Fake antivirus site & when I called, an Indian answered saying it was “US Tech Support”
https://www.virusfix.com/
They host a live chat scam, and also ask for payment first,
They charge you for Hotspot VPN on mobile which is free
Also uses https://www.ustechsupport.com/ as a payment gateway
Looks very polished, which is weird :D but the polished site makes up for the old horrible site which was already detected (http://scammer.info/d/13033-tech-support-scammer-again)
Spoke with them on Live chat a bit ago https://i.imgur.com/E0GpBTh.png was able to IP log the agent even click on one of the files I sent, however, was Windows 10 and my file got detected by Chrome as it wasn’t crypted but I guess I am the reason and maybe other people are the reason they wont click on our links. Live agent said they were from US but weren’t however not sure where the agents are this was only the live chat.
They also own the software MyCleanPC which I put in dnSpy and found this http://mcpi.helpverify.info/setups/registry/mycleanpc/s/updates.txt
https://www.ustechsupport.com/tech-support-scams.html This has a nomorobo part assuming because their number is on their lol
http://scammer.info/d/35333-tech-support-scam-801-857-2345 some more info
The agent I spoke with on live chat attempted to download a file I sent him just to see what they’d do and chrome blocked it as expected.
many people should join the livechat at the same time, they take time to reply.
Hello. How may I help you?
maxime van lavier 22:33
hey there, i have a problem with my dell pc
avatar
Lucas T. 22:34
Hello there.
Sure. May I know the issue that you’re facing?
maxime van lavier 22:34
it says that my computer has been infectted and its some weird ass noise, how do i stop it
avatar
Lucas T. 22:35
Please give me a moment to locate your account.
maxime van lavier 22:36
sure mate
can i send a screenshot?might help you to know the problem
avatar
Lucas T. 22:37
Sure.
maxime van lavier 22:38
https://imageshare.best/GHFAG1
avatar
Lucas T. 22:38
Let me check.
maxime van lavier 22:38
alrighty
Read
avatar
Lucas T. 22:39
I’m unable to locate your account under [email protected]
Do you have a subscription with us?
maxime van lavier 22:40
no i dont
Delivered
avatar
Lucas T. 22:40
Not a problem, I can have your system looked at by our LiveTech via remote connection so our LiveTech can resolve your issues.
With US LiveTech Support, you’ll get instant access to a PC professional who will help you troubleshoot and resolve whatever problem you’re experiencing via a remote connection.
We accept payments through paypal, amazon and credit card,
maxime van lavier 22:46
awkay
avatar
Lucas T. 22:47
Would you like me to share the link where you can subscribe to this discounted deal?
maxime van lavier 22:47
sure
avatar
Lucas T. 22:47
Let me send you the link.
maxime van lavier 22:47
alrighty
avatar
Lucas T. 22:48
USTechSupport Upgrade Cart
Please click on it, fill in your details, check mark the terms & conditions circle and proceed to "Complete order"
maxime van lavier 22:49
okay
Read
avatar
Lucas T. 22:49
Let me know when you are done so I can guide you further.
got them
Date/Time 2021-03-01 06:36:43
IP Address 111.119.187.62
Country
Pakistan, Lahore
Browser Chrome (88.0.4324.190)
Operating System Windows 10 x64
User Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36
Referring URL no referrer
Host Name 111.119.187.62
ISP CMPak Limited
Pakistani scammers
also scammer gave me his fake email- [email protected]
also the reviews suggest that its a scam https://www.ekomi-us.com/review-us-tech-support.html
When I called this number, some American guy picked up. I know it’s a scam but why is there an American guy picking up if the IP Address is in Pakistan? Are they using a VPN?
@idkanim0#180303 they use call centers in Pakistan and Philippines, so most likely you got a Filipino.