Has any one had this happen?

i used the www.yootube.com to get the microsoft scam and he connected to my vm and had me run a couple of commands to see what was “attacked” the pretty common stuff like they are troubleshooting. then he had me run a command in cmd and had me repeat it the results to him and it said "illegal activities found on p*****b.com child pornography downloaded, and then he disconnected. has anyone had this happen to them cause thats a first for me. i havent found anything he put on so far so anyone run into the same thing, sorry its so long im new to scambaiting and this one actually made me a little nervous.

Maybe he discovered you were on a VM?
I wouldn’t have a clue how to set one up, let alone disguise it, but I know there are tutorials out there for that.
You kept him occupied for a little while, anyway.

1 Like

what they did was very common. They either has you run the netstat or the tree command and stopped it and it had that stuff on there. Let me guess it happened at like 4-6 am in the morning. Then wanted to “secure your bank” If the used a program called connectwise or something close the only way to see if its still there is look in your process. Thats what some of these scumbags use to instill fear to get u to do as they want. Just check for that program otherwise your golden.

1 Like

He had me use netstat and a tree command when it popped up, it was 12:30pm when it happened and after that he gave me a bunch of letters and numbers and said he was reporting me and then disconnected from it all. And didnt even try to fix my so called problem. He did say in about 24 hours ill be getting a call from a investigator, so do you think he put a exe file in and actually hid anything on my vm?

OMG LOL He was super pissed. No your totally good. Did he black out your screen as well? if so there are ways around that as well. Like I said in the process look for screen connect or something similar. Otherwise your totally in the clear. If it was on your Vm you really have nothing to worry abt really

Just delete the VM you used and start fresh with a presaved clone if you have one.

Those scams are evil. Truly. One of those that can really make ya angry. Good on ya for not teaching through it phone and throttling them!