbilla um don't worry this is a virtual machine um i know you've encrypted my password file i will be waiting for that okay right how are we waiting for that well that's okay because i'm gonna contact i'm gonna contact both your isp and the local kolkata police so that they can at least um uh ask for your ip address you've contacted me you're four and a half hours ahead at the minute so the time in kolkata is what um 5 40 is it um or 440 um i your ip address is 223.29.201.210 does that does that mean anything to you okay your own idea i'm waiting for you i'm waiting to see you please i'm dying please come please come to me right i'll be waiting for you i will and i'll show you why because what i do don't do it down just yet and i'll show you why i can log back into it again um hold on cancel i'll

Channel: Jim Browning

Views: 1,243,670

Keywords: Technical Support Scam, IP Address (API), Confidence Artist (Profession), ammyy, teamviwer, Tech support, scam, remote access, Indian Call Center, Microsoft scam, Kolkata (Indian City), IP, location of IP

Id: PKhD7pF59WE

Length: 21min 41sec (1301 seconds)

Published: Wed Feb 11 2015