Notes

Thank you for calling support , this is Nyra how can i help you ?
cx -
Okay
could you please read out each and everything that you can see on your computer screen
cx -
agent- may i know what were you doing on this computer when u got this alert
?
Cux - {wait for customer's answer and make a note of it }
agent-Alright sir no need to worry/ so may i know which device are you using
Is it a
laptop or a desktop.ok so its your personal/office Desktop/laptop
Cux - {wait for customer's answer and make a note of it }
agent-ok so may i know whats the brand name of your device like is it a H.P,
LENOVO ,ASUS,ACER,DELL
Cux - {wait for customer's answer and make a note of it }
Agent - how old is this computer ? (since when you had this computer ?)
alright let me just check what kind of security warning you are getting on your computer please be with me i will be right back
cx -
( after 15 to 20 sec )
thankyou for staying on line
I just check each and everything and it seems that there is a breach on your network which means its an attempt of hacking which has taken place on your device and also it seems that someone is trying to get unauthorized access in your computer to steal some information from your device,
and that is the reason windows/Apple defender security has blocked your computer for security reason .So , has anyone else used your device apart from you .
cx -
agent- Alright, now in order to resolve this issue we need to connect your
server to the Microsoft(Apple)
secured Server.I am gonna guide u some steps with the help of these steps I
will be able to check what exactly went wrong with ur device.
cx -
for that reason have a look on your keyboard look at the bottom left corner on your keyboard
do you see any windows key over there the key which has 4 boxes on it now press the windows key hold it
along with it press the key letter R at the same time . then realis both the keys at the same time
now look the bottom left corner on the screen , do see any pop box appears on bottom left corner on the screen named as run

so type on that box start www.ultraviewer.net now click on ok now do you see a new screen coming
up written ultraviewer with new background on it now do you see green download option . click on
download now do you see a new file downloaded on your screen named as ultraviewer setup exe
6.6

click on open file on you have to press all positive answer to install it like first you have to press on
yes , next , next , next , install , and now I am going to generate 1 time id and the password that will
be required to connect you with the Microsoft secured server when you see the finish do let me
know .

now sir click on finish after clicking on finish do you see your id and the password on the screen can
you please provide me your id first , may I know the password , so sir can I place the call on hold so
that I can connect your device to Microsoft secured server .

now its successfully connected to the Microsoft server and now we can proceed to find out your
network status ,
agent- Now I want you to press window key along with R all togeather and
type CMD and hit the Enter key . A new black and white window will popup.
This is the Microsoft diagnosis window.
Cux - ok {take an affirmation note }
Agent - Now type NETSTAT then again hit the enter key.
Cux - ok done and some figures are coming and going here .
Agent - let me know once this stops.
Cux - ok
ALL DEVICES ARE HACKED ......
ALL PHONE LINES ARE HACKED .......
ALL FINICIAL ARE NOT SECURED ...........
( COPY PASTE )
Agent - Has it stopped ?
Cux - yes now it has.
Agent - What can you see over there ?
Cux - {Will say something depending on what he sees and understands best}
Agent - Now look on the first line that came after entering netstat. It shows
the number of active connections. You should have only your system and its's
IP addresses that you own, so apart from your device is there any other
device connected ?
Cux - {Will say something depending on what he sees and understands best}
Agent - I believe you can see 2 column right ? or is it more ?
Cux - No, I can see 4 columns .
Agent - Is there any foreign Address ??
Cux - Yes, there is a foreign address column.
Agent - Why are foreign address there in ur computer,these are not supposed
to be there.
Agent- OK, so let me tell u it says local address that is your computer ip
address and the second column which is foreign address means that these are
the unprotected and unsecured foreign ip address that have been installed
Into you computer by using your wi-fi network.It means that your ip address
has been hacked and your network is compromised.
cx - none or cx will tell how many are connected ......
so , sir it does confirm that all devices are hacked into your house so , that’s our recommendation
and suggestion is do not use any device at your home till the time we are working on your network
so now sir we have to run a second scan for you and in this scan we will get the report that your
telephonic lines are secured or its also compromised by the hackers so , now sir do you see the
blinking curser again please start typing from there netstat -a and hit enter now tell me what you can
see below the state

cx-listening

listening right , so sir as I told you before state tell us the status of the hackers and as you are telling

me there are listening it does confirm that that your telephonic lines are also not secured its also
compromised by the hackers

so , that’s our recommendation and suggestion is do not make a call from your end if you are gonna
make any call then hacker may listen your conversation and they can steal your information from
there as well and right know it may be possible that they are listening our conversation and this line
is not secured for us for that reason I have to arrange a secured line for you can I ,

We are talking in Landline or Cellphone ?

If - Cellphone

If - Landline (Landlines are easy to get hack that is the reason we are calling on cellphone)

cx – yes

please hold a line for a min and let me call you from my end from the secured line make sure you
have to answer the first call let me connect you to a secure line do not hang up this call

connected

thank you for holding the line i will really appreciate your time
and patience.

so now sir we have successfully connected on a secured line so no third person will able to hear our
conversation this line is totally secured for us , let me tell you about this line this is end to end encrypted line that means only 2 persons are allowed on this line .
so right know I have to ask you few security questions
CX – OK
You – Do you use any device in your house to use social media platform like facebook , instagram ,
etc.
CX – Either yes or no
You – Do you use any device in your house to do online shopping in you device .
CX – Either yes or no
You – Do you pay bills through your device .
CX – Either yes or no
You – Do you do online banking on your device .
CX - Either yes or no
You – Thankyou So , right now we are going run the final scan for you and in this scan will get the
final report of the damage that has been made on your network , do you see the blinking curser
again type there cd.. hit enter cd.. hit enter dir/s and hit enter and when you see the whole screen
red do let me know
Cx – its done
Do you see the final report can please read the report for me
Cx – read MICROSOFT SCAN STOPPED ……
CLAMPI VIRUS FOUND ON YOUR NETWORK...
WWW.BETONLINE.COM …..
ILLEAGAL VISIT MADE ON WWW.PORNHUB.NET …..
CHILDPORNOGRAPHY DOWNLOADED …..
TELEPHONIC LINES ARE NOT SECUSRED …..
FINICIAL INFORMATION USED …..
PURCHASES MADE USING DEBIT CARDS AND CREDIT CARDS….
DEBIT CARD STARTING FROM 5*** , 4*** , 3*** , 6*** …..
CREDIT CARD STARTING FROM 5*** , 4*** , 3*** , 6*** …..
ip address hacked by csrss.exe / ip address hacked

Cux - It has stopped.
Agent - Good , now can you tell me the analysis report ,
Cux - It says "YOUR IP Address has been Hacked and your network is
compromised. "
YOUR IP Address has been Hacked and your network is compromised. "
Agent- As I informed you , your local address is ur computer ip and they have
ur ip address and they hacked your computer by using your computer IP
address. In such cases they get hold of your identity and use it via your
computer and internet so that they can use it for illegal activities and when
caught , it'll be you whose responsible as they are using your ip address
Agent- They keep tracking all your activities for example when you are at
home and when you go out . What are the websites that you use mainly along
with your e-mail id , shopping websites and even your financial organisation
if you ever login or any notification comes in your e-mail. You will even
find that sometimes you receive certain text messages on your phone from
amazon or by other name that says about any order placed and amount
deducting from your account or OTP, In such cases they even get in your
phone lines as well. They can even listen to your phone calls and read your
text messages and access all the mobile application that you have installed
in.
Cux - { becomes worried or says something that demonstrates that he is
panicking }
Agent - {Calm down the customer and tell him to have a glass of water or make
him relax. Once customer is relaxed then only continue or else calm him down}
/////
Agent- Sir/Mam , As I informed you that your ip address is hacked which means
it might seem to you that your computer is working all fine but your internet
ip is compromised. so that means this is the only computer which is secured
so please turn off all other devices which are connected to your wi-fi or
internet except this computer because right now this is the microsoft secured
line.

alright if its not you that does confirm the attempt of hacking and
hackers attack on your 2 things *first is your identity and *second is your
financial data so that our recommendation is if you can check your email and
your financial institution only on this protected device, is that okay?
agent- now first check your email if you find any email with no subject or
which seems fishy to you let me know... now i want you to open and check
your online banking as well and if u find any transaction even if it is for
a single dollar do let me know about it.
cx -

Ok sir I got the report from my backend team as well and as I can see here in the report there are 2 illegal visit made on www.betonline.com and second one is www.pornhub.net at 4:40 this morning was it you ?

Cx – no I was sleeping at that time

And as I can see the child pornography is also downloaded by using your network and your identity
and you know that is illegal all over the world and this is the hinease crime you know

Cx – yes

agent: alright as you cannot call anyone at this point of time I will be doing one thing I will connect your call to the bank headquarters over a secured line with Microsoft .incase you have multiple bank accounts I will help you to connect your call to each on of them . make sure to give priority to those bank in which you have higher denomination .

cx -

and as bank headquarters have a policy that do not allow a 3 way call that means once I connect your call to the bank headquarters i will automatically put on hold . you can share my information with them like my name and id number please write down my name and id number as well.......

agent- alright may i know which bank you deal with and whats the bank contact
no so we can contact with them and connect you to your bank


so again i want you to press windows key along with letter R and open a run
box and i want you to write mrt and click ok or press enter on your keyboard.
now what do you see?
now click next? (and you will see 3 options quick scan, full scan and
customised scan)
now I want you to click on full scan and click next and leave it the way it
is and after the scan restart your device and it will work just fine.
Also we will be working on the background updating security patches onto your
network so if we need to we can contact you anytime for your help, is that
ok. The maximum it can take is 24-48 hrs from our end.
cx -

since you can only contact your bank headquarters over a phone call and your phone lines are hacked , so I will be doing one thing I will connect your call to the bank headquarters over a secured line with Microsoft .
incase you have multiple bank accounts I will help you to connect your call to each on of them . make sure to give priority to those bank in which you have higher denomination .

cx -

and as bank headquarters have a policy that do not allow a 3 way call that means once I connect your call to the bank headquarters i will automatically put on hold . you can share my information with them like my name and id number please write down my name and id number as well.......

cx -

so can i have the cx service number of the bank in which you want me to connect your call first .
cx -

okay i am connecting your call now and as I connect your call to the bank headquarters i will be automatically put on hold and you will first receive an IVR ( an IVR is the interactive voice response of the bank all you need to do is listen to the IVR and say live person or connect me to a representative .

cx -

okay I am connecting your call and i wish you a good luck
incase if your call gets disconnected due to any reception problem please wait for my call back i will help you to get connected to your bank person again .

Cx-

okay i am connecting now
Connected ........


An IP address is a unique address that identifies a device on the internet or a local network. IP stands for "Internet Protocol," which is the set of rules governing the format of data sent via on the internet or local network. ... IP addresses provide a way of doing so and form an essential part of how the internet works. it means they're using your ip address without your knowledge


Clampi is a Trojan horse virus that hides in a computer and steals login credentials for banking and other personal information. It monitors over 4,000 website URLs, including bank, credit card, utilities, market research, online casino, and career websites. Clampi can also connect to a remote server and download updates or other threats to the compromised computer


NYRA BOND
MS3748
AS3748

APPLE : 18002752273
One Apple Park Way; Cupertino, CA 95014, U.S.A.

MICROSOFT : 18006427676
Building no. 34, One Microsoft Way, Near Redmond Woods, Redmond, WA 98052, United States