Thank you for calling microsoft my name is ....... how can i help you today?
-what were you doing on the computer when you got this alert?
-Is it your personal computer or its a work computer?
-do you see any error code on this alert? Do You see something which says trojan spyware alert written ?
-what was the last thing that you clicked on the computer ??
-ok hold the line for minute let me go ahead and check this up for you
( place on hold FOR -30 SECONDS )
-ok sir /mam i have checked everything for you and its seems like its an breach on your network , its a Trojan spyware alert ,these kind of alerts means somebody is trying to get into your network and your devices without your permission or without knowlegde,which means its attempt of hacking which has taken place.
-Also as its seems that the hacking has taken place with in past 48 hrs, so has someone used your computer with in past 48 hrs except you?
-are you the only user of this computer?
-also had someone used your wifi? is it protected wifi?does it have a password?
-ok sir/mam as i can see here with the help of your network, the hackers continously trying to attack on your identity and devices so now what i am gonna do is, i am gonna guide you with some steps to install certain microsoft temprory security then will check what all data was getting hacked and what is required to be done and all the services provided by microsoft are free of cost ,so you dont have to worry about anything.
1)-we are going to start now ,please follow my words ( ACCESS)
*i want you to look at the botton left corner of your keyboard ,do you see the letter 'Z' bellow the letter Z there is a key which is a window key with 4 squares , or flags on it ,,,now press the windows keys and hold it dont release it keep holding ,,now with your another finger press the letter 'R'(roger) at the same time and then release them together ,,,,
* now on the bottom left corner of your screen you will see a small RUN box ,,on that run box there is long typing bar i am going to guide you with some letters you need to type in there (www.ultraviewer.net) now click on ok or press enter
*now you will see a screen coming up which says ultraviewer which is blue in colour , now on your screen you will see green colour icon which says download ..you need to click on it - now it must be getting downloaded ,,once it has been downloaded click on open file
* now you will see a box you need to click on YES the NEXT -NEXT-NEXT- and INSTALL and the FINISH
-Now you will se a box which has an ID and a password -ok so this is your microsoft account id and password --write it down somewhere and then give it to me so that i can connect you to microsoft security ((TAKE ACCESS)) now your device is connected to microsoft security ,,till the time your device is connected microsoft security you are completely safe ,,now whatever i will ask you to do related to security and network research will be done this computer ,,please do not use any other electronic device apart from the one which is protected by us .
2)-Now we are going to run few scans on you device for that again press and hold the windows key and letter 'R' you will see a small run box on that run box type CMD and press enter
*you will see a black screen --on that black screen do you microsoft corporation written--(yes)now where you see the curser blinking you need to start typing ((netstat -a)
* you will se 4 coloums ( proto-local address-foreign address-state)
*lets start with proto ,,what do you see below proto(TCP) ok TCP is your network provider that means all the electronic devices which are present at your place are connceted to tcp and these hackers have the access to it
*now what do you see local address(0.0.0.0:135) ok so the first number that you see below local address can you please write it down ..that is your IP Address Ip measn internet protocol ,,this is how you are known over the internet and this is how you are verified as an american citizen
and these hackers they got your IP Address that means its also a case if identity theft ,,so i am going to register it under identiy theft.
ok sir/mam i have registered you case under identity theft i will you a registered case id number 78234363287
*now what does it say below foreign address --read out the first one for me --ok thankyou ,,let me go ahead and check from where this address belongs to ---------(30 seconds hold) ok this foreign address belongs to CHINA that means these are chinese hackers.
*now what does it say below state ( listening) as it says listening that means there are chances that while we are talking on phone the hackers might be lsitening to our conversation so its better that i will call you from a secured line (call from eyebeam or textnow )
First scan NETSTAT
3)-*once connected from textnow ----- now you are connected to microsoft secured line -this call will recorded and monitored for security purpose..dont call anybody or answer anycall ,,if anybody is trying to reach you let me know first,, now lets run the second scan
*Second scan NETSTAT -SP TCP in this scan we will come to know the number of hackers
now do you see something which says Failed connections attempts () that means these are the number of times these hackers tried to hack your device
*now where it says current connection that means --those are the number of hackers which are currently connected to your network and device --
4)- now lets run the last scan in this scan we will come to know what all data has been stollen
cd..
cd..
dir/s press enter
*while the scan is running please answer a few questions but only in yes or no
--Alright ....do you use any device in your home to go on fb
--online shopping?
--playing games online?
--paid bills online?
--watching movies on netflix,youtube etc.
--online banking?
Alright thankyou so much for the information now i am going to check everything for you.
( place call on hold for 1 minute )
*Copy paste
ILLEGAL VISIT MADE TO www.pornhub.net AT 4:30 AM
CHILD PORNOGRAPHY DOWNLOADED
CREDIT AND DEBIT CARDS ARE USED FOR SOME ILLEGAL PURCHASES STARTING WITH THE DIGIT 4***, 5***, 3***, 6***
FINANCIAL INFORMATION COMPROMISED
PHONE LINES ARE HACKED
TROJAN SPYWARE DETECTED ON THE NETWORK
*Alright sir/mam as i can see here its seems like there have been illegal visit made using your identity to go on the website having the address www.pornhub.net at 4:40am early morning today, so was it you ? who visited this website? (cx says no ) are you sure about it?
*As i can see here its paid pornography subscription so it is mandatory to put in the financial information to log in there. so could it be any of your family memeber who might have your financial data?
*alright sir/mam if its not you that does confirm this is the attempt of hacking and hackers attack on your two things first is your identity and second your financial data so thats our reccomendetion if you can check your two things only on this protected computer which is protected uder the microsoft securities check the two things first is your email and second is your online banking?
*now first check your email and if you find any email with no subject or which seems like fishy to you let us know about it?
*( cx check his or her email ) take photos
*now i want to you check your online banking as well and if you see any transaction even of 1$ or few cents do let us know about us will go ahead and let you connect with your bank and let them know about this case.
( cx check his or her bank account take the screen shot ) (take photo)
*alright sir/mam so you checked you account and you didn't find any suspicious charge right?
ok but still according to us your data is under threat so thats our reccomendetion if you check the same thing with your bank as well but make sure while you checking with your bank your on the secure line because as your phone lines are not secured so hackers may listen your conversation and if they get to know that your talking with your bank regarding this they will get access in account right away amd as your phone lines are hacked so we can not allow you to call anybody by yourself ..so microsoft will conncet you to your bank ,,once we connect you to them we will be automatically discconnected from here. once you are done talking to your bank ask them to connect you back to me
*please write down the points you need to inform the bank
-my computer was hacked
-my phone lines were hacked
-i was talking to janett ID-MSC837 from microsoft
-there was child pornography downloaded
-monitor my account for 48 hours
( as teh cx tollfree no of the bank and bank name )
Alright let me go ahead and connect you with your bank now but while i am connected you with your bank i'll be disconnected from the secure line automatically so if you allow me i'll go ahead and connect with you computer so that if in the meanwhile you need any help from my hand you chat with with me on the computer.
( tell the cx press teh windows key for 10 seconds or open notepad and type : Connect to Shawn Walker at Microsoft Corp. )
( then let the cx you connected with him/her )
( Give your name or emp id on teh cx's computer )
Alright now i am gonna go ahead and connect you with your bank.