Notes

Thank you for calling support this side Eric
How may i assist you?

Sir may i know how many times you tried to login into your account,
Okay sir no problem, can i have your registered name so that i can pull up your account

Just be on hold sir, i'll be right back

Thank you for being on hold sir,
As i can see here your account is login at multiple locations with different ip addresses

Okay so now what i am gonna do is im gonna connect you with the safe and secure servers of the Charles Schwabs by which I’ll be providing you some trouble shooting steps by which you can reaolve this issue by yourself
Okay now have a good look on your keybord do you see a windows key window key would look like a window with four small boxes, press that key along with that key press the letter r
R as in Romeo

Now do you see a run box at the very bottom left cornor

There you have to type in www.ultraviewer.net and hit okay
Now you will see a blue colour screen with a green box which say download hit download now you will see an extention being downloaded at the very top right cornor hit open file

Now sir go ahead and check that are you able to login into your account or not,

As i can see here your account is login at multiple locations with different ip addresses

Now we are going to check 2 thing of your device
1st is the services part and 2nd is the network part

For services part
Hold down window key and letter r and release the keys together
Now type on that box
Msconfig
Now look at the row bar do you see services general boot
Click on services
Now do you see the services there
These all are the ms services. These services which help your device to run properly and secure ur device and these services should be in running condition all the time not even single services should be stopped, if any services is stopped so it indicate that there is suspicious activity is going with ur device
So sir/mam may i know the status of that services?
Is it in running condition or it has been stopped?

(stopped):- that mean hacker stopped these services for hacking purpose because they are trying to get into ur device to steal ur personal info. Without ur knowledge

Now we are going to check network part
So hold down window key and the letter r
Type on that box (cmd)
Netstat
Local address:- the local address mean these are ur ip address with you are using within ur network area
Foreign address:- here foreign address mean these are the unprotected and unauthorized ip address with hacker fron foreign countries, so is there is any of ur family member who live in foreign country?
State:- establish:-



Well that does confirm there is attempt of hacking and am sorry to say that who so ever is trying to get into ur device is sucessfully connected to ur system thats is the reason why u reciever this security alert from the side of microsoft because we dont want to lose ur any of info without ur knowledge


So now am going to go ahead and check everything for you but 1st of all i want to ask a few ques but only in yes or no because ur phone lines are not secure yet so any of ur personal info could be tapped

So do you this device to go on facebook or any kind of social media application.
Do you shop online
Do you pay your bills online
Do you do online banking
Do you play games online
Have you ever watched a movie online on netflix or any other subscription based platform
Thank you so much for the information
Just be on hold with me i'll be right back to you

Thank you for being on hold sir/ma'am
Alright sir i jsut have checked each and everyting we've found some suspicious login attempts initiated through your personal and financial data, as i can see there is a login attempt initiated on a chinese paid gambling website and the website is www.betonline.net at 4:40am in the morning and it is mandatory to put your fincanical information to login.

So tell me are you the one who use this website,

Do someone else have your financial data who can do this without your knowledge,

So it does confirm that these are the hackers who uised your personal and financial data on this website so what i'm gonna do, i'm gonna put some firewall securtity but before doing that i want you to check 2 things on this secured connect computer, first thing is your emails and if you find an suspicioius email with no subject or which seems suspicious to you then just let me know and you have to check emails for last 2 days.

Now go ahead and check your all financial institution and if you find any transactions which seems suspicious to you let me know

Alright sir,

Command option esc


Thank you for calling Support, this side Eric Martin. How can I assist you today?

Could you please tell me how many times you have tried to log in to your account?

May I have your registered name to pull up your account?

Please hold for a moment, I’ll be right back

Thank you for holding. I see that your account has been logged in from multiple locations with different IP addresses.

Does anyone else have your login credentials or your account details?

Now what I’m gonna do is I’ll connect you to Charles Schwab's secure servers and guide you through some troubleshooting steps to resolve this issue.

May I know what kind of device are you using?

Please have a good look at your keyboard. Do you find the Windows key (which looks like a window with four small boxes) and press it simultaneously with the letter "R" (R as in Romeo). Press both the windows key and the letter R at the same time.

Do you see a "Run" box in the bottom-left corner? Type there www.ultraviewer.net and click "OK."
A blue screen will appear with a green "Download" button. Click the "Download" button, do you see an extension appearing in the top-right corner, click "Open File."

Please check if you can log into your account now.

Next, we need to verify two things of your device: that are Services part and Network part.
For Services:
1. Press the Windows key and "R" together.
2. Type msconfig and press Enter.
3. In the window that appears, click on "Services."
4. Ensure all services are running. These services are essential for your device's proper functioning and security. If any are stopped, it may indicate suspicious activity.
Can you confirm if all services are running or if any are stopped?
For Network:
1. Press the Windows key and "R" together.
2. Type cmd and press Enter.
3. In the command prompt, type netstat and press Enter.
4. Review the "Local Address" and "Foreign Address" sections. Foreign addresses are unauthorized IP addresses. Do you have any family members living abroad?
This confirms that there is an attempt to hack into your device. The intruder has successfully connected, which is why you received a security alert from Microsoft.
I will implement additional firewall security. In the meantime, please answer the following yes-or-no questions to protect your privacy, as our phone lines are currently not secure:
1. Do you use this device for Facebook or other social media applications?
2. Do you shop online?
3. Do you pay your bills online?
4. Do you use online banking?
5. Do you play online games?
6. Have you ever watched movies online through Netflix or other subscription platforms?
Thank you for your responses. Please hold while I complete the next steps.
________________________________________
Thank you for your patience. I have reviewed everything and found suspicious login attempts using your personal and financial data. Specifically, there was a login attempt on a Chinese gambling website, www.betonline.net, at 4:40 AM, which requires financial information to access.
Please confirm:
• Do you use this website?
• Does anyone else have access to your financial data who might be using it without your knowledge?
It appears hackers have used your personal and financial data. I will add additional firewall security. Please do the following on a secure computer:
1. Check your emails for the past two days. If you find any suspicious emails, let me know.
2. Review your financial accounts for any unusual transactions.
Please inform me of any findings.






Thank you for calling support this side Eric
How may i assist you?

May i know what you were doing exactly when you saw this error on the screen

Okay may i know it is your personal computer or its your work computer

May i know the make and model of the device

Okay so now what i am gonna do is i’m gonna connect you with the safe and secure servers of the microsoft by which i’ll be providing you some trouble shooting steps by which you can resolve this issue by yourself
Okay now have a good look on your keyboard do you see a windows key window key would look like a window with four small boxes press that key along with that key press the letter r
R as in romeo
Now do you see a run box at the very bottom left corner
There you have to type in www.ultraviewer.net and hit okay
Now you will see a blue colour screen with a green box which say download hit download now you will see an extension being downloaded at the very top right corner hit open file


Now we are going to check 2 things of your device
1st is the services part and 2nd is the network part

For services part
Hold down window key and letter r and release the keys together
Now type on that box
Msconfig
Now look at the row bar do you see services general boot
Click on services
Now do you see the services there
These all are the ms services. These services which help your device to run properly and secure ur device and these services should be in running condition all the time not even single services should be stopped, if any services are stopped so it indicates that there is suspicious activity is going on with ur device
So, sir/mam any i know the status of that services?
Is it in running condition or it has been stopped?

(stopped): - that mean hacker stopped these services for hacking purpose because they are trying to get into ur device to steal ur personal info. Without ur knowledge

Now we are going to check network part
So, hold down window key and the letter r
Type on that box (cmd)
Netstat
Local address: - the local address means these are ur ip address with you are using within ur network area
Foreign address: - here foreign address mean these are the unprotected and unauthorized ip address with hacker from foreign countries, so is there is any of ur family member who live in foreign country?
State: - establish: -



Well, that does confirm there is attempt of hacking and am sorry to say that who so ever is trying to get into ur device is successfully connected to ur system that is the reason why u receive this security alert from the side of microsoft because we don’t want to lose ur any of info without ur knowledge


So now am going to go ahead and check everything for you but 1st of all i want to ask a few ques but only in yes or no because ur phone lines are not secure yet so any of ur personal info could be tapped

So do you this device to go on facebook or any kind of social media application.
Do you shop online
Do you pay your bills online
Do you do online banking
Do you play games online
Have you ever watched a movie online on netflix or any other subscription-based platform
Thank you so much for the information
Just be on hold with me i’ll be right back to you

Thank you for being on hold sir/ma'am
Alright sir i just have checked each and everything we've found some suspicious login attempts initiated through your personal and financial data, as i can see there is a login attempt initiated on a chinese paid gambling website and the website is www.betonline.net at 4:40am in the morning and it is mandatory to put your financial information to login.

So, tell me are you the one who use this website,

Do someone else have your financial data who can do this without your knowledge,

So it does confirm that these are the hackers who used your personal and financial data on this website so what i’m gonna do, i’m gonna put some firewall security but before doing that i want you to check 2 things on this secured connect computer, first thing is your emails and if you find an suspicious email with no subject or which seems suspicious to you then just let me know and you have to check emails for last 2 days.

Now go ahead and check your all-financial institution and if you find any transactions which seems suspicious to you let me know

Alright sir,


Ms



Thank you for calling Support, this side Eric Martin
How can I assist you today?
Could you please describe what you were doing when you saw the error on your screen?
Is this a personal or work computer?
Can you provide the make and model of the device?
I will connect you to Microsoft’s secure servers to guide you through some troubleshooting steps to resolve this issue on your own.
Please look at your keyboard. Do you see a key with a Windows logo? Press that key along with the letter "R" (R as in Romeo).
Do you see a "Run" box in the bottom-left corner? Type in www.ultraviewer.net and click "OK."
A blue screen will appear with a green "Download" button. Click "Download," and once the extension appears in the top-right corner, click "Open File."
We need to check two things on your device: Services and Network.
For Services:
1. Press the Windows key and the letter "R" together, then release them.
2. Type msconfig in the box.
3. In the new window, click on "Services."
4. Check if all listed services are running. These services are crucial for the proper functioning and security of your device. If any are stopped, it could indicate suspicious activity.
Can you confirm the status of these services? Are they running or stopped?
For Network:
1. Press the Windows key and the letter "R" together.
2. Type cmd and press Enter.
3. In the command prompt, type netstat and press Enter.
4. Look at the "Local Address" and "Foreign Address" sections. The "Foreign Address" shows unauthorized IP addresses. Do you have any family members living abroad?
This indicates that there is an attempt to hack into your device. The intruder has successfully connected to your system, which is why you received the Microsoft security alert.
I will proceed with further checks, but first, I need to ask you a few yes-or-no questions to protect your privacy, as our phone lines are currently not secure.
1. Do you use this device for Facebook or other social media applications?
2. Do you shop online?
3. Do you pay your bills online?
4. Do you use online banking?
5. Do you play online games?
6. Have you ever watched movies online through Netflix or other subscription platforms?
Thank you for your responses. Please hold for a moment while I continue to investigate.

Thank you for your patience. I have completed the review and found some suspicious login attempts using your personal and financial data. Notably, there was a login attempt on a Chinese gambling website, www.betonline.net, at 4:40 AM, which requires financial information to access.
Please confirm:
• Are you familiar with and do you use this website?
• Does anyone else have access to your financial data who might be using it without your knowledge?
It appears that hackers have used your personal and financial data. I will implement additional firewall security. In the meantime, please do the following on a secure computer:
1. Check your emails for the past two days. If you find any suspicious emails, let me know.
2. Review your financial accounts for any unusual transactions.
Please keep me informed of any findings.





THANK YOU FOR CALLING SUPPORT THIS SIDE YOLANDA
HOW MAY I ASSIST YOU?
sir may i know how many times you tried to login into your account,
Okay sir no problem,, can I have your registered name so that I can pull up your account

just be on hold sir , i'll be right back

thank you for being on hold sir,
as I can see here your account is login with multiple location with different IP addresess
MAY I KNOW IS IT YOUR PERSONAL COMPUTER OR ITS YOUR WORK COMPUTER
MAY I KNOW THE MAKE AND MODEL OF THE DEVICE
OKAY SO NOW WHAT I AM GONNA DO IS IM GONNA CONNECT YOU WITH THE SAFE AND SECURE SERVERS OF THE MICROSOFT BY WHICH ILL BE PROVIDING YOU SOME TROUBLE SHOOTING STEPS BY WHICH YOU CAN REAOLVE THIS ISSUE BY YOURSELF
OKAY NOW HAVE A GOOD LOOK ON YOUR KEYBORD DO YOU SEE A WINDOWS KEY WINDOW KEY WOULD LOOK LIKE A WINDOW WITH FOUR SMALL BOXES PRESS THAT KEY ALONG WITH THAT KEY PRESS THE LETTER R
R AS AN ROMEO
NOW DO YOU SEE A RUN BOX AT THE VERY BOTTOM LEFT CORNOR
THERE YOU HAVE TO TYPE IN WWW.ULTRAVIEWER.NET AND HIT OKAY
NOW YOU WILL SEE A BLUE COLOUR SCREEN WITH A GREEN BOX WHICH SAY DOWNLOAD HIT DOWNLOAD NOW YOU WILL SEE AN EXTENTION BEING DOWNLOADED AT THE VERY TOP RIGHT CORNOR HIT OPEN FILE


now sir go ahead and check that are you able to login into your account or not,















NOW WE ARE GOING TO CHECK 2 THING OF YOUR DEVICE
1ST IS THE SERVICES PART AND 2ND IS THE NETWORK PART

FOR SERVICES PART
HOLD DOWN WINDOW KEY AND LETTER R AND RELEASE THE KEYS TOGETHER
NOW TYPE ON THAT BOX
MSCONFIG
now look at the row bar do you see services general boot
click on services
now do you see the services there
these all are the ms services. these services which help your device to run properly and secure ur device and these services should be in running condition all the time not even single services should be stopped, if any services is stopped so it indicate that there is suspicious activity is going onj with ur device
so sir/mam any i know the status of that services?
is it in running condition or it has been stopped?

(STOPPED):- that mean hacker stopped these services for hacking purpose because they are trying to get into ur device to steal ur personal info. without ur knowledge

now we are going to check network part
so hold down window key and the letter R
type on that box (CMD)
NETSTAt
local address:- the local address mean these are ur ip address with you are using within ur network area
Foreign address:- here foreign address mean these are the unprotected and unauthorized ip address with hacker fron foreign countries, so is there is any of ur family member who live in foreign country?
state:- establish:-



well that does confirm there is attempt of hacking and am sorry to say that who so ever is trying to get into ur device is sucessfully connected to ur system thats is the reason why u reciever this security alert from the side of microsoft because we dont want to lose ur any of info without ur knowledge


so now am going to go ahead and check everything for you but 1st of all i want to ask a few ques but only in yes or no because ur phone lines are not secure yet so any of ur personal info could be tapped

so do you this device to go on facebook or any kind of social media application.
do you shop online
do you pay your bills online
do you do online banking
do you play games online
have you ever watched a movie online on netflix or any other subscription based platform
thank you so much for the information
just be on hold with me I'll be right back to you

thank you for being on hold sir/ma'am
alright sir I jsut have checked each and everyting we've found some suspicious login attempts initiated through your personal and financial data, as I can see there is a login attempt initiated on a chinese paid gambling website and the website is www.betonline.net at 4:40AM in the morning and it is mandatory to put your fincanical information to login.

So tell me are you the one who use this website,

do someone else have your financial data who can do this without your knowledge,

So it does confirm that these are the hackers who uised your personal and financial data on this website so what I'm gonna do, I'm gonna put some firewall securtity but before doing that I want you to check 2 things on this secured connect computer, first thing is your emails and if you find an suspicioius email with no subject or which seems suspicious to you then just let me know and you have to check emails for last 2 days.

now go ahead and check your all financial institution and if you find any transactions which seems suspicious to you let me know

alright sir,

command option esc