Computer totally taken over

[cybercrone]

Just a few minutes ago my whole screen was taken over (on another computer) by a graphic claiming to be Windows and saying that I had gotten a virus, don't shut off or close computer, call Windows right away etc. Voice on repeat saying that I had to contact Windows at the number shown before my internet could be available again.

I had been warned about this thing just this morning from a friend in Britain.

My computer seems to be totally 'frozen'.  I can only turn it off. But when I turn it back on, the thing is still there. I can't move the page, access any other programs or apps or anything.  The Windows 'warning' covers all the space on my desktop completely, so I won't be able to give you the information you need completely - Win 10, Kaspersky Total Security.

I won't have a computer available to check here again until a few hours down the road, but will check back as soon as I can.

TIA

 

[Berny]

@cybercrone

Can’t you check your startup items ?

[cybercrone]

Hi Bernie.  So sorry for the lag here.  I'm also dealing with all 3 levels of my house being water damaged, getting contractors and so on, so just unable to have some continuous time free.

I have made a video of the screen so you can see and hear it, but it's 58 mb and won't come here. I've spent a long time already getting the video so I could copy it and trying to find a program to get it trimmed, but my head is really messed up and I can't concentrate.

So I wondered if you have a "junk" email that I can send it to?

Also, neither the mouse nor the touch pad are responsive.

TIA

~m

[Berny]

@cybercrone Hi,

According your comments  i fear i will not be able to help you ...

Did you try to boot in Safe Mode (? F5 - F7 - F8 ?) and then rollback to a valid restore point ?
I also think that 'Kaspersky Rescue Disk' boot disk will be unusable on your frozen computer 🤔
Which Kaspersky product is installed on your device ?

[harlan4096]

Hum that looks to me a possible "false/fake scam warning"🤔, if You power on the system normally, once You are in front of the warning using the full screen, can You click on CONTROL + ALT + SUPR keys, and access to Windows Task Manager, once there, You can access to StartUp processes, and there probably disable that warning that executes in Windows start...

[cybercrone]

Thanks to you both.  I will try these things - tonight I hope.

The thing that bugs me is I didn't have to click on anything to activate it.  It just popped up and I quickly exited my whole Firefox, but it never went away.

Any idea why Kaspersky didn't catch this? 

I have been told that since I live in Canada, I don't actually have Kaspersky any more but some very inferior product that was whipped up to try and hold on to the US market when Kaspersky was banned there.

And any idea what I should be looking for in the Start Menu?

Thank you for everything.
 

[harlan4096]

You can post a capture of thee StartUp items...

[Flood and Flood's wife]

2 hours ago, cybercrone said:

I have been told that since I live in Canada, I don't actually have Kaspersky any more but some very inferior product that was whipped up to try and hold on to the US market when Kaspersky was banned there.

And any idea what I should be looking for in the Start Menu?
 

Hello @cybercrone, 

• *Also*, specific to Kaspersky being banned in the US - the transition was done 30th September 2024 to a software called Ultra AV, provided by the Pango Group. 
• To see IF Ultra AV is running on (your) system - also look in the Task-manager for any executables called Ultra AV OR with the name Ultra in it. 
• The UltraAV website is: https://ultraantivirus.com/. 

Thank you🙏
Flood🐳+🐋

Edited March 4 by Flood and Flood's wife
pn

[cybercrone]

Quote

Thanks to you both.  I will try these things - tonight I hope.

Thank you for everything.

Well, I went back to my machine and booted up. The regular screen came up. The voice was still yammering though, and on top of the screen in the lower right corner was a black notice telling me I had no internet access.  It had arrows on it but they didn't take me anywhere.

I now had some control so went to the StartUp list and didn't see anything that looked different.

I rebooted and all seems to be going normally, though I'll change some passwords I think.  Maybe should have done that before.

Thanks for the assistance.
 

[Berny]

@cybercrone

Please run a full scan ?