Fake Update

Question

I have been getting a blue update screen that does not look legit. It populates the entire screen and reads: Updating your computer.....25% complete.... Please don't turn off your computer. During the message screen which lasts about 2 minutes, I can see my cursor moving around the screen as if someone else was controlling it. Occasionally, it will change to a finger icon as if it has landed on a link (but all I see is a blue screen). I searched the web for such a scam, but couldn't find anything. Any help?

Answer 1

Yes a scammer has access to your pc . The blue update is fake and scammers use that to hide your screen so victims can't see what the scammer is up to. Its sounds like you have an app installed like Anydesk, or Teamviewer

Answer 2

Good Day PaulGravitt,

My name is Carlo, I am also using Windows 10 pc and community member like you. Let us work together to sort this out.

Can you please take a screenshot or a photo of it and post it here for us to check if its a legitimate.

Also check the version of Windows is currently install in your device.

-Press Windows key + R

-Type winver and hit Enter

Takae a screenshot of the build and version of Windows installed and post it here.

I'll look forward for your response so that I can provide an accurate recommendation.

Have a wonderful day ahead and stay safe.

Sincerely,

Carlo T.

Answer 3

Press Ctrl + Shift + Esc > once Task Manager opens up, end-task any processes which look fishy and whatever browser you use. There is a ransomware which uses the same strategy to encrypt your files, but I'm not sure if you've downloaded anything malicious.

Answer 4

This happened to me. Back in January, my computer was hacked. This screen cover came up while they were working in the background! If I tried to manually turn off my computer… they would hit cancel! This of a “Dummy” screen… not legitimate… not a computer upgrade working…. ALWAYS says 25% complete! This started happening After that.., but lately A LOT! Today, I was able to find the problem. I was able to: Control, Alt, Delete and open task manager… to see what was running. I found the program or started from back in January when I was hacked!!! They were… Are… entering via remote access.

I went back to the date I was hacked in January Via my computer history and found… support.client.exe ~~ when I tried to delete it through my history, it would let me, because it said it was open and running. So the next time it came up, I hit

C, A, D and opened Task Manager and found it. Was able to End Task and delete it completely. Today, I started using a VPN… Actually a double VPN… through two private servers. I’m not having any more problems.

Client.exe is a known replication agent linked to Carbon Copy Solutions. It allows users to control multiple computers simultaneously via remote access. But the client.exe had to be on the computer as a prerequisite to work. Thankfully I found it in mine history! If you find it on your computer… get rid of it… delete it!!!

Someone asked for s as pictures of the cover screen… I hope this helps someone. They were making my life miserable. Oh! None of my virus protection detected this… and it was still on after Best Buy Geek Squad cleaned up my computer!!!!