Skip to content
  • Active
  • Severity: Medium
  • Adware
  • Windows, Mac
  • Verified · Feb 2019

How to remove Tech Support Scam virus

A step-by-step removal guide for affected devices. Follow the verified procedure below — most readers complete it in under 10 minutes.

Gabriel E. Hall · Passionate web researcher

Tech Support Scam is a virus-related application that takes advantage of naive computer users

Tech Support scam virus image

Tech Support Scam virus – a cyber threat which relies on social engineering. The scam has been operating as a deceptive message claiming that the user's computer is infected, compromised or blocked due to different reasons. However, we can assure you that these pop-ups are fake and that your system is targeted by Tech Support scammers who are willing to trick you into contacting them via the given number. This type of scam involves both computer and phone technologies to extort money from computer users. The criminals involved in such scams usually employ tech knowledge and also human psychology to involve their victims into their fraudulent calls. After being contacted, Tech Support scammers either install suspicious software or simply sign up victims to services which they don't need.

Name Tech Support Scam
Sub-type PUP/adware
Danger level Medium
Distribution Infected sites, rogue programs
Prevention Avoid suspicious websites, do not install software from unknown sources, use Custom mode while installing freeware to deselect questionable additions
Detection FortectIntego can detect the PUP and related entries
Removal Remove the rogue app by using manual or automatical technique

Even though the scammers might invent fake companies, they typically work under famous names, such as Microsoft Tech Support, Apple Support, etc. They try to trick the users into obtaining unnecessary products or services which may not even exist. If they do exist, though, they may be merely non-functional or also hazardous to the PC.

Therefore, if you ever see a notification on your computer, claiming that your system is infected with malware or some other system malfunction has unexpectedly occurred, carefully inspect and evaluate this message before taking action[1]. Note that you cannot get a Tech Support Scam refund if the criminals manage to swindle money from you. 

Likewise, the smartest choice would be ALWAYS to use professional anti-malware software to help you avoid phishing attacks and protect your system from real cyber infections. For that, we suggest using FortectIntego since it is developed to ensure a quick and safe Tech Support Scam removal for regular computer users.

Additionally, we will attach manual elimination instructions which will show you how to remove the Tech Support Scam virus from both, Windows and Mac operating systems. The only thing we ask is to follow the guide attentively to avoid any misunderstandings and computer damage.

Tech Support Scam virus

The peculiarities of how Tech Support Scam virus functions

This Tech Support Scam popup begins with a computer infection. Usually, people unconsciously infiltrate a potentially unwanted program called adware[2] on their systems. It might reach your computer via software-bundles or other deceptive distribution techniques.

Adware program starts delivering Tach Support Scam warnings not only on suspicious websites but they might appear on your frequently visited sites as well. So, there is actually no way of indicating what websites you should avoid. Of course, it is always recommended to keep away from obscure and less than reputable sites, but remember, there are no guarantees that such dubious ads will not pop-up on your favorite news page or social networking site as well.

It is difficult to pinpoint what exactly do these ads claim because there are numerous different versions and Tech Support Scam numbers currently roaming the Internet and every one of them may use their tricks to outwit you. The scammers may pretend to be representatives of Windows Helpdesk, Windows Service Center, Microsoft Support or similar supposedly Apple Help Center.

What is know for sure, though, is that these notifications may feature security-related warnings about malware infections or offer you to obtain a subscription to remote technical support to solve your computer’s issues. These notifications always indicate a Tech Support phone number which the user should call to receive or purchase these services.

Unfortunately, if you tried calling the number, you would be immediately connected to a Tech Support scammer rather than a remote professional technician or the Microsoft[3] representative. In such a case, you should hang up at once and scan your computer for malware responsible for generating these warning messages.

Learn how to identify an attack by scammers

Recently, we have received a report about new Tech Support Scam India warning — the user has received a pop-up claiming that his personal information might be leaked. Following that, he was encouraged to call via the provided number to fix this “issue.”

The person behind the phone claimed that he is a Microsoft representative and asked to give remote access to the computer. Later, the user was asked to pay $90 for a three-month support subscription. However, this was merely a phishing attempt which led to considerable financial loses.

Note that giving remote access[4] to your system is extremely dangerous — criminals can easily infiltrate various computer hazards to force you to continue using their fraudulent services. Also, by calling them, you unconsciously provide your phone number which might be later used for further phishing attacks.

Therefore, follow these steps to identify a scam popup:

  1. Check the URL in the address box it should differ from https://www.microsoft.com/ or https://www.apple.com/;
  2. Copy the provided so-called support number and check it online (Usually, such numbers have a vast of negative reviews and reports;
  3. See if you can just close the tab/window and the alert disappears;
  4. If you called the “support,” any demands to access your system remotely or purchase an expensive security software indicate a scam.

Ways to protect your computer from adware

The illustration of Tech Support scam virus

Since such deceptive alerts appear due to the presence of an adware program, the distribution of this virus is similar to other potentially unwanted programs'. You can easily infect your system by not paying attention when you download/install free applications online.

To prevent this, you should take your time when installing newly downloaded software and always choose the Advanced/Custom installation mode. Also, remember that you must opt out suspicious or unnecessary software package components in the program’s setup if there are any.

Also, be security-cautious online as well. Refrain from visiting unreputable sites, do not click on suspicious links and advertisements. This will help you stay a few steps further from getting infected with such malware. However, do not cross out the possibility of getting infected and equip your system with tools capable of indicating and removing the infection. 

The list of Tech support scam virus strains

Adobe Flash Tech Support Scam virus has recently emerged on the cyberspace with the same goal — to swindle money from gullible people. According to the research, it spreads together with freeware or comes as a fake Adobe Flash Update. Once it settles on the system, users receive a message claiming that Windows has been blocked due to suspicious activity and the phishing attack begins.

Pretending to be representatives from Microsoft, these scammers will urge the user to dial 1-888-322-9655 in order to contact remote technicians and “fix” the supposed issue. In reality, the extortionists are simply trying to gain full access and control of the user's computer or attempting to swindle out sensitive information such as credit card details or online banking credentials.

In case you suspect you have become a victim of Adobe Flash Tech Support Scam, cut the network connection immediately and block bank accounts you've provided the scammers the access to.

Microsoft Inc Warning! Support scam virus. Just like most tech support scams, this parasite also operates on behalf of Microsoft technical support. The program is designed to drop notifications alerting the victim about a Trojan virus infection, tricking the user into believing that his/her sensitive information, including banking details, credit card information and account passwords are at risk.

To stop this supposed invasion, the user has to ring up the “Microsoft technicians” with a toll-free number 1-844-507-3556. Of course, the purpose of such a call is entirely different to what the users are made to believe. During the conversation, the scammers may try to convince the victim that his/her computer state is critical and that he/she must buy some security utility to repair it.

Also, they may try to gain the computer's administrative, steal the sensitive information stored on it or install some malicious keylogging software to spy on the victim even after the Microsoft Inc Warning! Support scam virus is eliminated from the computer. 

Error 268D3-XC00037 Tech Support scam virus generates pop-ups that issue the message claiming that “YOUR COMPUTER HAS BEEN BLOCKED.” At the end of this warning notification, the user is provided a phone number (+18886098597) to call for help.

Tech Support scam virus displaying fake Error 268D3-XC00037 message

Again, instead of being put through to the technicians from Microsoft, the users who call this number fall into the trap of the fraudulent salespeople that only try to sell them fake products or services. On top of it all, the virus blocks the victim from accessing security sites and downloading security-related software.

Such program must be terminated without hesitation or delay. In case you provided some of your personal details to the scammers, you should also contact the corresponding institutions, to protect yourself from identity theft or financial loss.

Uninstall Tech Support Scam virus and avoid phishing attacks in the future

If you have followed the steps provided above to identify Tech Support Scam virus and found one on your system, not NOT call via the provided number. In case you are asked to give some personal details, do NOT do that as well. Remember, any personal information might be used to gain money from you.

If it is too late for that and you have already given your details and free access to your computer to the criminals, there might still be time to prevent further damage. If the scammers are still connected to your system, terminate the connection immediately. Close the remote access application or reboot the computer.

You can quickly get rid of Tech Support Scam popup by uninstalling the adware from your computer. However, you should first scan the system with a robust anti-malware software to identify whether hackers managed to infiltrate other high-risk computer infections on your PC.

Experts from NoVirus.uk[5] warn that criminals may have installed some key-loggers, Trojans or worms on your computer to spy on you in the future and steal your data. In this case, it would be impossible to detect and remove all potentially dangerous programs on your own. In fact, by doing that you might even permanently damage your system.

Likewise, you should remove Tech Support Scam with professional security software and let it scan your system for other infections. After that, it is important to make sure that criminals won't be able to use the gathered personal information (If they have collected it) in the future. For that, change your system passwords, all the social, email login details, and your online banking passwords.

If you went even further and provided the criminals with your credit card information, inform the credit card company or related bank about it, and they will inform you about the further steps that need to be taken to protect your account. Also, if the crooks are now aware of your sensitive information, such as SSN, home address, date of birth, etc., you should contact the FTC’s and inform them about the potential identity theft.

Finally, after Tech Support Scam removal, you might need to reset your browser settings. We have prepared the instructions on how to do that for all most popular browsers, such as Google Chrome, Mozilla Firefox, Safari, Microsoft Edge, Internet Explorer, etc. You can find them at the end of this article.

Picture of Tech Support Scam virus

Uninstall from Windows

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows

Delete from macOS

Remove the unwanted application:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).Uninstall from Mac

Delete leftover files and folders:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
  3. Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.Delete leftover files from Mac
  4. Finally, empty the Trash to permanently remove the leftovers.

Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Remove from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select the unwanted extension and click Remove.Remove extensions from Firefox

Reset the homepage:

  1. Click three horizontal lines at the top right corner to open the menu.
  2. Choose Settings.
  3. Under Home, set your preferred homepage and new tab settings.

Clear cookies and site data:

  1. Click Menu and pick Settings.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data...
  5. Select Cookies and Site Data and Temporary cached files and pages, then click Clear.Clear cookies and site data from Firefox

Reset Mozilla Firefox

If clearing the browser as explained above did not help, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox...
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.Reset Firefox 2

Remove from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Delete from Safari

Remove dangerous extensions:

  1. Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
  2. Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.Remove extensions from Safari

Clear history and website data:

  1. Click Safari in the menu and pick Clear History.
  2. Set Clear to all history and confirm with Clear History.Clear history from Safari

Reset Safari:

  1. Click Safari in the menu and select Preferences > Advanced.
  2. Enable Show Develop menu in menu bar.
  3. From the menu bar, click Develop and select Empty Caches.Reset Safari

Did this guide help?

3 comments

  1. Neil Person

    Ive been scammed once.. Never trusting any suspicious Support offers again...

  2. robert355

    Ive lost nearly 500 dollars to a antivirus utility subscription that did not even work.... Thats what I call scamming

  3. Danni

    How gullible do they think people are? I would never trust my PC to some suspicious crooks

Spyware News
Privacy preferences

We use cookies to improve your experience and analyze traffic. Some cookies enable embedded content like videos and social posts. Choose what you allow — you can change this anytime.