I posted one of these guys popups before, but I’ve added more information on this one (like their organisation name).
Their popup changes every day and these are some previous URLs:
pcecare.xyz pcvires.xyz pcevirus.xyz pcvirus.xyz
Today (09/04/2018), they're using hxxp://pcehvirus.xyz/info/
Phone number on popup: 02032873452
So who are they?
Website: https://pcehelp.com or http://www.aar-sun.com (broken at present)
Facebook: https://www.facebook.com/PCEHELPTECHNOLOGY/
Real organisation: Aarsun Technologies Pvt. Ltd.
https://www.linkedin.com/company/aarsun-technologies/
Phone numbers UK: 08006800619 / 08003869316 (previously 02081331082)
Phone numbers USA: 18002826179 (previously +18456944168)
IP address: 103.99.15.169
ISP: Livelink Technologies Pvt. Ltd
Location: Dehradun, Uttarakhand, India
MO: All the usual tech scam stuff: Eventvwr, msconfig stopped services, netstat. They use TeamViewer, but will always want to call you back on a land line. Their 'fix' just consists of killing the browser, removing all temp files in %temp% and /Windows/Temp, installing CCleaner. Will ask for a credit card using notepad and won't invoke their website.
Directors:
Sunny Arora (HR Manager and Director)
Address: House Number D1, Mission Compound, Saharanpur, Uttar Pradesh, India, 247001
Date of birth: August 1985
Ashish Mittal
Address: Abdul Salam Road Kutubsher, Saharanpur, Uttar Pradesh, India, 247001
Date of birth: June 1982
I will post a video showing their scam soon on https://YouTube.com/c/JimBrowning