I was called by someone (Alex) today supposedly from the Geek Squad working on behalf of Microsoft. He claimed that my laptop sent an error file to Microsoft. I was very suspicious but to played along. He had me open the Task Mgr and look for file CSRSS.EXE under the "Services" tab. He then acted mildly concerned when I told him the user name and description were blank. Next, I ran the MSCONFIG to see how many MS service apps in the "Stopped" status, which were quite a few. His concern raised another level. I then queried him about the legitimacy of this phone call. He attempted to convince me that everything is legit and gave me a phone# 1-855-481-5399. I still was suspicious, and continued along. I was then asked to download a file called ShowMyPC3161.exe from www.showmypc.com. That is when I asked him if he knew my name. Because as a registered MS OS user they should have my basic info. He got a bit edgy with me. When I told him the name he had given did not belong to anyone in my household or nor did I know anyone of that name he soon hung up.
This was a well played scam. I later did some investigating and found that MS service files are not always in a "Running" status and that my CSRSS.EXE was not compromised. I did have fun calling his bluff, but this ordeal could have been damaging to an unsuspecting victim.
This was a well played scam. I later did some investigating and found that MS service files are not always in a "Running" status and that my CSRSS.EXE was not compromised. I did have fun calling his bluff, but this ordeal could have been damaging to an unsuspecting victim.