Share via

CLSID Phone Scam?

Anonymous
2019-01-31T19:12:14+00:00

I got a call today  and believe the individual was trying to hack/scam my government/company/personal computer (don’t know which one).  He (sounded form middle east, India maybe).

You all have way more knowledge and contacts of/to determine what he was trying to do.  Here is the data and what he wanted:

Called from +152-139-0271 and +052-139-0271.  Verified scammer numbers.

Presume he wanted me to type at command prompt (of course didn’t):

888DCA60’FC0A’11CF11CF’8F0F’00C04FD7D062

Reason I suspect “command prompt” is he requested I “run” cmd.

Does anyone know what this prompt code would do?

Thought it might be a ransomware or some other type of virus.  More of a reporting than worried.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. DaveM121 871.3K Reputation points Independent Advisor
    2019-01-31T19:40:24+00:00

    Hi JSEftl

    Yes this was a total scam, you could be typing that into Command Prompt all day long and it would do nothing.

    Microsoft will never cold call you, the only way to make contact with Microsoft is for you to initiate the call

    Since they were not inside your PC, you have nothing to worry about, no need to check for a non-existent virus, just hang up on them, if they ever call again . . .

    20+ people found this answer helpful.
    0 comments

6 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2019-02-01T01:03:04+00:00

    UPDATE - 

    Yes, this was a scammers attempt at me - FAILED LOL.

    The script was an attempt to drive me to a .exe or .utl probably a ransomware or something.  Once again - FAILED

    Hope this warns a least some one.  Take care and have safe experiences.

    2 people found this answer helpful.
    0 comments
  2. bhringer-9380 4,350 Reputation points Volunteer Moderator
    2019-01-31T23:37:00+00:00

    Here's a video about similar scam from over four years ago>

    CLSID Scam Phone Call Trolling

    https://www.youtube.com/watch?v=bgVOfQU5aWM

    Does it seem familiar, do they use the same "scripted" dialogue? Just curious.

    Here's a couple other related links to help explan signifigance of CLSID:

    https://superuser.com/questions/453386/what-is-the-purpose-of-the-zfsendtotarget-extension

    https://www.bleepingcomputer.com/forums/t/616490/zfsendtotargetclsid-888dca60-fc0a-11cf-8f0f-00c04fd7d062/

    Hope this helps.

    ~bhringer

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2019-01-31T20:42:55+00:00

    I thought as much.  Was really wondering and warning about the promt code.

    0 comments
  4. Anonymous
    2019-01-31T19:14:05+00:00

    Hi JSEftl

    It is likely a scam.

    2018 has turned out to be a year when fake scare sites have appeared all over the Internet with fake ads pretending to Microsoft support and insisting you call them. You need to watch out for these sites. They look like a genuine Microsoft website but they are not.

    Warning: There are "Tech Support Scams" pretending to be Windows 10 Support and Activation Technologies. Please be vigilant. Microsoft never calls or emails users to inform them their license is expiring, accounts will be closed or they need access to sensitive information such as passwords or banking information. Neither should you get an email. Learn more in the following article:

    PSA: Beware of Windows 10 Activation Tech Support Scams

    http://www.groovypost.com/news/beware-of-window...

    Report it:

    https://www.microsoft.com/reportascam/

    Tech support scams - Windows Defender Security ... - Microsoft

    https://www.microsoft.com/en-us/wdsi/threats/su...

    Protect yourself from tech support scams - Microsoft Support

    https://support.microsoft.com/en-us/help/401340...

    If you believe sensitive information such as bank passwords might have been compromised, go to another computer and change it immediately. Contact your bank to let them know of any suspicious activities.

    Change your other passwords for services such as emails and other important web sites you visit.

    Have a notepad near by so you can write down the new passwords.

    Enable two factor authentication on your Microsoft Account:

    How To Enable Microsoft Two Factor Authentication - groovyPost

    https://www.groovypost.com/howto/enable-microso...

    Let friends and family know on social media, they should not accept any request begging for money or disclose sensitive information, since someone might be pretending to be you.

    0 comments