Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi all! We have been experiencing an issue on site where threads have been missing the latest postings. The platform host Vanilla are working on this issue. A workaround that has been used by some is to navigate back from 1 to 10+ pages to re-sync the thread and this will then show the latest posts. Thanks, Mike.
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Beware of the Ammyy Scam

  • 06-04-2011 3:00pm
    #1
    Closed Accounts Posts: 184 ✭✭


    Hi All,

    Just to give you all a thumbs up on a scam which could potentially cause you major security issues.

    Today I took a call from an international code 0025 which I believe is Vietnam.

    The man told me he was a windows service provider and that there was virsuses on my computer that he wanted to fix for me.

    I copped straight away this was a scam but played dumb so that I could get as much information from him as possible.

    He asked me to log on to a website called ammyy.com (don't log on to it!)

    I told him I had done this and he asked what I see on my screen. At this point I told him I knew this was a scam and told him not to call this number again.

    The man became extremely abusive and told me he knew my name and where I live and a lot more that is best not mentioned:D

    If I had done what he asked God only knows what information he might have been able to access.

    I have reported this to the Consumer Association so hopefully it will be highlighted and investigated by them.

    Im sure some of you have experienced similar calls so it would be interesting to hear about your experience.

    Is the guy simply using a phone directory I wonder?





«1

Comments

  • Closed Accounts Posts: 16,713 ✭✭✭✭jor el


    The NCA will not be able to investigate someone operating out of Vietnam, so don't expect any kind of result there. All you can do is let people know, and hope that everyone else isn't dumb enough to fall for this kind of scam.


  • Closed Accounts Posts: 870 ✭✭✭knighted_1




  • Closed Accounts Posts: 184 ✭✭Colm_purchase


    jor el wrote: »
    The NCA will not be able to investigate someone operating out of Vietnam, so don't expect any kind of result there. All you can do is let people know, and hope that everyone else isn't dumb enough to fall for this kind of scam.

    Well hopefully it will be passed on by the NCA to someone that will investigate. I would be particularly concerned about elderly people taking calls of this nature or those that are reasonably new to using a PC.


  • Registered Users Posts: 3,108 ✭✭✭RachaelVO


    I took similar calls in my Dads not so long ago, I kept them on the phone for AGES!!!!!!! I told them from the off I knew it was a scam, and to be fair the second caller was a very nice Indian chap (the first guy just hung up after a few minutes cos he realised I wasn't biting). He was very polite, and I just kept asking him how he know the computer was sending messages and that those messages were attached to the phone number he called. I have to say I did quiet enjoy the conversation, however I knew what the call was, and I hope that I wasted some of his time!


  • Closed Accounts Posts: 9,700 ✭✭✭tricky D


    Note: Ammyy is a legitimate remote desktop tool used for support. Same for logmein. They are safe to use between trusted parties only.

    What these swines are using it for is not legit. It seems as if they are moving from logmein to ammyy as their preferred access tool.

    Here's the big thread with more info: Weird phone call! "online pc doctor" - Only thread on these scam calls please


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 451 ✭✭Pure Sound


    We got those calls a couple of times and I just simply told them that we did not have a computer

    I then got a "Sorry Sir" and they hung up :D


  • Registered Users, Registered Users 2 Posts: 33,518 ✭✭✭✭dudara


    Moved to Security

    dudara


  • Registered Users, Registered Users 2 Posts: 1,691 ✭✭✭JimmyCrackCorn


    Must infect a VM later and have a nose at the malware.

    Something to do tonight with a beer.


  • Registered Users, Registered Users 2 Posts: 570 ✭✭✭Jane98


    Hi,

    I got scammed with this today. At first I sort of believed it as I had been using my laptop just before the phone call and noticed it was going slowly and I knew already it had viruses. Anyway, the guy asked me to go to www.ammyy.com and download the program which I did, then he asked me to confirm the number but I got suspicious so I asked him what number he had so that I could confirm that but he got pretty defensive and I smelled a rat so I asked him to ring back later as I had something to do right then. I immediately googled ammyy and saw it was a scam so deleted the software I had downloaded. Am I ok cause i didn't give them the id no.?


  • Closed Accounts Posts: 39 Láidir


    They rang me five minutes ago, the number began with 00253 which is a place called Djibouti. I've never heard of it. Told them not to contact me again.


  • Advertisement
  • Moderators, Home & Garden Moderators, Technology & Internet Moderators Posts: 24,789 Mod ✭✭✭✭KoolKid


    This is what you say to them :D


  • Registered Users Posts: 313 ✭✭nodolan


    27th June, Cork - friend of mine got the call this morning. Guy claimed to be from Microsoft on a UK number (0044) and he gave the same waffle, but my friend, who is usually quite savvy, got caught off-guard because the guy seemed to have info about her that she didn't think he should have like her maiden name. She said she had to think about it, called me and I told her that Microsoft never cold calls and that it was a scam.


  • Registered Users Posts: 204 ✭✭Parakeets


    Got the service of YouronlinePCdoctor today having got initial call yesterday. Basically you either trust these guys or don't. There method of contact using remote access with ammyy Admin are pretty standard and basically will be done by Microsoft if they were to work on it. Anyway they returned the call the next day having got paid the previous day and I watched them clean up the PC as promised. In the end I am happy with the result, considering that PC protection is essential. I also got new software installed to perform scanning especially on social network sites which is a must.
    I agree that there is a leap of faith in using products from cold calls, but I think the exercise was useful.


  • Closed Accounts Posts: 9,700 ✭✭✭tricky D


    If they cold called you, you have been scammed, especially if they are asian. Nobody legit will ever call you to say they have noticed a virus or other malware on your PC. Bring your laptop to a local PC fixer and probably change your credit card. They will have installed all sorts of nasty stuff in the background to rob your logins and will likely send your CC details to be cloned and your account cleared out.


  • Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    did you call them initially or did they just call you out of the blue?

    If it is a company you trust and have spoken to previously, in a conversation initiated by you - ie: you went to them not the other way around - then fair enough, pc maintenance through remote connection makes sense. I used to do it myself as part of a helpdesk job for 3rd party companies.

    However, if they called you , out of the blue, and offer a tune up or an installation, I would be very careful if not straight out suspicious. How can you know for sure that what they say they are installing is actually what is being installed. It might look like Anti-virus and even act like anti-virus but it could have anything at all installed in the background that you, the customer, dont necessarily get to see, even if you see the installation take place.

    I'm also a little confused about the new software to scan social media sites. what software was installed? what does it scan? how does it detect potential threats? what information does it record and does it ever connect to an external server for updates? if so, does it just download or does it also have the ability to upload information.

    Trusting anyone other than yourself to install anything on your PC is a leap of faith. Trusting someone that I never met or dealt with previously or initiated the contact with is, in my opinion, more than just a leap and something I would never advise anyone to do without some serious research.

    If they cold-called you, I would advise you to be safe rather than sorry and take your PC in to a service centre for a check up. Until you get a clean bill of health for it, I'd keep it off the internet and definitely avoid visiting any site that requires you to enter a password or pin number, including online shopping sites or email and especially banking sites.

    A quick google search for the company name would have turned up some interesting articles about that company:

    http://www.justanswer.com/computer/4gii3-hi-i-company-name-youronlinepcdoctor-contact.html

    http://www.homehelptech.ie/blog/your-online-pc-doctor-scam/

    Hopefully the software they sold to you is no more maliscious than a quick way to make money but considering there are reports of them claiming that .inf files are viruses (they're usually not, they are windows system files and configuration files needed to run your software though they can sometimes be impersonated by viruses) I honestly think they are selling snake oil.

    bottom line: check your credit card (or whatever you used to pay them) and possibly get your bank to change it. Get your PC checked out by a physical person (there should be one somewhere near you - again google or the golden pages) and dont use your PC for anythign personal or sensitive until you have been told its clean and ok to do so.


  • Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    I just thought of something, is this parakeets we are reading a post from or is it yourPCdoctoronline having stolen your login details by "scanning" your social network sites....

    I also forgot, check your phonebill. if you called them back at any stage, there are reports of them using a satellite phone number which could run you €5 a minute seemingly (of which they get a cut) <-- not substantiated, just something I read.


  • Registered Users Posts: 204 ✭✭Parakeets


    Thanks for all the info, and most points have been considered. Unfortunately every point has a "might" linked to it. I made contact to an Asian company, OnlinePCcare" through Dell last year and initially thought it was them checking on progress. The company was Your online PC Doctor (YOLPCD) and I did some Google research on them. Websites seemed OK but any Blog advice was to stay clear, generally from IT experts who would by nature advise to not allow anyone in to your PC. However the work has been done and I will take some time to see how it develops. The computer is running a bit slower but that may be due to the new antivirus running. The antivirus sw is called AVG and also seems legit. I've got registration details from them today. The company YOLPCD has done all it has promised and I don't work for them. I'd sooner get a new PC than take it to a local repair outfit. The cold call angle does have me a bit worried but the speculative "end of the world" scenario may be a bit overstated. I also went to the CC bank and asked to have the transaction cancelled and she said it couldn't be done. She Googled the company while on the phone and reckoned they looked ok.


  • Closed Accounts Posts: 9,700 ✭✭✭tricky D


    Parakeets wrote: »
    Thanks for all the info, and most points have been considered. Unfortunately every point has a "might" linked to it. I made contact to an Asian company, OnlinePCcare" through Dell last year and initially thought it was them checking on progress. The company was Your online PC Doctor (YOLPCD) and I did some Google research on them. Websites seemed OK but any Blog advice was to stay clear, generally from IT experts who would by nature advise to not allow anyone in to your PC. However the work has been done and I will take some time to see how it develops. The computer is running a bit slower but that may be due to the new antivirus running. The antivirus sw is called AVG and also seems legit. I've got registration details from them today. The company YOLPCD has done all it has promised and I don't work for them. I'd sooner get a new PC than take it to a local repair outfit. The cold call angle does have me a bit worried but the speculative "end of the world" scenario may be a bit overstated. I also went to the CC bank and asked to have the transaction cancelled and she said it couldn't be done. She Googled the company while on the phone and reckoned they looked ok.

    You have either definitely been scammed or as LoLth said you are an impostor posting on behalf of the scammers as many of your points and most of your reasoning make no sense.


  • Registered Users, Registered Users 2 Posts: 7,606 ✭✭✭Jumpy


    LoLth wrote: »
    I just thought of something, is this parakeets we are reading a post from or is it yourPCdoctoronline having stolen your login details by "scanning" your social network sites....

    I also forgot, check your phonebill. if you called them back at any stage, there are reports of them using a satellite phone number which could run you €5 a minute seemingly (of which they get a cut) <-- not substantiated, just something I read.

    No. Reading back through post history, the posting structure is the same. Not hacked.

    However he/she has been scammed, just isnt trusting enough to take the word of forum posters.


  • Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    in all honesty, my imposter remark was meant to be humorous and not entirely serious.

    @Parakeets:
    generally from IT experts who would by nature advise to not allow anyone in to your PC

    thats sort of like saying, I looked up methamphetamines and saw that they are real but the blog advice was to steer clear of them, but that was mainly doctors and pharmacists who would by nature advise anyone not to take addictive substances.

    There's a reason these people are IT experts.

    Also, you are taking the word of a bank telephonist/teller/customer service who googled the company and thinks they "looked ok" over users here who work in and study computers and computer security and the writers of those blogs who focus their attention, skills and abilities on security research and have no ulterior motive for sharing their opinions or advice.

    Its ultimately your call and if you're happy then thats good. However, you should be aware that while AVG antivirus is very well respected (and has a free version available) and while it is known that any AV software that scans while your pc is running (on access scans, web scans etc) is going to slow down your pc, it may not be the only thing doing so and exceptions can be added to the scanning criteria to allow certain types of programs and files. You have no way of knowing if this company installed anything else while they were at it. Once someone has remote access to your PC with the ability to install software , thats it. the PC is no longer secure unless you completely trust the other person. There are multiple ways of recovering passwords from a pc, of installing software that sits in the background listening for a future connection that does not require your permission to gain access to your files and information, keyloggers that run silently and record your typing and then send the logs to a 3rd party the next time there is an available internet connection etc (and it is simplicity itself for a script to be writted to strip out the information that would be valuable - user/password/address combinations of websites including online banking, forums, email etc). I'm not trying to use scare tactics but just because things dont go boom now, doesnt mean there wont be ramifications in the future. If they dont, I for one will be very happy for you.

    I honestly believe that you have at the least been scammed in the sense that you were most likely overharged for the work done and the service provided. I hope that the extent of the negative impact that you suffer but as someone who has nothing at all to gain by advising you and as someone who has studied IT Security and works daily with technology and desktops I have to advise you, for your own peace of mind, to bring your pc to someone professional who can check it out for you.

    no idea how much you paid (and I am not asking you to tell me or post here) but when I worked in a small computer repair workshop, a virus scan and an installation of AVG (full or free) usually got charged at half an hour's work - about €30 - and that was quite pricey at the time.


  • Advertisement
  • Registered Users Posts: 204 ✭✭Parakeets


    Thank you LoLth for your detailed advice which is much appreciated and acknowledged. I got further correspondence with the original PC care company called OnlinePCcare which I thought I was dealing with in the first place. They were adamant that no one should access my PC other than themselves. I asked if they knew of YouronlinePCdoctor (YOLPCD)who said no at first but later said they existed. I forwarded all correspondence with YOLPCD and they contacted the parent company SWREG to try to get the subscription refunded giving details. I already tried to get the transaction cancelled with the credit card company without success.

    OnlinePCcare scanned my PC and gave it a clean bill of health. Unfortunately they required more software to be installed called Power Undelete costing another 250 Euro as part of the maintenance.

    Conclusion
    Do not allow your bank details transferred by phone.
    Do not be convinced or agree with scare tactics over the phone
    It appears to me that YOLPCD is a legitimate company but does not use legitimate tactics
    While I shouldn't have given bank details over phone YOLPCD was not entitled to ask for them either.
    Remote access to computers is a normal process but some means of verifying the bona fide of the company is required. Remote access will be the norm for solving PC problems.

    This situation is ongoing so I will update later. Thanks for the advice.


  • Registered Users, Registered Users 2 Posts: 7,606 ✭✭✭Jumpy


    Remote access is used within companies by members of their own support staff. It will not become the norm for the public.

    Power Undelete? Were you asking them to recover a deleted file? If not you have been sold a useless piece of software for normal use.

    Call your credit card company and tell them it was a scam. Escalate it if need be, but those guys are not legit.


  • Registered Users, Registered Users 2 Posts: 10,339 ✭✭✭✭LoLth


    sorry to say this Parakeets but OnlinePCcare are exactly the same type of company as youronlinepcdoctor.

    a google search will show you a lot of results of people warning about this scam (they claim to be from Dell, or microsoft etc) - the same as youronlinePCdoctor.

    the Power undelete software is for recovering deleted files. It may have been necesary to recover something deleted but ther eis no way you should have been charged for a license for a commercial product, the company doing the work should have used their own licensed copy of the software - especially as it is something you are never likely to use again.

    To support my opinion that they are a scam company, I should point out that from the power undelete software's homepage here: http://www.power-undelete.com/ full license for this software costs 69 US dollars, there is no way you should have been charged 250 even with techie time taken into account.

    I'm afraid I suspect that these two companies are bouncing customers off one another to increase their profits.

    The only advice I can give you at this stage is to cut your losses. Do not deal with either of these companies again. Go and talk to a PC repair shop in your local area (I'm not from limerick so I am unfamiliar with companies there) and ask them for an approximate cost of regular maintenance on your PC - personally I'd ask them to recommend an anti-virus software and if they neglect to mention free options, then I'd be less likely to think that they have my best interest (and pocket) at heart. If there is a college near you, I'm sure some computer science student would be delighted with a little extra beer money for performing routine maintenance for you.

    Dell do in fact have an online helpdesk which you can find details of here:

    http://www1.euro.dell.com/content/topics/global.aspx/dps/pc_troubleshooting?c=ie&cid=IESDCPCTroub&cs=iedhs1&dgc=IR&l=en&s=dhs&~ck=mn

    However you have to ring them. they do not initiate contact with you. If necessary, and with your permission a verified dell technician may remote to your pc through a secure channel (their prices start at €29 and they have a no-fix no-fee policy - according to the website).


  • Registered Users Posts: 204 ✭✭Parakeets


    Youronlinepcdoctor have offered me a refund for the work they have done and cover offered. They are the original cold call company that convinced me I needed cover. They offered me a refund but first to send another e-mail outlining the reasons for the refund and they will issue it then. Anyone familiar with this approach as any refund would surly be welcome, and the e-mail is ready to go?


  • Registered Users Posts: 204 ✭✭Parakeets


    YouronlinePCdoctor paid the refund in full and immediately without quibble. However the anti-virus software AVG Ver: 10.0.1390 exp 08/07/2012 remains on my PC and is active. I previously had the free Microsoft Security Essentials as an anti-virus software and can have it re-installed again. The AVG has more features and am reluctant to delete it. Any experience on this?


  • Registered Users, Registered Users 2 Posts: 1,109 ✭✭✭Skrynesaver


    AVG is quite good, but a memory hog, try Avast instead.

    And seriously dude, get that machine scrubbed clean, back-up and threat scan your data, re-install your OS and software, return your data to the machine. A neighbour of mine got taken by these scammers and I found a backdoor and a keylogger on the box when I cleaned it.

    My wife was contacted by them recently and though I was in the room she just told them to sod off and stop disturbing people. I would have wasted hours of their time for the sport ;)


  • Closed Accounts Posts: 1 JEdgarHooverJr


    It is so funny, I had a conversation with them on the phone today. Somehow, they got my wifes cell phone number...her dumb ass gives them our home number. When the Indian guy told me he was from Windows and we had a problem with our computer...I played along and talked to him like he was Bill Gates. The best part is, a good friend of mine is an Indian from Guyana...he is a gangster & knows this scam...I gave my buddy the IP # and the phone #, of this guy that called me, he is "F'ed" LOL! I told him to call me tomorrow morning. I will post if that actually happens. Way too funny!


  • Registered Users, Registered Users 2 Posts: 3,739 ✭✭✭johnmcdnl


    It is so funny, I had a conversation with them on the phone today. Somehow, they got my wifes cell phone number...her dumb ass gives them our home number. When the Indian guy told me he was from Windows and we had a problem with our computer...I played along and talked to him like he was Bill Gates. The best part is, a good friend of mine is an Indian from Guyana...he is a gangster & knows this scam...I gave my buddy the IP # and the phone #, of this guy that called me, he is "F'ed" LOL! I told him to call me tomorrow morning. I will post if that actually happens. Way too funny!

    how did you get the guy's IP if you were on the phone


  • Registered Users Posts: 60 ✭✭obviousTroll


    Just to let you know, I got two calls from seperate clients of mine today (I'm self employed in PC Repair). They both were contacted by "Apple". One of them got as far as downloading ammyy, which is legit, but he called be before the person got their login credentials.

    Seems like they are now "Apple" experts. :)


  • Advertisement
  • Registered Users, Registered Users 2 Posts: 4,780 ✭✭✭JohnK


    I've had a few calls from them but today was the first time I actually spoke to a person, normally the line would just be quiet then after a few seconds I'd get an automated "goodbye". Didnt get to play around with them or anything though as I was a bit lacking in time however I did shout some abuse at them before hanging up and it was actually quite cathartic. Hopefully they'll ring back some other time and I'll get to see how long I can curse and swear at them before they cut me off :)


  • Registered Users Posts: 137 ✭✭steve22


    I know this is an old enough thread but no harm in reviving it to keep people aware that they are still at this....
    I managed to keep them on the line for the best part of 40 minutes yesterday pretending to cooperate but not quite understanding what they're asking me to do... surprising how angry they get when you cant seem to comprehend simple instructions.... oh well. I'll try beat the 40 mins next time if i've nothing else to do.
    I'd really like to know how they get the details - my phone number is not listed.

    Also.... "I'm calling from Windows" is what she said............... What?? IF Microsoft were ever going to call you would they not say they're ringing from Microsoft??? bad start to a bad scam.


  • Registered Users, Registered Users 2 Posts: 4,780 ✭✭✭JohnK


    Have you tried this site to see if you're listed? http://www.eircomphonebook.ie/ - thats the only place my number is listed so must be where they got it.

    40 minutes is impressive! The longest I've got them on the line for was about 4~5 minutes before they hung up due to me just insulting and arguing with them. I was thinking after that they'd just give up and take my name out of their database but they rang back that very night. Think it was the same guy too as after he said he was the tech support crowd and my name (very distinctive) he asked if I'd be more civil and hung up after a single "**** off" :D


  • Registered Users Posts: 137 ✭✭steve22


    i thought arguing with them and insulting them would stop them from phoning again but obviously not... a straight and to the point "f*** off" seems to be the best approach.
    After 40 mins of annoying one caller she put me on to a "techncian" because my computer "froze" (i didnt even have it turned on obviously).... he told me to restart the computer and he'd ring back - when he did i just said "what? i dont have a computer", he said "but i was just talking to you" - me: "no, that wasnt me anyway" so he hung up...... they rang two more times that evening.....

    I do wonder though, do they have a little company set up for this purpose ? while on the phone you can hear a good few voices in the background talking the same bullsh!t - just like any call centre really.


  • Registered Users Posts: 30 juanpablo1983


    I fell for this scam. Not one of my proudest moments in life!!


  • Registered Users Posts: 137 ✭✭steve22


    you live and learn man....... theres so many scams out there its hard keep up with them all!


  • Advertisement
  • Registered Users Posts: 523 ✭✭✭Zemuppet


    I opened and ran the ammyy program giving the id code thing but i stopped short of giving any contact or bank account details. Does this mean my laptop would be infected? Sorry i'm not a computer wiz just a regular user so any help so i don't go paranoid


  • Registered Users Posts: 3,108 ✭✭✭RachaelVO


    Zemuppet wrote: »
    I opened and ran the ammyy program giving the id code thing but i stopped short of giving any contact or bank account details. Does this mean my laptop would be infected? Sorry i'm not a computer wiz just a regular user so any help so i don't go paranoid

    The programme it's self is only a programme used so that people can see what's going on on someones computer, so if an IT office need access to for example a sales rep lap top to update something it can be used for that (which is it's primary function). There's a few different types. Nice handy piece of kit, but like most handy things it has been "adapted" so that scammers can download rubbish onto your computer to steal your identity, bank details etc;

    My advice, get your computer checked out by someone who knows what the story is and run your virus scan too.


  • Registered Users Posts: 3,108 ✭✭✭RachaelVO


    steve22 wrote: »
    I know this is an old enough thread but no harm in reviving it to keep people aware that they are still at this....
    I managed to keep them on the line for the best part of 40 minutes yesterday pretending to cooperate but not quite understanding what they're asking me to do... surprising how angry they get when you cant seem to comprehend simple instructions.... oh well. I'll try beat the 40 mins next time if i've nothing else to do.
    I'd really like to know how they get the details - my phone number is not listed.

    Also.... "I'm calling from Windows" is what she said............... What?? IF Microsoft were ever going to call you would they not say they're ringing from Microsoft??? bad start to a bad scam.

    I fielded a few of them in my dads, such a laugh I had. I'm impressed with your 40mins, that's good going. I was so patronising to them, was best laugh I had in AGES. I told them that their mothers were ashamed of them, and they said I was wrong, and that they too were from Windows.

    At least if I kept them on the phone it used up their time, and as I said earlier in the thread if it stopped them calling someone who didn't know better it was time well spent!


  • Registered Users Posts: 137 ✭✭steve22


    Zemuppet wrote: »
    I opened and ran the ammyy program giving the id code thing but i stopped short of giving any contact or bank account details. Does this mean my laptop would be infected? Sorry i'm not a computer wiz just a regular user so any help so i don't go paranoid

    not a wiz myself... quite the opposite really!
    I’m not even sure what programmes they try install on your PC but that scan in windows defender is supposed to pick up unwanted spyware – might be worth running.

    RachaelVO wrote: »
    I fielded a few of them in my dads, such a laugh I had. I'm impressed with your 40mins, that's good going. I was so patronising to them, was best laugh I had in AGES. I told them that their mothers were ashamed of them, and they said I was wrong, and that they too were from Windows.

    At least if I kept them on the phone it used up their time, and as I said earlier in the thread if it stopped them calling someone who didn't know better it was time well spent!

    Ah yeah, I thought 40 mins was an achievement alright… most constructive thing I did that day!! Although it wasn’t all conversation - I left them on hold to change a babys nappy at one stage and they actually waited for me… that’s persistence!
    The more of their time you waste the better really.


  • Registered Users Posts: 367 ✭✭900913


    A friend from up north got caught out today by someone claiming to be from "Windows" lol not Microsoft.
    They got him to install remote access software from crossloop.com

    Here's the message my friend sent me.
    some 'wise' guy form windows rang up and showed me there was 48500 viruses on my computer and there's no delete option to get rid of them he wanted to charge me 40 pounds a year. do you have any answers to this dilema

    My reply
    You didnt install the ammyy software or any software. Btw it's a complete scam, the proper name is Microsoft not windows. If u installed anything turn on teamviewer and send me your Id. The scam gets u to install remote control software and then they either steal ur credit card details or charge you to remove non existing virus's.

    friend
    no this was definately genuine the computer is full of viruses..i told him i wanted time to think about it he left me his number is totally lejit

    do you wanna have a look

    me
    have a read of this, its 100% scam, microsoft dont call people, plus u said they said there from windows. did you install any software they asked you to.

    #http://www.boards.ie/vbulletin/showthread.php?t=2056231349

    friend
    he went into the dos screen and typed in a virus tree scan

    then he typed how many 48599 came up

    then he showed me anothr screen where lots of drivers looked like they were stoped

    Crazy, saying that there are 48599 viruses and still getting believed.
    I uninstalled the remote access software and ran a few scans but found nothing, I'm thinking he could be backdoored.


  • Advertisement
  • Registered Users Posts: 60 ✭✭obviousTroll


    Still amazes me that people fall for this.
    "Seems legit" lulz.
    I wonder how long it will take before "Google" will call people telling them that they've exceeded their annual porn limit.

    Being serious for a sec, is there anything we can do to educate people better to this kind of nonsense?


  • Registered Users Posts: 957 ✭✭✭MonsterCookie


    This has been going on under various guises for quite some time.

    My brother in law rang me one evening about 18 months ago to say he had a fairly aggssive Indian guy on the phone shouting at him that he wanted his credit card number to pay for the remote support.

    At that point, my BIL had installed logmein and the guy had asked him to go to his event log to look for certain types of events. The events were predictable enough and fairly innocuous but the guy used this to convince my BIL that his machine was riddled with malware.

    Anyway, we eventually got rid of the caller and the software. I rebuilt his machine for him. Having scanned for and not found any additional spyware, I concluded that a) the guy hadn't enough time to install anything else, or b) he was probably more interested in getting the card details

    Not long after this, after telling everyone in work about it, a colleague got the same call. He asked the guy to call back, and in the meantime he set up his call recording kit. He played dumb on the second call and asked plenty of questions, drawing the caller out for the sake of the recording. It worked pretty well in fact, and my colleague handed the recording over to RTE who used it on Crimeline.

    Like any social engineering attack, these guys play on human weaknesses such a gullibility, willingness to help, fear. They are quite well organised and I'm guessing that they use power diallers and use cheap trunks so they are paying very little for the calls on their side. By calling thousands of people, they only need to succeed with a small percentage to make if worth their while.

    I'd be very curious to hear if anyone had experienced card fraud as a result of this?
    Link here for a bit more information

    http://www.pctechnix.ie/pctechblog/2010/06/14/fake-indian-computer-repairs-claiming-to-be-from-microsoft-www-onlinepccare-com-scam/


  • Registered Users Posts: 60 ✭✭obviousTroll


    Current guise is a tech call centre advising you to go to www.onlinepccare.com.


    Someone's getting a pentest later.... :)


  • Registered Users Posts: 1 Denis Hao


    Got a call from Software Solutions quoting my name and address said they were telephoning people in Dublin, Ireland. Told him I objected to being “spoken down to” and that I was well aware of the microsoft start button and other microsoft features etc. after 30 minutes. Eventually we got to ammyy.com I refused to give him remote access (under ANY circumstances) and googled it. This site confirmed everything for me.

    PS a friend got same call 2 months ago. Kept saying he couldn’t find the start button on his keyboard and that his screen was flat, ie no buttons on it! For some reason the caller hung up on him!!!


  • Registered Users, Registered Users 2 Posts: 391 ✭✭Tommy Lagahan


    This scam is still running, very same crap, was going along with it until they brought me to that remote desktop page.
    Hung up immediately.


  • Registered Users Posts: 30 chiefohara05


    Yep, the scam is still running

    I keep getting phone calls from these people who want me to go to ammyy.

    I keep them on the line as long as i can, i don't download anything, but i get them to explain everything over and over again. Just to frustrate and waste their time.

    Last time i pretended to be a one armed simpleton who kept having to put down the phone to type in the keys and deliberately misspelling everything i was asked to type.

    Today i went along with it for about 30 mins then told him the scam artist that i was a policeman and he was after ringing a policestation. He asked me if i was tracing the call, i said yes, he said where am i? I told him that he was in a gay bar. Guy got very nasty after that :)

    I use these scum as an opportunity to have fun


  • Registered Users, Registered Users 2 Posts: 37,485 ✭✭✭✭Khannie


    HAHAHA. :D Good work. :D


  • Registered Users Posts: 149 ✭✭paradisepaddy


    Must infect a VM later and have a nose at the malware.

    Something to do tonight with a beer.


    i've often wondered about this. Can you literally do anything you want on a VM machine without fear that it can escape its environment and access other files etc on the non VM machine?


  • Registered Users, Registered Users 2 Posts: 17,674 ✭✭✭✭fritzelly


    Had about 10 calls from these people in the past few weeks, numbers originating Texas, London and Egypt.
    They are persistent alright even after telling them to feck off.


  • Closed Accounts Posts: 18,966 ✭✭✭✭syklops


    i've often wondered about this. Can you literally do anything you want on a VM machine without fear that it can escape its environment and access other files etc on the non VM machine?

    Yes and no. While there are advanced anti-VM techniques out there, the chances of this particular piece of malware employing them is unlikely. In fact a lot of malware simply tries to detect if it is running on a VM and kills/exits itself if it does detect a VM because VMs are primarily used for disassembling and analysing malware.

    I run Linux natively, and then run Windows inside a VM, so even if my VM software somehow gets taken over, it is running as an unprivileged user and so can't change very much on my machine.


  • Advertisement
Advertisement