|
I really don't get the press obsession with Cummins! Just another excuse to replay the excruciating press briefing he gave after his lock-down trip to Durham, maybe? 
|
|
|
|
|
my printer (Lexmark) did not function(offline) after a power outage a month ago. this morning when I am doing research on Internet, suddenly a IM comes from a webpage. a lady Jennifer ping me to help, claiming they are supporting Lexmark , gave me a ticket####, then shortly a guy called to my cell phone. he prompted me to do some quick testing and it seems he knows Lexmark internal knowledge.
then he prompted to download an applet from www.[DELETED].com to log into my computer. I closely watched his doing. it seems everything is okay and find some issue with printer and my Laptop.
finally it comes to discover that my firmware has issue- I start to suspect it is a fraudster. he gave me his contact info and told me further service to fix everything that will cost me $150.
then I cut my session with him and did some research for his company. I think very likely he is a fraudster.
diligent hands rule....
modified 14-Nov-20 5:40am.
|
|
|
|
|
Unsolicited contact, usually a sure sign of trouble. They had your phone number?
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
yes, I gave it...
diligent hands rule....
|
|
|
|
|
My in-law got a phone call too... but the typical Microsoft worker that finds issues in the windows system log...
The problem is that the remote access tool they use usually have a non visible for you part. My in-law got data deleted while they were "checking" the PC.
I managed to recover almost everything, but I would not trust those kind of "supports" anymore. And I would start to think to restore your latest backup to clean up possible unexpected issues.
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
Southmountain wrote: I think very likely he is a fraudster.
Yes. This. Very much this.
|
|
|
|
|
It's no wonder these people are still able to function.
|
|
|
|
|
Southmountain wrote: he prompted to download an applet from www.[DELETED].com to log into my computer.
Oh gawd.
Rule 1: do not log into anything at the moment, especially not bank, credit card sites, or paypal; do not buy anything online.
Rule 2: Restore your computer from your last known clean backup image. If you don't have an image, copy off every important file (but no applications) to airgapped storage, and reformat your HDD(s) before reinstalling Windows.
You just let a fraudster persuade you to install unknown remote access software on your computer and use it. What the ![Elephant | [mastadon]](https://www.codeproject.com/script/Forums/Images/elephant.gif) else does it do? Has it done?
Scrub and reinstall!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
after session right away I used Kaspersky suite to fully scan my computer and see no issues. rootkit is scanned too...
diligent hands rule....
|
|
|
|
|
Kaspersky - or any other anti-malware suite - won't spot an app that hasn't been "flagged" as bad: ransomware for example is just software that read and writes files on your HDD, and many, many apps do that. Keyboard hooks are legit: music players use them to access media keys on many keyboards. And you opened an app designed to let a remote computer access - and control - your computer. How do you know it or a process it created isn't running in the background right now waiting for a silent connect, or passing everything you do to the mothership?
Kaspersky won't spot that as malware because it is the intended behaviour of the application!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
this lap is only used for my development. no any financial transactions etc...
diligent hands rule....
|
|
|
|
|
And how many of the sites you visit share a email login / password?
Many people use the same password for multiple sites, so if you get one, you get the lot.
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Two others:
1) I removed the URL from your message - no point in giving fraudsters free advertising
2) Change your passwords on every system you use, either right now via your phone, or immediately you have a clean machine again. This applies to everything you have used since installing the applet, and (to be safe) everything where the browser remembers your passwords for you.
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
thanks for removing the url etc.
my initial purpose is to let people to recognize these kinds of fraudsters...
diligent hands rule....
|
|
|
|
|
No offense, but getting an IM from a stranger and then giving them your phone number and downloading some unknown program they tell you to...?
That's pretty gullible, especially for someone in IT 
At the very least, delete downloaded files, clear your browser history, run a virus check and change all your passwords everywhere.
Also, if you haven't already, backup all your (scanned) files before shutting down your computer.
I've once had a virus that prevented my computer from starting, everything worked fine until I turned it off and back on again.
Lost all my files that day (pre-cloud era, I was still in my teens).
I hope for your sake that the damage is limited to a facepalm for falling for it 
|
|
|
|
|
that guys seems to know Lexmark printer very well. he instructed to do some commands and checked some status. I saw his technical skills and gained some credibility from me.
in the whole session I closely monitor it and see no suspicious actions at least.
diligent hands rule....
|
|
|
|
|
Well, in that case maybe he really wasn't a fraud.
I mean, an expert asking for money to fix your problem isn't really that out of the ordinary, is it? 
|
|
|
|
|
Someone says they need to log into my computer to fix a printer?
Alarms bells should sound with immediate effect.
I would expect to be asked to run a command line instruction and forward the resulting message or download some software from the official site.
Needing to connect to my computer to fix a printer? No Way!
“That which can be asserted without evidence, can be dismissed without evidence.”
― Christopher Hitchens
|
|
|
|
|
I checked that applet company, it looks a legit company so I gained some confidence from there..
diligent hands rule....
|
|
|
|
|
I am going to take a guess that they got you to install Teamcity.
Teamcity is fine - although I use Chrome Remore Desktop because Teamcity is rather temperamental.
The possible danger is that once they are onto your computer with Teamcity they can then open an ssl tunnel to your computer, potentially leaving your computer open to them once they disconnect the Teamcity connection.
“That which can be asserted without evidence, can be dismissed without evidence.”
― Christopher Hitchens
|
|
|
|
|
no, it's rescueme client app. it seems like a regular company focusing on PC help service in this Covid19 erra...
diligent hands rule....
|
|
|
|
|
It's being niggling me for a while - I can't open a recipe (which I store on the NAS as a DOCX) on my Surface without it refusing to let me edit it unless each an every time I tell Word it's a safe location.
So I sat down to tell it it was safe today - which should be easy - it's just adding a trusted network location to the Trust Center settings.
Except ... when I enter the mapped drive location it complains "path cannot be used as a trusted location for security reasons".
Turns out that mapped drives aren't considered secure, but the server / folder combination it's mapped to is ... So by using \\SGNAS\Publications instead of X:\ it gets rid of that message.
Still in Protected view though ... turns out that apparently it thinks my local NAS is located on the internet and you have to disable Protected View for all internet originating files to get rid of it.
Microsoft? Wake up and smell the damn coffee, will you? 
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
NAS-ty 
|
|
|
|
|
No good coffee where they're located.
|
|
|
|
|
Have you tried putting your recipes on Microsoft Azure?
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
