Share via

Suspicious Activity Scam Message Reappears

Anonymous
2015-10-23T22:15:02+00:00

Split from this thread.

Yesterday, and again today, while in Google Chrome incognito, a new window opens that locks me out of Chrome that reads: "The page at 1723394471.rsc.cdn77.org says: Your system has detected possible Suspicious Activity. Please call toll-free number for a Microsoft Certified Technician to help resolve ... For your safety, please do not open internet browser to avoid data corruption to the registry of your operating system." The phone number is: 888-992-0126. The message goes on to read: "Please do not shut down or restart the computer, doing that may lead to data loss and possible failure of the operating system and potential non bootable situation". The message continues and repeats.

I have Windows 7 Service Pack 1, 64 bit.  I have IE11 and Google Chrome.  I have AV - Webroot.

The new window has happened only while I am using Chrome.  I have not encountered the new window while using IE; only when I am using Google Chrome incognito.

I can close all applications I have open by x'ing out of them except for Google Chrome.  I must use Task Manager to end Chrome.  I then shut down my pc.  And then on starting pc, I run Webroot which reports no detections found.

I have not called the number in the new window.  I have not clicked on links; I have not downloaded any new s/w.

How do I stop this behavior - e.g. a new window opening with the message?  The message appears while I am in a pch.com site.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

31 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2015-10-17T13:08:39+00:00

    Your Zemana software isn't completely removing the threats, perhaps because its a trial

    This is free https://www.malwarebytes.org/antimalware/

    20+ people found this answer helpful.
    0 comments
  2. Anonymous
    2016-04-27T22:37:25+00:00

    Yes, that's exactly the popup Ive been getting lately. Just from about the past 2 weeks. I never had or saw it before April 2016. Though iy seems its been around longer. Im of the opinion that its not actually an infection, but comes from the website itself. I could be wrong, but on 3 different PCs it never appears except if I go to one site in particular.

    If someone thinks it IS an infection, by having it popup while on an Absolutely safe site, Id like to know. I get rid of it by using Resource Moniter, and right click, and End Process. Most if not all Ive seen use Task Manager. I know it does the same, but I vastly prefer Resource Moniter. Mainly cos I can set it on Overview and see what my PC is doing, Incl Disc Activity. Whats being written and read from the HardDrive. Task Manager cant do that I don't think. But still, most seem to prefer TM over RM.

    OK, If anyone has any new info on this damn popup, and if it IS an infection, and not just coming from particular websites, Please let me know? All 3 PCs seem clean as far as I know. Im far from a Techxpert, but Im observant and can usually do all my own maintenance fine.

    This screensnip, is how I like my Resource Moniter setup. Its always open, parked in the taskbar, and I can End Process, soon as I see that damn popup.

    10+ people found this answer helpful.
    0 comments
  3. Anonymous
    2015-10-17T12:13:09+00:00

    Neither the Microsoft Safety Scanner nor Microsoft Security Essentials detect these objects in my registry as threats. 

    I have the Zemana software on my pc due to a recent pc infection, adware / malware, and other PUA and followed the step-by-step instructions to: Remove Tech Support Scam pop-up (Call For Support Scam) which included downloading and executing the Zemana software.  I opted for Zemana's free trial which will expire in 4 days and I do not intend to purchase an activation key.  I had Microsoft Security Essentials running on my pc prior to the infection and in addition to MSE failing to detect these objects in my registry as threats it also failed to detect the infection I was repairing.

    As long as I let Zemana take action and delete the items in the registry, my internet browser works great and I no longer experience anomalous pc behavior similar to my recent pc infection.  However, the items re-appear in the registry after I shut-down or restart my pc and if I opt out of Zemana repairing the detected threats, my internet browser begins to behave poorly.  When I opt out of Zemana repairs, and shortly afterwards my internet browser begins to behave poorly, I remove the objects with regedit and the internet browser seems to avoid its anomalous behavior.

    My problems are:

         1) Why are/were the Zemana repairs reverted? 

         2) I lack expertise to determine if there is risk to my pc going forward?

    Since the 1 object refers to a website and implies an "update", I'm wondering if the contents of the "update" can be changed so that the "update" could re-infect my PC?

    Thanks much for any assistance answering my questions.

    10 people found this answer helpful.
    0 comments
  4. Anonymous
    2015-10-05T12:00:40+00:00

    It is a Scam, do not ever try to call this number.

    Download free version of Malwarebytesscan your computer for any malware.

    9 people found this answer helpful.
    0 comments
  5. Anonymous
    2015-10-05T02:59:17+00:00

    Hi Leslie,

    Thank you for posting your query on Microsoft Community.

    I understand that you are facing issues with Windows 10. Sorry for the inconvenience caused to you.

    We will assist you.

    This issue could occur if there is change in the browser settings.

    In order to help you better, please provide the information:

    Is this issue specific to Google Chrome browser?

    Refer to the below steps and check if it helps.

    Step 1: Please try to download and scan the Computer with Microsoft Safety Scanner. Check if it helps.

    http://www.microsoft.com/security/scanner/en-us/default.aspx

    Microsoft Safety Scanner:

    Note: Any data files that are infected may only be cleaned by deleting the file entirely, which means there is a potential for data loss.

    Step 2: But you try uninstalling and reinstalling Chrome browser.

    If you still facing issues with Chrome browser, then I suggest you to contact Google Chrome support for further assistance.

    https://support.google.com/chrome/?hl=en

    Reply to us with the information, so that we can assist you better.

    Get back to us if you need any further assistance on Windows related issues and we will be glad to help.

    9 people found this answer helpful.
    0 comments