Well, half-scammed that is. He got a call from one of those operations
that claim that they represent Microsoft and that they have detected
viruses on your computer and that they will fix the problem for a fee.
My naive friend went so far as to let them remote-connect to his
computer before he got suspicious and hung up the phone and turned off
the computer. I've agreed to visit him tomorrow and check out the
computer for any signs of possible tampering or malware that may have
been planted.
As far as I know this particular scam's primary goal is to separate your
money from your wallet, not to do actual damage to or infect the
computer. But they did have the opportunity to do so, so it needs to be
checked out. I'm going to do general scans for viruses, malware a few
tools I've got. I'll be on the lookout for keyloggers and rootkits.
Can anyone comment on their experience with this type of scammer and
know what, if anything, they tend to leave in their aftermath?
I've read through all the posts so far. Here is my experience, I am a
volunteer handy helper in our continuing care facility. The person
involved got a similar call, she never gave them a credit card number and
swore she didn't do anything on her machine. I don't believe her, the
attacker had installed software to gain control of her machine. I knew
this as soon as I moved the mouse and realized it wasn't under my complete
control. I shut down, but on a re-boot there was a password request that
no windows password recovery program could fix. I suspect this was a
special program put there by the attacker.
She had the original recovery cd's. I used a Puppy Linux to capture any
essential personal data then restored the system.
As I said, I believe you have to do something to let these people in, but
they are very clever and I wouldn't recommend people play 'cute' with
them. It's worth having one or more of the virus checking programs on
bootable media, but I'm not sure if this type of intrusion would be
caught. Unfortunately, too few people keep system image backups which is
the best safeguard against all sort of problems. For various reasons, I
like web based email programs like Outlook, which keeps contacts safely
off the machine.