'888-791-9614' Pop-Ups

The security reports that promote HelpDesk services on the '888-791-9614' phone line should not be trusted. We have received reports that Web surfers are directed to call the '888-791-9614' toll-free phone line via 'support.windows.com says' pop-ups. The '888-791-9614' pop-up windows may include an error code that reads 'Error # 0x80072ee7,' but that is not an error code used by Microsoft Corp. The 'support.windows.com says' notifications are generated on untrusted pages like becomesyourpresent[.]tk that is registered to the 195.20.42.145 IP address. The '888-791-9614' notifications are tailored to look like personalized security messages from h[tt]ps://support.microsoft[.]com/en-us that is the legitimate support page for Microsoft customers. However, becomesyourpresent[.]tk is flagged as a phishing domain that is used by con artists to lure PC users into paying hundreds of dollars for technical support they do not need. The '888-791-9614' Tech Support Scam involves the following text:

'Windows Warning Alert
malicious Spyware/Riskware Detected
Error # 0x80072ee7
Please call us immediately at 888-791-9614
Please do not ignore this critical alert.
If you dose this page, your computer access will be disabled to prevent further damage to our network.
Your computer has alerted us that it has been infected with a virus and spyware. The following information is being stolen:
Facebook Login
Credit Card Details
Email Account Login
Photos stored on this computer
You must contact us immediately, so that our engineers can walk you through the removal process over the prone to protect your identity. Please call us in the next 5 minutes to prevent your computer from being disabled or from any information loss.
Toll Free 888-791-9614'

It is recommended to use a content filter extension and block access to pages with the text listed above. You should not follow the instructions listed on becomesyourpresent[.]tk or call 888-791-9614. Con artists might invite you to download a remote desktop client and give them access to your desktop. PC users should consider reporting questionable pages that are using screenshots of h[tt]ps://support.microsoft[.]com/en-us and help computer security vendors keep their defenses up-to-date. You may want to add a reputable anti-malware shield to your system that can suppress messages from the following domains associated with becomesyourpresent[.]tk:

7jhyuer7ring[.]tk, but-whether[.]tk, change-their[.]tk, ghesx0supp[.]tk, moji9pickup[.]tk, nowcallingteh1201234567[.]tk, nowcallingteh1201234567890[.]tk, nowcallingteha100123[.]tk, nowtehcall0701[.]tk, nowtehcall07012[.]tk, nowtehcall07012345[.]tk, onlysapport103011234567890[.]tk, oonlysapport60301123456[.]tk, opputacallthrough8[.]tk, qquicklysapp0rt6060112[.]tk, qquicklysapp0rt606011234[.]tk, qquicklysapp0rt6060112345[.]tk, qquicklysapp0rt606011234567[.]tk, quicklysapport6060112345[.]tk, richsapport6050112[.]tk, richsapport61201123456[.]tk, rrichsapport60501123456[.]tk, rrichsapport6070112345[.]tk, sapportbest6020112[.]tk, sapportn0ble60601123[.]tk, sapportn0ble606011234[.]tk, sapportonly605011[.]tk, sapportrich6060112[.]tk, seeyourfuture0now[.]tk, ssapportbest6020112[.]tk, ssapportfierst60201123456[.]tk, ssapportn0ble60601123456789[.]tk, ssapportnoble6040112345[.]tk, ssapportnoble60401123456[.]tk, ssapportonly6050112[.]tk, ssapportonly60501123456789[.]tk, ssapportrich60401123[.]tk, ssapportrich60601123[.]tk, ssapportrich613011[.]tk, ssapportrich6130112[.]tk, ssapportrich613011234[.]tk, supp0rt4uteh0701234567[.]tk, supp0rt4uteh070123456789[.]tk, take-arrive[.]tk, tehacallhere08012345[.]tk, tehcallfast12012[.]tk, tehcallfast120123456[.]tk, tehcallfast12012345678[.]tk, tehcallfast1201234567890[.]tk, tehcallinghere0701[.]tk, tehcallinghere0701234[.]tk, tehcallinghere080123456[.]tk, tehcallinghere0801234567890[.]tk, tehgoodsupp0rt07012[.]tk, tehrightcall11012345[.]tk, tehrightcall110123456[.]tk, tehrightcall11012345678[.]tk, uijk1getbackto[.]tk, uyvg8tech[.]tk, we11tehcalling11012345[.]tk, we11tehcalling1101234567[.]tk, we11tehcalling11012345678[.]tk, welksupp0[.]tk, wellcallingteh100123[.]tk, wellcallingteh100123456789[.]tk, wemn0tech[.]tk, yahim8fast[.]tk, ytttyu5phone[.]tk