0800-014-8604 Pop-Up Removal Guide

Threat Level:
7/10
Rate this Article:
Comments (0)
Article Views: 773
Category: Fake Warnings

0800-014-8604 Pop-Up is a newcomer on the front of technical support scams and “proudly” follows its predecessors, including “+1-800-236-1513,” “Microsoft Security essentials +1-888-496-5150,” and “License has Expired +1-888-303-5121.” This is indeed a fake alert message that can pop up in your browser if you get redirected to a certain malicious webpage set up by cyber criminals. This page may look like an authentic Microsoft security center to the untrained eye, but you should know that this is a total scam aimed at your wallet. Although we have found that currently this malicious site may not be working, the server it is hosted on gives home to a number of other similar threats, too. In any case, should you encounter this fake alert, do not fall for it and do not call the emergency phone number given to you. In fact, you should remove 0800-014-8604 Pop-Up and all possibly related and harmful applications as well.

This malware infection may show up in your browser after you click on the wrong web content, such as a corrupt link, a banner, or pop-up ad, but it is also quite likely that your computer is infected with adware that can redirect you to this malicious page (continuescanx.xyz). If you do not want to end up being scammed by 0800-014-8604 Pop-Up, you should avoid suspicious websites, including torrent, shareware, porn, and gaming pages. These are packed with unsafe third-party contents, such as fake buttons, fake notification, and so on. Clicking on these can easily redirect you to this malicious page or drop a package of malware infections onto your system. In other words, seeing this fake alert on your screen could also indicate the presence of other, potentially more dangerous malware threats, such as adware programs, browser hijackers, Trojans, backdoors, and potentially unwanted programs. This is why you should not hesitate to use a reliable online malware scanner after you delete 0800-014-8604 Pop-Up from your system.

As we have already mentioned, it is also possible that your computer is infected with adware, which would mean that you are never really safe while surfing the net. This infection may spy on you as well as hijack legitimate third-party ads. An ad-supported program may show you a flow of annoying ads that can take you to malicious sites like this one or drop a bundle of threats onto your machine. No wonder why we keep emphasizing how vital it is for you to make sure at all times that your system is completely clean and secure. Do not think for a second that it will be enough for you to delete 0800-014-8604 Pop-Up alone. Once you use a proper security tool to scan your computer, you will see what you are up against.

Our research shows that this malicious website could be down for the time being. In any case, it is important that we talk about it and share what might hit you even if in a bit different form or name in the future. When you get hit by this fake alert, you suddenly get redirected to this page that resembles an authentic Microsoft security center and a pop-up window appears informing you that your computer has been blocked due to a supposed infection and “suspicious activity” on your system. You are warned not to close this page but, instead, you should call 0800-014-8604 immediately to sort out this “critical” issue. This is how a lot of users are easily deceived since they just would not know better.

You should know that calling this number would not give you a real and authentic Microsoft technician. Instead, you would talk to a sales person trying to sell you some useless system fixing tool or service. This may cost you up to a few hundred dollars if you are gullible enough to believe that there is a critical problem with your computer and nothing else can help. Fortunately for you, we are here to give you another option: With our help you can remove 0800-014-8604 Pop-Up from your computer. So let us tell you how.

While it is possible that your fake alert infection was not due to a previous malware infection and you were simply redirected from another malicious website, our experience shows that there could be a number malware threats on your system anyway. Although we cannot tell you a specific adware program that could be responsible for this malicious redirection, we suggest that you scan your list of installed programs in Control Panel for any suspicious application you may find. Once you uninstall what should not be there in the first place, you could also remove all questionable browser extensions by resetting your main browsers. Please use our instructions below if you need assistance with these steps. However, it is still possible that even after going through all this cleaning spree, more covert threats might remain hidden on your system. Therefore, we recommend that you use a trustworthy malware removal tool, such as SpyHunter to automatically protect your PC from all possible malware infections.

How to remove 0800-014-8604 Pop-Up from Windows

Windows XP

  1. Open the Start menu and navigate to Control Panel.
  2. Click Add or Remove Programs.
  3. Select the suspicious application and press Remove.

Windows Vista/Windows 7

  1. Press the Windows button on the Taskbar and choose Control Panel.
  2. Open Uninstall a program.
  3. Select the suspicious application and press Uninstall.

Windows 8/Windows 8.1/Windows 10

  1. Press Win+X and select Programs and Features.
  2. Select the suspicious application and press Uninstall.

How to remove 0800-014-8604 Pop-Up from your browsers

Google Chrome

  1. Press Alt+F and select Settings.
  2. At the bottom, click Show advanced settings.
  3. At the bottom, click Reset settings.
  4. Click Reset in the confirmation window.

Mozilla Firefox

  1. Press Alt+H and select Troubleshooting Information.
  2. Click Refresh Firefox and click Refresh Firefox in the confirmation window.

Internet Explorer

  1. Press Alt+T and select Internet Options.
  2. On the Advanced tab, click the Reset button.
  3. Select the Delete personal settings checkbox and press Reset.
  4. Press Close.
Download Remover for 0800-014-8604 Pop-Up *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

0800-014-8604 Pop-Up technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1icthis.exe32768 bytesMD5: f8d05067c46aff0980dfde8f3c40529b
21201639702.dll12800 bytesMD5: 6c234ca9f443d5816350c2a3e5bd673b
3sbun.exe10752 bytesMD5: 2ec33cd42dedffd46937e37019e78d88
4ofcpi.dll13312 bytesMD5: ac935d13e926eef415783e75ba3004ce
5isfmdl.dll
6antzozc.dll
7vipextgpk.dll262144 bytesMD5: 3e96379b19eedae04b3d8689dfd375d4
8qhcvdw.dll13312 bytesMD5: 9d51df368526b5595f2fd93460c63b1f
91203140349.dll12800 bytesMD5: 4b9e158462dc58a175c037de771a71c5
10hdtip.dll192512 bytesMD5: 0132b556cc1362d1e3886eda497e464f
111202030455.dll
12isfun.exe14848 bytesMD5: 86d0920892fb572988749e875eee63db
13vipextpxm.dll253952 bytesMD5: c68aac77a1765862a72090fd22b3a31e
14dumpserv.com
15vipextnog.dll262144 bytesMD5: 049fc6cd336cb14455fde37980cdf550
16sysdivx.dll219648 bytesMD5: b8885391a6386bba663ae31ce317668f
17zxserv0.com
18sbsm.exe
19werbettxf.dll245760 bytesMD5: ce170804b323d997aa70fbed1bf11bc3
20ictun.exe12288 bytesMD5: e641a9a5738bea3e1f98be32389530d3
21hp[X].tmp
22dumpserv.com nvctrl.exe
23msmsgs.exe
24uimcu.dll
251203634438.dll
26scu.exe11264 bytesMD5: d87e641e0223633ad0da2c7fd4598f89
27dtjby.dll7168 bytesMD5: 0ff460a6ced96fdf0600c2acb8798db7
28isfmntr.exe34816 bytesMD5: e0ef309928e4176eb996a80a809297cc
29wamdl.dll88064 bytesMD5: b4842292aa52007d092c4d3cb9cc6404
301198448799.dll
31G2-tmp.exe
32iinqyl.dll
33laf1.exe19968 bytesMD5: ca3aa637685f5234a042ed69eeb76415
34waun.exe10240 bytesMD5: bc863ff018285b1cb8d4fa525306fd1f
351203846321.dll12800 bytesMD5: 04210cd3ddd6ece4f8c89de59628b53c
36werbetpwg.dll278528 bytesMD5: d372c730ce9bb45b08053af84210ddc2
37Trojan.Zlob|eulbn.dll
38vnp7s.net
39ncompat.tlb
401202650266.dll
41findsiteonline.dll15872 bytesMD5: 36c81dfa646364217fcf1530e9529513
421201639705.dll14848 bytesMD5: 45f8e9d32c66904bedc012950e2f0994
431202567261.dll12800 bytesMD5: 1bc6ed4840ce710aa2ca9416f24398af
44nczupfw.dll12800 bytesMD5: d0615ec6547926e5ece30d4ef3b092cd
45werbetlrw.dll278528 bytesMD5: ac7ed70da85717d60396a2ebdf26e8c7
46uninst.exe37343 bytesMD5: df4298abdbd2aa77beb8b2fdb584ed76
47G5-tmp.exe
481198448796.dll
49sbmntr.exe
50sbmdl.dll
51scm.exe
52msvol.tlb
53ictmdl.dll
54fsehfcu.dll13312 bytesMD5: acf0ee0c6d8ad7b7cb1d8d11b7343c3d
55voipwet.dll192512 bytesMD5: 3e3e70c7897bad4d4aa57ae7c6e786c3
56scit.exe

Memory Processes Created:

# Process Name Process Filename Main module size
1icthis.exeicthis.exe32768 bytes
2sbun.exesbun.exe10752 bytes
3isfun.exeisfun.exe14848 bytes
4sbsm.exesbsm.exe
5ictun.exeictun.exe12288 bytes
6dumpserv.com nvctrl.exedumpserv.com nvctrl.exe
7msmsgs.exemsmsgs.exe
8scu.exescu.exe11264 bytes
9isfmntr.exeisfmntr.exe34816 bytes
10G2-tmp.exeG2-tmp.exe
11laf1.exelaf1.exe19968 bytes
12waun.exewaun.exe10240 bytes
13uninst.exeuninst.exe37343 bytes
14G5-tmp.exeG5-tmp.exe
15sbmntr.exesbmntr.exe
16scm.exescm.exe
17scit.exescit.exe

Registry Modifications:

The following Registry Keys were created:

  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
  • {B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • {2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
  • {a6d478c6-7961-4fe9-be4b-e621dd640112}
  • 10C52A42-DB8B-4ade-AA4A-CED6A8282B85
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • BA0BACB5-FC95-451E-94D2-4959AB0949D2
  • Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • {c0ca766d-060c-48e1-b536-205e321bd174}
  • F10587E9-0E47-4CBE-84AE-7DD20B8684CC
  • Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
  • F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
  • {C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • E404.e404mgr
  • {E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
  • Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • {23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • {aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
  • {747e1fbe-b70f-441d-bbca-6e536c04924a}
  • {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • {ab75cc7d-2751-4144-a278-5462d5a5884c}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
  • Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • {F7D09218-46D7-4D3D-9B7F-315204CD0836}
  • {81705D67-3F73-4983-859B-97D0922E5ABE}
  • E404.e404mgr.1
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
  • {499B8A53-5949-4625-A8BF-A4D934AFC9DA}
  • {41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • {F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
  • c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
  • Online Add-on
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
  • {6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • {60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
  • {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
  • {10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
  • {27cb634d-c84e-4c00-9b53-f5523601dbad}
  • HKEY_CURRENT_USER\Software\Online Add-on
  • {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  • {D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • NetProject
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • {F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • Microsoft\Windows\CurrentVersion\Uninstall\Web Application
  • 7265100a-17e1-41bf-bd08-63b95a25a9c3
  • HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *