mom just called me at the shop. i gotta go by tonight. she was on farcebook, and got a pop up window that was talking to her telling her she had to call an 855 number for removal instructions. it kept going when she closed firefox. i told her don't call, and to redx outta that pop up. she did, and so far, she seems ok.

 

 wtf did she get?  this is all the info i've gotten from her so far, and i won't be able to do much more till i get there tonight.

 thanks guys

 

That sucks

standard redirect page which causes the unwashed masses to panic.

Down load the free malwarebytes version, update and run it. It should cleanup anything malicious.

www.malwarebytes.org

It's just a bogus site that's designed to scare people into calling the number. We had a stupid user who actually called in and they wanted to remote into her computer to fix the issue, etc. You know the rest. Sometimes the site cannot be closed with the X on the browser window as that X is actually a link to something else, which brings up more malware. You typically have to kill the browser through the task manager.

I can't believe someone actually called in

I had that same issue had to purchase malware bytes to get rid of it.. if I would go to duramax diesel site they would pop up..

Youtube "microsoft support scammer". There are plenty of hilarious videos of people who know are being scammed pranking the "support" poeple...

thanks guys. mom used to be pretty computer savvy. back in the 80's. now? not so much. you're right. she was panicking when she called me. she said she was on farcebook, but claims she didn't click anything unusual. she said it just popped up. i'm heading over now, and will update and run both malewarebytes and microsoft security, along with superantispyware. they're all on her machine, but she doesn't run them.

 

 funny thing was i clicked into theblaze.com from a link in one of the fb 2a groups, and got some alert about doofy.goofy.345hx88something or other. it popped that shit, and deleted it right away.

It's Indian scammers. Sometimes, if work is slow and I'm, bored, I'll call them to fuck with em.

it looked like mies caught ransom:js/brolo.c last month on her machine. the 16th according to it. it was quarentined. i dunno if that could've done what i'd explained or not. either way, it's been removed. along with the 2100+ tracking cookies i found with sas.

 

 thanks guys!