1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to get rid of "Your computer is permanently blocked. Call for support at 1-855-841-4777"

Discussion in 'Bits & Bytes' started by Allene, Jan 22, 2018.

  1. Allene

    Allene Registered User

    Yes, I know this is a scammer tech support racket. My husband started getting that message about an hour ago. He uses Win 10 and Malwarebytes Anti-Virus Premium, which does a scan every morning. All was okay then. I ran another scan after the aforementioned problem popped up. The report came back negative for problems. While I know what these people are trying to do, I don't know if they are malware or whatever, so I don't know how to get rid of this problem. There's a list of fixes that comes up when I do a search, but Malwarebytes blocks them, so they are probably fake sites. Meanwhile, I shut down the browser when that popup comes on. It's so irritating. Anybody know how to get rid of it? Thanks!
  2. Arc

    Arc Full Member

    I'm not confident that I have the right answer, but biker will for sure, and perhaps some others too.

    Are you getting an actual popup or an email?

    You are doing all the right things to not get infected. It's too bad that more users are not as common sense security cautious as you are.

    Good luck on a swift resolution.
  3. Allene

    Allene Registered User

    Thanks, Arc. I can wait until Biker gets off work. It's a popup that locks you up by replacing what you were working on with their screen. Anybody dumb enough to call will probably get someone in India claiming to work for Microsoft. That's when they get into trouble big time!
  4. ShinyTop

    ShinyTop I know what is right or wrong!

    It has been a couple of years since I ran into some of this ransom ware. What I did at that time worked. I booted the machine into recovery mode and restored a previous save point, one from before the problem started. Have not seen it on a Win10 machine.
  5. Allene

    Allene Registered User

    Thanks, Shiny. I will keep that in mind for tomorrow. Ed is working on the machine now and says he just shuts them down whenever they do that.
  6. Arc

    Arc Full Member

    About 15 years ago I worked for a very large organization. Every employee had a computer workstation as part of the network and the company gave carte blanche and with blessing unlimited access to go anywhere anytime on the Internet as long as you still got your work or assignments done.

    There was just one exception. Porn! It was strictly forbidden with harsh consequences threatened if one was caught doing it. Well, one time during some downtime at work I wanted to change my wallpaper. I wanted to get something that was cool and featured one of the big cats, (cheetah, lion, tiger, etc.) So into the search engine, I CLEARLY and CORRECTLY typed "Big Cat Computer Wallpaper." I hit enter. Shazam! Up popped multiple popups with pictures related not to big cats but to women's' genitalia as in big C. Nothing I could do would correct it. I could feel the whole section staring at me and my computer screen. In my mind, the monitor grew from its true size of 17 inch to 50 inch. And it was getting larger and brighter with each passing second.

    I immediately went and got my superior and brought him to my computer to self-report it and then disconnected from the network and cleaned up the computer.

    It is times like above that illustrate why you should always conduct yourself with integrity so when the shit hits the fan and it is not your fault and you tell the truth that it is not your fault you will be believed.
    Susan Addams and Allene like this.
  7. Biker

    Biker Administrator Staff Member

    What browser are you using Allene?
  8. Allene

    Allene Registered User

    It's Ed's computer. He's on Chrome.
  9. Allene

    Allene Registered User

    Amen to that. You were lucky that you were on good terms with your boss to begin with.

  10. Biker

    Biker Administrator Staff Member

    OK. Lemme dig and I'll post the cleaning instructions in a bit.
  11. Biker

    Biker Administrator Staff Member

    1. On your Windows computer, visit the Chrome Cleanup Tool website.
    2. Click Download now.
    3. Read the terms of service, and click Accept and Download.
    4. When the file is downloaded, you'll see it at the bottom. Click the filename (chrome_cleanup_tool.exe).
    5. Windows will ask if you want to run the file. Click Run.
    6. The Chrome Cleanup Tool will scan your computer. You'll see a list of any malicious software found.
    7. Click Remove suspicious programs.
    8. Chrome will open a new tab, and ask you to reset your settings. Click Reset.

    To turn extensions you trust back on, at the top right, click More [​IMG] [​IMG] More Tools [​IMG] Extensions. Check the box next to "Enabled."
    Allene likes this.
  12. Arc

    Arc Full Member

    Why do you think she got a "your OK" from her Malwarebytes scan?
    Allene likes this.
  13. Allene

    Allene Registered User

    Thanks a bunch, Tom. I will do that in the morning. I have printed it and will keep it handy.

    Good question. I was wondering about that, too, because I have a checkmark next to Ransomeware on the list of things to scan.
  14. Biker

    Biker Administrator Staff Member

    Because it wasn't ransomware. It's just a popup scam designed to scare users into calling the number and parting with cash for a supposed fix.

    If it was truly ransomware, the entire PC would have been encrypted with instructions on where to send the payment to get a release key to get your files back.
  15. Allene

    Allene Registered User

    I see! I had no idea what to call this scam, other than a bunch of criminals until Shiny mentioned ransomwear. The real McCoy sounds awful!
  16. MemphisMark

    MemphisMark Old School Conservative

    One of my blogs a couple years ago was attacked by a "script kiddie" (someone who buys code and follows instructions to use it rather than write it themselves) that inserted keywords and links in my website that increased the search engine hits and ranking for his website. The sucky thing was the provider was intentionally using an unsupported version of PHP on the shared hosting (when I complained, a manager offered to sell me a Virtual Private Server that did have the current version of PHP).

    Some variation of this probably happened to Ed. He visited a website that had been attacked and infected without the owner's knowledge, which then the infected website planted code on his machine to perform the pop-ups.

    What makes it worse, if the website is using shared hosting, another website in that server could have been infected and spread it to the other websites on that server.
  17. Allene

    Allene Registered User

    Arrgh! Thanks for the informatiion, Mark. There are a lot of baddies out there! Whatever! Everything is back to normal now.
  18. Arc

    Arc Full Member

    In the spirit of your post topic: I use a variety of popup blockers and just whitelist the handful of sites that I deem are worthy of being whitelisted.

    Absolutely love popup or ad blockers.
    Allene likes this.
  19. dsl987

    dsl987 Member

    Arc - I remember back in the early days of the Interwebs when people would type in Whitehouse.com thinking it would take them to a website about the White House :)
    Allene likes this.
  20. Susan Addams

    Susan Addams Unregistered User

    Arc, your story had me laughing in stitches! LOLOL! :)

    I once was on my way out when I passed a glassed window lab door and saw a fellow employee doing porn right there 20 feet from the door, his back to the door! That was just too crazy to be true but sure as you know what he was watching porn! I could clearly see it from my vantage, as could anybody including a supervisor or management.

    I mind my own business. I shrugged my shoulders and chuckled as I walked to my car and drove home. Suzy is no tattle tale. Not my job to report other employees. That's a management problem and I don't do management.

Share This Page