Hey you,
BE IN THE KNOW!

35,000 ransomware infections per month and you still believe you are protected?

Sign up to receive:

  • alerts
  • news
  • free how-to-remove guides

of the newest online threats - directly to your inbox:


Remove 1-888-479-3649 Tech Support Malware and Unlock Your Screen

A new hacking team has been reported to distribute a lock screen type of Trojan which impersonates a fake BSOD alert after which prompts users to call the posted number for assistance. Unlike the conventional fake BSOD tech support scams, this particular type of scam is initiated directly on the computer, instead of the web browser, locking the entire system down. All users who have seen a blue screen alert with any number, especially 1-888-479-3649 provided In it should be advised that this is a scam attempt on their money or personal information. Experts advise to use an advanced anti-malware tool and follow the instructions after the article to get rid of Buzzing Dhol tech support Trojan.

Name 1-888-479-3649 Malware
Type Tech Support Lockscreen Malware
Short Description The malware may lock the user’s screen displaying a fake BSOD alert and prompting to call a tech support number.
Symptoms The user may witness a blue screen displaying a number of “customer support representatives”.
Distribution Method Via PUPs, installed by bundling (Browser Hijackers) or by visiting a suspicious third-party site that is advertising it.
Detection Tool Download Malware Removal Tool, to See If Your System Has Been Affected by 1-888-479-3649 Malware
User Experience Join our forum to discuss 1-888-479-3649 Malware.

1-888-479-3649 Trojan – How Does It Infect

The malware is associated with an ad-supported application, known as Buzzing Dhol. It is reported to be connected to software that claims to allow users to follow various events. This ad-supported software may have arrived on your computer, via bundling. This means that it may have been included as a free extra to a free program you may have downloaded online, similar to the example below:

bundling-sensorstechforum

Since such software may display various advertisements and cause browser redirects linking to third-party websites, you may have been transferred to a malicious URL with the 1-888-479-3649 trojan.

1-888-479-3649 Trojan In Detail

Once activated on your computer, the malware drops an image with the fake BSOD. Bleeping computer has reported the following image displaying an error that is connected to a virtual drive initialization.

The original error message looks like the following:

Hal-Initialization-Fail-sensorstechforum

The fake error message that has been reported by researchers at BleepingComputer is the following:

fake-blue-screen-of-death

When the cell phone number itself was researched, it was established via EveryCaller that it appears to originate from the US. However, this may not be its actual location.

number-location-sensorstechforum

Not only this, but users have also reported for the “customer representatives” who are on the other side of the phone to be posing as Microsoft Employees. Not only this, but some users have reported them to have Indian accents. This is very common for tech support scams since most scammers have such accents.

Unlike other tech support scams, for example the 1-855-213-4353 Tech Support scam, that are simply URLs that lock the browser with a reappearing pop-up and display an audio message, this particular scam is malware that is directly installed on the computer. The executable of the malware may run as an active process in the Windows Task Manager and may prevent you from accessing any other application. Not only this but since this is reported to be a Trojan Horse, it may also collect information stored on your computer such as:

  • Passwords.
  • Browsing History.
  • Financial Information.
  • Files.

Not only this, but the scammers are reported to want access to your computer, and they may install other malware such as a Banking Trojan.

Remove 1-888-479-3649 Trojan from Your Computer

Since infections by this malware may vary, we have designed a general solution to help you permanently remove this malware and unlock your screen. To do this, you need to clean up the registry entries of your computer and also remove the malicious processes. Not only this, but you may also have other malware residing on your computer. This is why it is strongly advisable to scan the infected computer in safe mode for malware and PUPs (Potentially Unwanted Programs).

1. Boot Your PC In Safe Mode to isolate and remove 1-888-479-3649 Malware
2. Remove 1-888-479-3649 Malware with SpyHunter Anti-Malware Tool
3. Uninstall your web browser to get it rid of 1-888-479-3649 Malware from it.
Optional: Using Alternative Anti-Malware Tools
NOTE! Substantial notification about the 1-888-479-3649 Malware threat: Manual removal of 1-888-479-3649 Malware requires interference with system files and registries. Thus, it can cause damage to your PC. Even if your computer skills are not at a professional level, don’t worry. You can do the removal yourself just in 5 minutes, using a malware removal tool.

Vencislav Krustev

A network administrator and malware researcher at SensorsTechForum with passion for discovery of new shifts and innovations in cyber security. Strong believer in basic education of every user towards online safety.

More Posts - Website

  • Daniel P. Lyons

    I got this fake BSOD message on my computer (on April 24, 2016) when attempting to get the portable software I want. Once I finished the installation of the software I want, lots of programs that I don’t already use get on my computer. Later, I did try restarting my computer several times, and later, I got this fake BSOD yet again.

    So, I have figured a problem to solve. I go to Safe Mode and remove the programs that I don’t use. And few hours later, everything on my computer is back to normal.

    • Hello, Daniel

      From what you said, it appears that you may have installed a so called PUP (Potentially Unwanted Program) on your computer. This has most likely resulted in many advertisements and even malvertising on your computer. Such malicious adverts and browser redirects caused by the PUP may have led to an infected URL (web link) which may have caused a drive-by download or another type of attack on your computer, that may have situated a Fake BSOD Lockscreen. This threat is not that dangerous, but it may cause some headache. It is a good idea that you have entered safe mode to remove it. This means that it was actively running in your Task Manager.

      In case you still get errors while booting your PC, try the following tutorial.
      To fix your registry entries and restore settings in the registry editor see the following instructions.

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.