“Windows” scam calls continue.

These scams have been around for at least 3 years now but here is another to add to the list.

“Windows Service Center”
08000588174
windowservicecentr@gmail.com

They call up and say that your computer has reported a problem and that you have to visit:

http://mwserver.webs.com/
And then run one of their remote tools to get the problem fixed.

They claim to do the following and charge £150.

1. NEW WINDOWS LICENSE ID
2. NETWORK FIREWALL
3. ADBLOCK PLUS
4. MCAFFE WILL BE REMOVED AND NORTON WILL BE RE-INSTALLED
5. CCLEANER(CLEAN THE JUNKS,MEMORY DUMPS)
6. E-MAIL WILL BE SECURED
7. UNKNOWN IP ADDRESS BLOCKER(MICROSOFT)
8. ALUREON VIRUS WILL BE REMOVED

TOLL FREE NO:- 02033180712

ORDER ID:-

What is sad is they have a batch file which just says “Alureon Virus detected.” to scare users:

@echo off

echo.

echo.
%systemroot% cmd
color A
cd..
cd..
cd..
tree
echo.
echo.
echo.
echo.Finishing Scan ….
echo.
echo.
echo.
echo Whole System Scan Result..
echo.
echo Computer’s Licence Expired. Renewal of Licence Recommended.
echo.
echo IP Address is not Protected.
echo.
echo Email protection deactivated.
echo.
echo Suspected Hacking files detected.
echo.
echo Alureon Virus detected.
echo.
echo.
echo.
echo.
echo ^<Press any Key to EXIT ^>
goto theEnd
:do_clear
echo Scanning %1
wevtutil.exe cl %1
goto :eof
:noAdmin
echo This Scan must be Run as Administrator!
echo ^<press any key^>
:theEnd
pause>NUL

They then send you a pdf of your “subscription”.

Seems somehow related to this company who list the same 0800 phone number:
http://www.optussolution.com/contact.php

WIN PC TECHNOLOGIES PRIVATE LIMITED

83/1 DR S.C BANNERJEE RODAD, 1ST FLOOR,  SUBHAM PLAZAKOLKATA,  W.BINDIA 700010

In-turn this seems to be related to: http://webgnx.com/ who list a different contact number but the same postal address in India and have the same site content and layout.

Which then leads to another company with the same postal address: http://www.firstwebsoft.com/
Another website name with the same 0800 number and the Optus branding and the DDI / +91 caller ID number:
http://windowstech.eu/support.html

Google reports the recovery address on the gmail account they use is  j•••••••e@r•••••••••.com

Sad. Steer clear of all of these companies and sites and don’t pay them.

If they call you back they often come from caller ID is 00919674200796 (+919674200796).

Advertisements