Notes

Nyra
(20:13:51) Thanks for calling support this side NYRA how may I help you today .
What were you doing in the device when you got this alert ?
Can you read / out each and everything that you see on your computer screen .
Can I have the brand of the device you are using ?
this is a personal device or a work device ?
Alright can I just place your call on a hold so that I can check everything and provide you the details ?
HOLD........
Thanks you for staying on hold . Are you still there with me .I have checked each and everything over here and it seems like that there is a breach on your network which means its an attempt of hacking which has taken place on your device and also seems like someone is trying to get unauthorized access into your computer to steal some information for it and that is the reason windows defender security has blocked your computer for security reasons.
( Hacking - It's means that someone is trying to get into your device without your knowledge.
And also it seems that the hacking has taken place within past 48 hours so , has anyone else used your device within past 48 hours except you ?
Have you shared the wifi password to anyone ?
Cx –
But I can see here that the hackers are continuously trying to attack on your device and network and also It's means that someone is trying to get into your device without your knowledge so I will be guiding you with some simple steps to install a microsoft secured server and then i will guide you with some IT commands in order to diagnose your device , so that you can fix your device by your own .
Cx –
....Ultra Viewer...
For that reason have a look on keyboard look at the bottom left corner of your keyboard do you see any windows key over there which has small 4 boxes on it

Know press that key hold it down and along with it press the key letter R (as an Richard) make sure you have to press both the key at the same time.
now do you see a pop up box with the name of run look at the bottom left side of your screen like type the name of program folder document.
now type there www.ultraviewer.net
Now do you see a blue and a white page opened there written as ULTRAVIEWEr in block letters .
Cx –
Now in that blue box do you see a green colored box written as download
Now click on download
Now have a look on right top side of your screen do you see a ultraviewer 6.6 getting downloaded just click on that 2 times
Cx -
Open it
Now you have to press all the positive answer to install it like press on yes,next,next,next,install
When you see the install option there do let me know
Now I am going to generate a one time I'd and password that will be required to connect your device to the nearby Microsoft security centre
Once you will get the finish option let me know
Now can you provide me your I'd first than the password
Just allow me a moment so that I can connect your device to the nearby Microsoft secured server
HOLD
now you are successfully connected with Microsoft security server
tree
So that no one be able to take access your device
Now I will be guiding you with some It commands . so this would be the first scan which I will be guiding you and this will tell us how many hackers are there
For that reason have a look on your keyboard press that window key and the letter r as an richard like before you have done and do let me know do you see any pop up box with the name of run
Now type there CMD
Now do you see a new black box in your screen which says a Microsoft corporation
This is the Microsoft scanning browser where we have to run a scan
See a blinking cursor in that black box
Now type there netstat then hit enter do you see a scan is running over there when it gets completed do let me know
Cx –
Now is the scan completed or its still running
Cx –
Can you read out for me what do you see below netstat
Cx -
Now let me explain you each and everything over there
proto means its local network provider
TCP means transmission control protocol
Local address means these are the IP address of your device
Foreign address means these are the IP address of the hackers that we detect on your network
State tell us the status of the hackers now what do you see below the state
Cx -
Establish means that hackers have successfully established their network into your device they can access your personal data and information as well so may I know how many other devices are currently connected with the same Wi-Fi
And as you told me that its written as ALL DEVICES ARE HACKED.......
ALL PHONE LINES ARE HACKED......
Which confirms us that all the devices present in your home is been compromised by the hackers . and as you told me that all phone lines are hacked so , we have to run the second scan to get to know is your phone lines are secured or not .
Cx -
We have to run a second scan and in this scan we will get to know that you telephonic lines are secured or it also compromised by the hackers
Do you See a blinking curser again in that black box now type there netstat -a hit enter
Do you see a scan is running there when it's get completed let me know
Now is the scan completed or its still running
Can you read out for me what do you see below netstat
What do you see below the state
Listening right it does confirm that your telephonic lines are not secured its also compromised by the hackers . Hackers may listen your conversations and they can steal your information there as well they can monitor your activities so that's our recommendation and suggestion do not call anyone from your end . and if you are going to make a call from your end then hackers can may listen your conversations and they can steal your information . and i think that they are listening our conversation too and i am not going to continue this conversation over this line .
So may I know that we are having a conversation on a landline or on a cell phone ?
Cx –
SO right know I am calling you from a secured line of a Microsoft in your cell phone you just have to put this call on a hold and answer the call which is coming on your cell phone .
Cx -
Connected ………
Now we are successfully connected to a secured line and let me inform you that this is a end to end encrypted line which means no third party or anyone can hack this line but the one thing i can't understand that why they are listening your conservations , have you done anything ? ….
ok i can understand your situation So right know I am gonna ask you some security questions you just have to answer in yes or no
Do you Use any device at your home to do social media platform like Facebook Instagram Twitter?
Do you use your device to do online shopping?
Do You pay bills through your device?
Do you do online banking?
Thank you for the information
Now We are going to run a finals scan for you in this can we will get the final report of the damage that has been made on your network
So can I go ahead and run a final scan for you?
Blinking cursor in that black box now type there CD..(enter)
CD..(enter)DIR/S(enter)
PASTE
MICROSOFT SCAN STOPPED.........
ILLEAGAL VISIT MADE ON WWW.PORNHUB.NET .......
PERSONAL ACCOUNT ON CHILD PORNOGRAPHY ........
PERSONAL ACCOUNT ON BETONLINE.COM ........
E.MAILS ARE NOT SECURED .........
FINICIAL INFORMATION USED ..........
PURCHASES MADE USING SOME DEBIT CARD AND CREDIT CARD ..........
DEBIT CARD STARTING FROM 5 *** , 4*** , 6*** , 3***.........
CREDIT CARD STARTING FROM 5 *** , 4*** , 6*** , 3**.........
Now is the scan completed or its still running
okk now let go ahead and check the report from my end then i will explain the whole report for you JUST stay on the line and you can do one thing go ahead and have a glass of water don't worry i will explain you what is this ....
HOLD .....
I got the report from my back in team and as I can see here that illegal visit is made on a website named as WWW.PORNHUB.NET AT 4:40 THIS MORNING WAS IT YOU who HAVE VISITED THIS ILLEGAL WEBSITE this morning ?

but let me tell you it is a paid website which requires financial information's too which means they have putted your financial information to pay the subscriptions or i can say they have generated an account in these website but with your personal and financial information


I ALSO CAN SEE THAT child pornography has downloaded by using your network and your identity and you know that is illegal all over the world and this is the heinous crime in United States.


KNOW NEED to worry I will help you in this case because we know that you are not the culprit you are victim of it .


Now check your online banking if you find any suspicious transaction regarding to c***************** do let me know even of $1 or few cents .


Do one thing check your email if you find any suspicious email regarding to pornography do let me know
but you told me that you have not found any suspicious transaction may be the hackers are using some firewall protection on your computer which means you can only able to see those things which these hackers are showing because as i can see they have generated some transactions in order to buy subscriptions for child pornography .


as for now it seems to me this is not a case of hacking only it is a case of identity theft too so now i am suggesting you to do not use any of your devices for your sensitive information's and log out each and everything which have your personal information like bank accounts and emails also please avoid picking any new call also if it is possible avoid making and picking call by your end till the time we are working on your networks.
let me go ahead and generate a report in behalf of you that your identity is used for illegal things could you please confirm me your first name and the last name and Can you please help me with your zip code.
ok now hold for a while and bring a paper and pen handy with you i'll definitely going to provide you the case id also please write down my information too as i am working on your device and network and if by any chance we lost or get disconnected it will be easy for you to contact me
name
tech id
office address = """microsoft : Redmond Woods
Address: 5020 148th Ave NE, Redmond Woods, Redmond, WA 98052, United States""
"" apple ne Apple Park Way, Cupertino, CA 95014, United States"""

now hold for a while, maybe it will take a minute or two, please don't mind my silence.
HOLD ....
i believe you have your paper and pen please write down your case id
fsc56819z
and also i had some words with our inter hacking team as they have suggested me to connect your call to the fraud protection department of the head quarter of the very specific bank institution that you are banking with.
since you can only contact your the fraud protection department of the headquarters over a phone call only and as for now your phone lines are not secured , and also as i have connected you from a secure line, i can do one thing I can connect your call to the headquarters over this secured line with Microsoft .
you just need to tell them that you have been hacked and hacker are using your financial and personal information's, also ask them if they have made any transactions from your accounts also tell them that you are not the one
in case they need proof provide them the case id also you can provide them my details too

in case they don't find any thing tell them to put some high securities and monitor your accounts for at least 48 to 72 hrs
as being an employ of microsoft i am not authorized to ask you any of your personal information otherwise i'll loose my job
do you have the toll free number of the head quarters if not you'll find it at the back side of your debit cards and credit cards.
go ahead and grab your cards i'm on the line ....
incase you have multiple bank accounts I will help you to connect your call to each on of them . make sure to give priority to those bank in which you have higher denomination , because hackers will attack those accounts only in which you have higher amount of funds

just to inform you that bank headquarters have a policy that they do not allow a 3 way call that means once I connect your call to the bank headquarters i will automatically put on hold .
so nobody is going to listen your conversations not even me and not the hackers so don't worry .
in which headquarters you want me to your call first .
okay i am connecting your call now and as I connect your call to the bank headquarters i will be automatically put on hold and you will first receive an IVR ( an IVR is the interactive voice response of the bank all you need to do is listen to the IVR and say live person or connect me to a representative .

okay I am connecting your call and i wish you a good luck
incase if your call gets disconnected due to any reception problem please wait for my call back i will help you to get connected to your bank person again .

okay i am connecting now
Connected ........