Ultraviewer installed

Question

I received a pop up on my laptop with a buzzing sound that I was hacked, with a number 1-844-532-8378, was told they were microsoft support and instructed me to install Ultraviewer, am i compromised?

Answer 1

Hi,

That’s a fake virus alert from tech support scammers. Do not call the number, as Microsoft will never display alerts like this or ask you to install a software. If the message is preventing you from using your screen, you can try the following:

• Press Ctrl+Shift+Del then select Task Manager
• If the Task Manager opens, right-click on your browser and End Task it
• Open Windows Security and run a full scan
• If you can navigate your screen, open Edge (if it is your default browser)
• Go to the browser Settings > Privacy, search, and services > Site permissions > All permissions > Notifications
• Remove any websites under the Allowed section
• Uninstall any suspicious apps

For more information, please refer to this article and follow the recommended steps, including preventive measures to help avoid this issue in the future.

https://support.microsoft.com/windows/2ebf91bd-f94c-2a8a-e541-f5c800d18435

Answer 2

This is a classic tech support scam. Genuine Microsoft error messages never include a phone number to call, and Microsoft does not cold call or instruct installation of remote-access tools like Ultraviewer from a pop-up.

Because Ultraviewer was installed at the scammer’s direction, the device and data must be treated as potentially compromised. Take these steps:

1. Disconnect and remove what was installed
   • Disconnect the PC from the internet (unplug network cable or turn off Wi‑Fi).
   • Uninstall Ultraviewer and any other software the scammer asked to install. See Repair or remove programs in Windows in the article “Protect yourself from tech support scams” for detailed steps.
2. If remote access was granted
   • If the scammer controlled the PC, consider a full reset of Windows. See Recovery options in Windows in the same article. This is strongly recommended if pop‑ups or suspicious behavior continue.
3. Scan and update
   • Run a full scan with Windows Security to remove any malware.
   • Install all available Windows Updates (Settings > Update & Security > Windows Update) to ensure the system is fully patched.
4. Protect accounts and finances
   • Change passwords for important accounts (Microsoft account, email, banking, social media) from a known‑clean device.
   • If any payment or card details were given, contact the card provider, explain it was a tech support scam, and follow their guidance (they may cancel and reissue the card and reverse charges).
5. Report the scam
   • Report the incident to Microsoft using the technical support scam form linked from “Avoid and report Microsoft technical support scams”.
6. Future prevention
   • Never call phone numbers shown in pop‑up warnings; Microsoft error messages do not include phone numbers.
   • If a browser is “locked” with a loud warning page, close it with Ctrl+Alt+Del → Task Manager → end the browser process, or restart the PC. Do not call the number or follow instructions from the pop‑up.

---

References:

• Protect yourself from tech support scams
• Avoid and report Microsoft technical support scams
• Protect yourself from online scams and attacks
• Microsoft Defender Scam or Do I have a virus on my computer - Microsoft Q&A
• Windows defender scam - Microsoft Q&A
• possible virus, computer locked - Microsoft Q&A