Windows blocked?

[scotbill]

While browsing FB message appears:

Windows has been blocked due to suspicious activity! - do not shut down or restart your computer

An 0800 number is given which apparently relates to a firm in Aberdeen which claims to be an associate of Windows.
They will do a free diagnosis of the problem but the cure would have to be paid for.

Does anyone know whether this is legit?

[Guest 112233]

We Need more details Scotbill

Here's a good place to start:

Computer Misuse Act 1990

Even better: contact the Police.

[Procrastinus]

Some background imfo: https://www.microsoft.com/en-us/secu...ansomware.aspx

Perhaps some help here: https://www.avast.com/c-ransomware

Google 'Ransom Ware' for more ideas. Good luck!

PS This might also be useful: http://www.pcworld.com/article/20840...ansomware.html

[scotbill]

Thanks guys.

Fortunately for me this one proved to be reasonably simple to get rid of - a couple of reboots cleared the message.
(It specifically warns you not to restart or switch the computer off - relying on you accepting their service to solve the "problem").

The number associated with it is 0800 0903831 and it is known on Google - particularly for using apparently legit sites on FB

[jimtherev]

Yup, a new one to me, too - though a variation on an old theme. Solved in my case by rightclicking on taskbar and killing the screen by task manager. Then a scan with Malwarebytes, just in case the nasty was still lurking.


No damage this time, but 'they' are no doubt developing new ways of getting round this escape route...

[le Pingouin]

It could be as simple as a graphics pop-up relying on the user credulity to ring the number and allow remote access.

https://answers.microsoft.com/en-us/...1-64aac2f5914c

It could also be malware so I'd suggest following this rather thorough extermination regimen:

https://www.bleepingcomputer.com/vir...n-blocked-scam