Network Security Breach Tech Support Scam

What is Network Security Breach Tech Support Scam?

Cybersecurity experts at Anti-spyware-101.com have recently tested a scam program known as Network Security Breach Tech Support Scam that locks your computer’s screen and says that your Windows product key has expired or has been corrupted. It promotes a fake Microsoft tech support phone number that might try to sell you a fake Windows activation key. To use your PC again, you have to remove this scam program, and you need not to call the fake techies to do that. In this article, you will find out everything you need to know about this malware.

What does Network Security Breach Tech Support Scam do?

Once on your PC, Network Security Breach Tech Support Scam will lock your computer’s screen. The lock screen features a Windows-7-type background image that is distorted if you run your PC on 4K or 1080p. If you run it on 720p, then the image is shown without distortion. On top of this background image, this scam program opens a dialog that says that your version of Windows has been corrupted or expired and says that you need to enter a valid product key to use your PC again. The only way to get that fake key is to call 1-884-872-8686 to get into contact with scammers posing as Microsoft’s tech support personnel. They should ask you for your credit card details and offer you to buy a new product key. Also, it is worth mentioning that the people masquerading as Microsoft’s employees will most likely talk with a strong Indian accent but introduce themselves using native English names.

The good news is that you can avoid paying the scammers altogether. You can simultaneously press Ctrl+Shift+S, and the lock screen will be terminated. Alternatively, you can enter h7c9-7c67-jb or g6r-qrp6-h2 or yt-mq-6w in the Product Key line but they are not guaranteed to work as there are at least two versions of Network Security Breach Tech Support Scam, so one of them might not accept these codes.

Where does Network Security Breach Tech Support Scam come from?

Our cyber security experts have concluded that Network Security Breach Tech Support Scam is bundled with a program called PCCleaner. This program’s installer is modified to inject this scam program secretly, and you most likely will not be able to deselect its installation. The corrupted version of PCCleaner is probably featured on shady freeware websites that hide the fact that the programs were secretly bundled with additional software. As a result, you PC can become infected with malware such as Network Security Breach Tech Support Scam.

How do I remove Network Security Breach Tech Support Scam?

We hope you found this article insightful. As you can see, this scam is quite believable, and certain people can be tricked into calling the provided number and reveal their banking details so that the scammers could steal their money or just purchase a fake activation key that will not be cheap. The good news is that you can remove this scam program without experiencing negative consequences. Please follow the instructions below to get rid of it.

Removal Instructions

1. To terminate the lock screen, press CTRL+SHIFT+S or enter h7c9-7c67-jb or g6r-qrp6-h2 or yt-mq-6w in the product key line and press the arrow button.
2. Hold down Windows+E keys.
3. Type %PROGRAMFILES% and/or %PROGRAMFILES(x86)% in the address box.
4. Press Enter.
5. Find PC Cleaner Inc, right-click it and click Delete.
6. Then, type %Windir% in the address box and hit Enter.
7. Find microsoft.exe, right-click it and click Delete.
8. Close the File Explorer.
9. Empty the Recycle Bin.
10. Hold down Windows+R keys.
11. Type regedit in the dialog and click OK.
12. Go to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
13. Right-click Shell and click Modify.
14. Change the value data from microsoft.exe to explorer.exe and click OK.
15. Then, navigate to the following registry keys.
    • KLM\SYSTEM\ControlSet001\Control\SafeBoot
    • HKLM\SYSTEM\ControlSet002\Control\SafeBoot
    • HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot
16. Right-click AlternativeShell and click modify.
17. Change the value data from microsft.exe to cmd.exe and click OK.
18. Close the Registry Editor. Download Removal Tool100% FREE spyware scan and
    tested removal of Network Security Breach Tech Support Scam*

Stop these Network Security Breach Tech Support Scam Processes: