A new hacking team has been reported to distribute a lock screen type of Trojan which impersonates a fake BSOD alert after which prompts users to call the posted number for assistance. Unlike the conventional fake BSOD tech support scams, this particular type of scam is initiated directly on the computer, instead of the web browser, locking the entire system down. All users who have seen a blue screen alert with any number, especially 1-888-479-3649 provided In it should be advised that this is a scam attempt on their money or personal information. Experts advise to use an advanced anti-malware tool and follow the instructions after the article to get rid of Buzzing Dhol tech support Trojan.
|Type||Tech Support Lockscreen Malware|
|Short Description||The malware may lock the user’s screen displaying a fake BSOD alert and prompting to call a tech support number.|
|Symptoms||The user may witness a blue screen displaying a number of “customer support representatives”.|
|Distribution Method||Via PUPs, installed by bundling (Browser Hijackers) or by visiting a suspicious third-party site that is advertising it.|
|Detection Tool||Download Malware Removal Tool, to See If Your System Has Been Affected by 1-888-479-3649 Malware|
|User Experience||Join our forum to discuss 1-888-479-3649 Malware.|
1-888-479-3649 Trojan – How Does It Infect
The malware is associated with an ad-supported application, known as Buzzing Dhol. It is reported to be connected to software that claims to allow users to follow various events. This ad-supported software may have arrived on your computer, via bundling. This means that it may have been included as a free extra to a free program you may have downloaded online, similar to the example below:
Since such software may display various advertisements and cause browser redirects linking to third-party websites, you may have been transferred to a malicious URL with the 1-888-479-3649 trojan.
1-888-479-3649 Trojan In Detail
Once activated on your computer, the malware drops an image with the fake BSOD. Bleeping computer has reported the following image displaying an error that is connected to a virtual drive initialization.
The original error message looks like the following:
The fake error message that has been reported by researchers at BleepingComputer is the following:
When the cell phone number itself was researched, it was established via EveryCaller that it appears to originate from the US. However, this may not be its actual location.
Not only this, but users have also reported for the “customer representatives” who are on the other side of the phone to be posing as Microsoft Employees. Not only this, but some users have reported them to have Indian accents. This is very common for tech support scams since most scammers have such accents.
Unlike other tech support scams, for example the 1-855-213-4353 Tech Support scam, that are simply URLs that lock the browser with a reappearing pop-up and display an audio message, this particular scam is malware that is directly installed on the computer. The executable of the malware may run as an active process in the Windows Task Manager and may prevent you from accessing any other application. Not only this but since this is reported to be a Trojan Horse, it may also collect information stored on your computer such as:
- Browsing History.
- Financial Information.
Not only this, but the scammers are reported to want access to your computer, and they may install other malware such as a Banking Trojan.
Remove 1-888-479-3649 Trojan from Your Computer
Since infections by this malware may vary, we have designed a general solution to help you permanently remove this malware and unlock your screen. To do this, you need to clean up the registry entries of your computer and also remove the malicious processes. Not only this, but you may also have other malware residing on your computer. This is why it is strongly advisable to scan the infected computer in safe mode for malware and PUPs (Potentially Unwanted Programs).