8006568559

For iPad:

Open an email that contains a link. This will redirect you to safari which will still have the page with the error open but on a differen tab.

At that point change the safari settings (private/public) at the bottom left of the page. Any time the settings are changed you are asked if you want to close all tabs. Press Yes !! Once you do that all the tabs are closed and you can just switch back to the other mode.

I cleared my history and cookies on the iPad in settings. It was gone when I reopened Safari.

My wife got sucked in by this scam.  She authorized a $169.95 USD  payment from Visa and they remotely installed the CCleaner on her Mac. ( CCleaner is a free download off the internet).  Figuring we were easy targets received a call back yesterday.  I happened to answer the phone this time and the south asian sounding person advised they had installed the wrong program and wished to uninstall it and refund the money, HOWEVER, in order to make the refund they needed access to our bank account!  After a brief exchange he threatened to lock the computer again and hung up.  The other kick in the ass is Visa will not cover the loss because they maintain he did perform a service by installing the CCleaner and therefore no fraud occurred.  He performed a service.

I fortunately did not phone the number. Instead, I typed the number into Google search in Firefox (as my Safari was stuck).
Your message was the first thing I saw and your advice was great! Thank you very much.

i got this pop up and fell for it allowed them to take remote control of my computed . They went around it for about 30 min. and tried to convince me to pay them $300 to fix all the problems on the computer did not do hung up closed the remote control. Called bank changed my online passwords Had the computer gone over by a apple store tech. he cleaned all up. Have not had a good night sleep in a week after this happened what else should i be doing please help

With thanks to Slim--

Since the scammers accessed the computer, they probably did one or more of the following:
• Disabled the anti-virus software
• Added nasty malware to the computer
• Copied the Contact List (so they can spam/email your soon-to-be ex-friends)
• Copied any financial data or passwords they could find
• Compromised your ID
• "Zombied" the computer, so it would respond to THEIR commands sent via internet
• Deleted some important files
• Asked for money to repair the damage they caused

What can you do immediately after such an attack?
1.  Pull the cables on the computer, so it cannot access the internet.
2.  Change ALL  passwords stored on the computer
3.  Run FULL malware scans on the computer, in "SAFE" mode!
4.  Change the passwords again, particularly if the malware scans showed anything
5.  Inform your bank and credit card companies
6.  Sign up for credit monitoring, and check the status frequently
7.  You may have to bring the computer to a local repair shop, and tell them the story.
8.  Tell friends what happened, so they can be aware of strange emails from you
9.  Plug in the cables only AFTER all the above have been done
10.  Change the passwords on all online accounts.  Even better - access a "safe", uninfected  computer, and chance your online account passwords RIGHT NOW.

You fell for one scam, and might be susceptible to others mentioned on this site:
http://phonehelp.2truth.com/facts_rev.html
Read that info to educate and help protect yourself!

Honest computer companies do NOT cold-call people, or cause popups from websites to tell them their computers need fixing!

Some scammers even have websites.
Read the info at these links.
http://news.softpedia.com/news/Cold-Call-Tech ... on-150170.shtml
http://www.consumer.ftc.gov/articles/0346-tech-support-scams

Lesson:
If your computer needs fixing, bring it to a local repair shop

Remember to return here, to 800notes.com, after you look at any of the information at the above sites, either to post more information, or to let us know you avoided the scam or fixed the computer correctly.

Yes i followed all the advise that you gave me had the computer gone over by apple tech he found spyware on it cleaned it off. Went to the bank and the manager sat with us and went over all accounts and checked all out and the changes you advised and i did all is good so far. It is 2 weeks today thanks to you i can start to sleep again. This was a big wake up call for me thank you for all the advise i pray that this is behind me now. god bless you

Got a phone call earlier today from the "Internal Revenue Services" telling me to call them back at 347-305-6110. Then they called back a little while ago telling me to call 347-762-3991. Really getting tired of these calls. I guess the only thing the "Do Not Call" list does is keep legitimate companies from bothering me.

The DNC is only for telemarketing (sales & service) Debt Collection falls under the FDCPA laws, neither does it cover Charity, Some Survey's or political.  It doesn't stop calls from foreign country's, criminals or illegal telemarketers though.  In this case, your caller is from a foreign country, most of these calls are from India and Pakistan.

http://www.irs.gov/uac/Tax-Scams-Consumer-Alerts
https://800notes.com/forum/ta-8c2f64bf2b91fa5/irs-warns-of-telephone-scam

Report the Calls to the real IRS here:
•report the incident to the Treasury Inspector General for Tax Administration at 800-366-4484.
•You can also file a complaint with the Federal Trade Commission at FTC.gov. Add "IRS Telephone Scam" to the comments in your complaint.

******
Do consider getting a call blocking device or phone.. You can google them and many are around $40.00 or so.If its a cell phone, some already have call blocking, if not, there are free apps on the web that will work for some. You can google this. If you have a smart phone, there is a free app called call control. Iphones appear to have apps also. Another one is called Mr. Number.

My screen froze,then the pop up "Urgent security breach,ring this number immediately" I called & man from India replied, explained I had been hacked by foreigners who had taken over my computer to steal my information, but if I went to a web address they could help clean up my computer,' www.joinremote.me' I did this & clicked on a  box 'Connect to Technician' ended up talking to a man in India called Alvin, who asked for email address etc I entered info onto a form on screen, he said he couldn't take payment as the form wouldn't load, would clean up (2hours) , then would call me & take payment. He then said he couldn't get through, could I call him, on 44 80040491738,
He installed Firefox, CCleaner & Adblock, cleaned up my disc partitions checked to see if Mackeeper was on there, which it wasn't. I paid £237 via a on screen form, signed a warranty from SquareTechno even completing a brief questionnaire, & later realising a scam may have happened, called NatWest, cancelled my card, the money had gone to a US co. AVENGATE' .  I asked NatWest if the transaction could be reversed, they said not, if a service had been carried out, I said they had created the problem, & I had to pay them to supposedly rectify it. I'm off to the bank to dispute their response!!!

Tell her to contact her bank and have the charge on the credit card reversed, then cancel the credit card and have another one issued.

You have been badly burned. Hope you are successful at persuading the bank that a crime has been perpetrated against you and they HAVE to cancel / reverse the charges. The company that the scammers use to process credit and debit cards is going to have to lose money on this.

Here is some information about that website :

http://www.urlvoid.com/scan/joinremote.me/
The website is identified by 3 scanning engines, make sure to check the analysis report of the scanning engines to know why.
Domain 1st Registered     2014-11-03 (6 months ago)

MyWOT :
https://www.mywot.com/en/scorecard/joinremote.me
1 user review : Colorado.Chris   04/10/2015
Malware or viruses - Phishing - Scam
Reported for scam URLs and malware

SURBL : (have to enter the domain in a search box, not convenient at all)
joinremote.me is on SURBL lists: PH
The domain or IP was blacklisted due to hosting likely phishing, malware or cracked content.

Fortinet :
http://www.fortiguard.com/ip_rep/index.php?data=joinremote.me
has a graph showing malware complaints began before December 2014 - which would be immediately after the domain was registered

http://www.urlvoid.com/ip/198.143.166.36/
IP ADDRESS: 198.143.166.36
We have found in our database of already analyzed websites that there are 4 websites hosted in the same web server with IP address 198.143.166.36 and IP hostname vps.waretrendshost.com. Remember that it is not good to have too many websites located in the same web server because if a website gets infected by malware, it can easily affect the online reputation of the IP address and also of all the other websites.

{ one of the 4 websites is "Safari-issue.com" - wonder if they specialize in attacking Apple products? }
{ that domain is only 20 days old }

http://whois.domaintools.com/joinremote.me
Email   vikas.rodeo@gmail.com   is associated with ~4 domains
Registrant Org :   Vikash Rodeo is associated with ~3 other domains
IP Address     198.143.166.36 - 26 other sites hosted on this server
Domain ID:   D14368672-ME
Domain Name:   JOINREMOTE.ME
Domain Create Date:   03-Nov-2014 13:58:55 UTC
Domain Last Updated Date:   20-Mar-2015 05:07:42 UTC
Domain Expiration Date:   03-Nov-2015 13:58:55 UTC
Last Transferred Date:
Sponsoring Registrar:   PDR Ltd. d/b/a PublicDomainRegistry.com R28-ME (303)
Created by:   PDR Ltd. d/b/a PublicDomainRegistry.com R28-ME (303)
Last Updated by Registrar:   PDR Ltd. d/b/a PublicDomainRegistry.com R28-ME (303)
Domain Status:   CLIENT TRANSFER PROHIBITED
Registrant ID:   DI_39635180
Registrant Name:   Vikash Rodeo
Registrant Organization:   N/A
Registrant Address:   Cunningham Road
Registrant City:   Bangalore
Registrant State/Province:   Other
Registrant Country/Economy:   IN
Registrant Postal Code:   560052
Registrant Phone:   +91.9804237654
Registrant E-mail:   vikas.rodeo@gmail.com

Admin ID:   same information
Tech ID:   same information

Hi William
The phone number I misquoted should be 44 8004049738, Do they harm the computer in order to fix it? As in the permissions there seemed to be errors, & they did a First Aid to repair, might there still exist problems, I do not know about, or maybe they simply access, then mess it up, then fix it. (today regrettably is my wife's funeral) I don't need the other hassle!!!

The exact same thing happened to me! It sounded so real and like the problems were so urgent. In hindsight I can see all the red flags. Be careful. Call Apple Support directly if anything pops up and you're not sure. My mistake was calling the number on my screen. The pop up  said "call apple support immediately at this number ____" but it was NOT the real number. I should have checked.

I "did" fall for it AND because they highly advised me never buy online or online banking.  I never online bank .  I do buy online.  So when they told me "xxx" is free for them to do because under computer wuarentee .   Their only charge would be it protect all my devices for 1, 2, 5 year protection plans which would cost x amount each.  I chose to pay protection which they insisted I pay by check because my computer was compromised through buying online with credit card.  Dumb blonde wrote a check held it up to my camera and they took a photograph of check.  Long story short I searched this phone number and I found this forum.  Check was canceled .  I contacted apple and they took me step by step what I needed to do to make sure everything they may have installed was taken off etc.  My bank was informed to put a watch on any checks trying to be cashed .  This scam keeps taking photo of my check and changing the name of company obviously in different handwriting and trying to cash it AGAIN.  If anyone has fallen for "safer to use a check" with this scam make sure your bank puts a watch on your account.