0800-014-8604 Pop-Up Removal Guide

Threat Level:
7/10
Rate this Article:
Comments (0)
Article Views: 817
Category: Fake Warnings

0800-014-8604 Pop-Up is a newcomer on the front of technical support scams and “proudly” follows its predecessors, including “+1-800-236-1513,” “Microsoft Security essentials +1-888-496-5150,” and “License has Expired +1-888-303-5121.” This is indeed a fake alert message that can pop up in your browser if you get redirected to a certain malicious webpage set up by cyber criminals. This page may look like an authentic Microsoft security center to the untrained eye, but you should know that this is a total scam aimed at your wallet. Although we have found that currently this malicious site may not be working, the server it is hosted on gives home to a number of other similar threats, too. In any case, should you encounter this fake alert, do not fall for it and do not call the emergency phone number given to you. In fact, you should remove 0800-014-8604 Pop-Up and all possibly related and harmful applications as well.

This malware infection may show up in your browser after you click on the wrong web content, such as a corrupt link, a banner, or pop-up ad, but it is also quite likely that your computer is infected with adware that can redirect you to this malicious page (continuescanx.xyz). If you do not want to end up being scammed by 0800-014-8604 Pop-Up, you should avoid suspicious websites, including torrent, shareware, porn, and gaming pages. These are packed with unsafe third-party contents, such as fake buttons, fake notification, and so on. Clicking on these can easily redirect you to this malicious page or drop a package of malware infections onto your system. In other words, seeing this fake alert on your screen could also indicate the presence of other, potentially more dangerous malware threats, such as adware programs, browser hijackers, Trojans, backdoors, and potentially unwanted programs. This is why you should not hesitate to use a reliable online malware scanner after you delete 0800-014-8604 Pop-Up from your system.

As we have already mentioned, it is also possible that your computer is infected with adware, which would mean that you are never really safe while surfing the net. This infection may spy on you as well as hijack legitimate third-party ads. An ad-supported program may show you a flow of annoying ads that can take you to malicious sites like this one or drop a bundle of threats onto your machine. No wonder why we keep emphasizing how vital it is for you to make sure at all times that your system is completely clean and secure. Do not think for a second that it will be enough for you to delete 0800-014-8604 Pop-Up alone. Once you use a proper security tool to scan your computer, you will see what you are up against.

Our research shows that this malicious website could be down for the time being. In any case, it is important that we talk about it and share what might hit you even if in a bit different form or name in the future. When you get hit by this fake alert, you suddenly get redirected to this page that resembles an authentic Microsoft security center and a pop-up window appears informing you that your computer has been blocked due to a supposed infection and “suspicious activity” on your system. You are warned not to close this page but, instead, you should call 0800-014-8604 immediately to sort out this “critical” issue. This is how a lot of users are easily deceived since they just would not know better.

You should know that calling this number would not give you a real and authentic Microsoft technician. Instead, you would talk to a sales person trying to sell you some useless system fixing tool or service. This may cost you up to a few hundred dollars if you are gullible enough to believe that there is a critical problem with your computer and nothing else can help. Fortunately for you, we are here to give you another option: With our help you can remove 0800-014-8604 Pop-Up from your computer. So let us tell you how.

While it is possible that your fake alert infection was not due to a previous malware infection and you were simply redirected from another malicious website, our experience shows that there could be a number malware threats on your system anyway. Although we cannot tell you a specific adware program that could be responsible for this malicious redirection, we suggest that you scan your list of installed programs in Control Panel for any suspicious application you may find. Once you uninstall what should not be there in the first place, you could also remove all questionable browser extensions by resetting your main browsers. Please use our instructions below if you need assistance with these steps. However, it is still possible that even after going through all this cleaning spree, more covert threats might remain hidden on your system. Therefore, we recommend that you use a trustworthy malware removal tool, such as SpyHunter to automatically protect your PC from all possible malware infections.

How to remove 0800-014-8604 Pop-Up from Windows

Windows XP

  1. Open the Start menu and navigate to Control Panel.
  2. Click Add or Remove Programs.
  3. Select the suspicious application and press Remove.

Windows Vista/Windows 7

  1. Press the Windows button on the Taskbar and choose Control Panel.
  2. Open Uninstall a program.
  3. Select the suspicious application and press Uninstall.

Windows 8/Windows 8.1/Windows 10

  1. Press Win+X and select Programs and Features.
  2. Select the suspicious application and press Uninstall.

How to remove 0800-014-8604 Pop-Up from your browsers

Google Chrome

  1. Press Alt+F and select Settings.
  2. At the bottom, click Show advanced settings.
  3. At the bottom, click Reset settings.
  4. Click Reset in the confirmation window.

Mozilla Firefox

  1. Press Alt+H and select Troubleshooting Information.
  2. Click Refresh Firefox and click Refresh Firefox in the confirmation window.

Internet Explorer

  1. Press Alt+T and select Internet Options.
  2. On the Advanced tab, click the Reset button.
  3. Select the Delete personal settings checkbox and press Reset.
  4. Press Close.
Download Remover for 0800-014-8604 Pop-Up *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

0800-014-8604 Pop-Up technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1dumpserv.com
2hp[X].tmp
3G2-tmp.exe
41201639705.dll14848 bytesMD5: 45f8e9d32c66904bedc012950e2f0994
5fsehfcu.dll13312 bytesMD5: acf0ee0c6d8ad7b7cb1d8d11b7343c3d
6sbmdl.dll
7scu.exe11264 bytesMD5: d87e641e0223633ad0da2c7fd4598f89
81203634438.dll
9dtjby.dll7168 bytesMD5: 0ff460a6ced96fdf0600c2acb8798db7
10qhcvdw.dll13312 bytesMD5: 9d51df368526b5595f2fd93460c63b1f
11vipextpxm.dll253952 bytesMD5: c68aac77a1765862a72090fd22b3a31e
12vipextnog.dll262144 bytesMD5: 049fc6cd336cb14455fde37980cdf550
13iinqyl.dll
14ictun.exe12288 bytesMD5: e641a9a5738bea3e1f98be32389530d3
151202030455.dll
16wamdl.dll88064 bytesMD5: b4842292aa52007d092c4d3cb9cc6404
17isfun.exe14848 bytesMD5: 86d0920892fb572988749e875eee63db
18vnp7s.net
19Trojan.Zlob|eulbn.dll
20G5-tmp.exe
21dumpserv.com nvctrl.exe
22sbmntr.exe
23sysdivx.dll219648 bytesMD5: b8885391a6386bba663ae31ce317668f
241203140349.dll12800 bytesMD5: 4b9e158462dc58a175c037de771a71c5
25laf1.exe19968 bytesMD5: ca3aa637685f5234a042ed69eeb76415
26zxserv0.com
27findsiteonline.dll15872 bytesMD5: 36c81dfa646364217fcf1530e9529513
281198448796.dll
29icthis.exe32768 bytesMD5: f8d05067c46aff0980dfde8f3c40529b
30scit.exe
311202650266.dll
321198448799.dll
33isfmdl.dll
34nczupfw.dll12800 bytesMD5: d0615ec6547926e5ece30d4ef3b092cd
35msvol.tlb
36waun.exe10240 bytesMD5: bc863ff018285b1cb8d4fa525306fd1f
37ncompat.tlb
38werbetpwg.dll278528 bytesMD5: d372c730ce9bb45b08053af84210ddc2
39uninst.exe37343 bytesMD5: df4298abdbd2aa77beb8b2fdb584ed76
40antzozc.dll
41werbettxf.dll245760 bytesMD5: ce170804b323d997aa70fbed1bf11bc3
42ofcpi.dll13312 bytesMD5: ac935d13e926eef415783e75ba3004ce
43werbetlrw.dll278528 bytesMD5: ac7ed70da85717d60396a2ebdf26e8c7
441203846321.dll12800 bytesMD5: 04210cd3ddd6ece4f8c89de59628b53c
45ictmdl.dll
461202567261.dll12800 bytesMD5: 1bc6ed4840ce710aa2ca9416f24398af
47isfmntr.exe34816 bytesMD5: e0ef309928e4176eb996a80a809297cc
48sbsm.exe
49sbun.exe10752 bytesMD5: 2ec33cd42dedffd46937e37019e78d88
50voipwet.dll192512 bytesMD5: 3e3e70c7897bad4d4aa57ae7c6e786c3
51scm.exe
52vipextgpk.dll262144 bytesMD5: 3e96379b19eedae04b3d8689dfd375d4
53hdtip.dll192512 bytesMD5: 0132b556cc1362d1e3886eda497e464f
54uimcu.dll
55msmsgs.exe
561201639702.dll12800 bytesMD5: 6c234ca9f443d5816350c2a3e5bd673b

Memory Processes Created:

# Process Name Process Filename Main module size
1G2-tmp.exeG2-tmp.exe
2scu.exescu.exe11264 bytes
3ictun.exeictun.exe12288 bytes
4isfun.exeisfun.exe14848 bytes
5G5-tmp.exeG5-tmp.exe
6dumpserv.com nvctrl.exedumpserv.com nvctrl.exe
7sbmntr.exesbmntr.exe
8laf1.exelaf1.exe19968 bytes
9icthis.exeicthis.exe32768 bytes
10scit.exescit.exe
11waun.exewaun.exe10240 bytes
12uninst.exeuninst.exe37343 bytes
13isfmntr.exeisfmntr.exe34816 bytes
14sbsm.exesbsm.exe
15sbun.exesbun.exe10752 bytes
16scm.exescm.exe
17msmsgs.exemsmsgs.exe

Registry Modifications:

The following Registry Keys were created:

  • Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • E404.e404mgr.1
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • 7265100a-17e1-41bf-bd08-63b95a25a9c3
  • {27cb634d-c84e-4c00-9b53-f5523601dbad}
  • {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
  • {aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
  • Microsoft\Windows\CurrentVersion\Uninstall\Web Application
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
  • {B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • {E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
  • Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
  • {F7D09218-46D7-4D3D-9B7F-315204CD0836}
  • {41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
  • {81705D67-3F73-4983-859B-97D0922E5ABE}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
  • {6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • 10C52A42-DB8B-4ade-AA4A-CED6A8282B85
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}
  • {a6d478c6-7961-4fe9-be4b-e621dd640112}
  • {ab75cc7d-2751-4144-a278-5462d5a5884c}
  • {499B8A53-5949-4625-A8BF-A4D934AFC9DA}
  • F10587E9-0E47-4CBE-84AE-7DD20B8684CC
  • HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • {F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
  • {10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • HKEY_CURRENT_USER\Software\Online Add-on
  • {C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • NetProject
  • {D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • {c0ca766d-060c-48e1-b536-205e321bd174}
  • {2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
  • Online Add-on
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • {747e1fbe-b70f-441d-bbca-6e536c04924a}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
  • {23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
  • E404.e404mgr
  • c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
  • Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
  • {F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • BA0BACB5-FC95-451E-94D2-4959AB0949D2
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • {60dea04c-9817-4309-bfa2-f8a1766c3cd1}

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *