0800-014-8604 Pop-Up Removal Guide

Threat Level:
7/10
Rate this Article:
Comments (0)
Article Views: 855
Category: Fake Warnings

0800-014-8604 Pop-Up is a newcomer on the front of technical support scams and “proudly” follows its predecessors, including “+1-800-236-1513,” “Microsoft Security essentials +1-888-496-5150,” and “License has Expired +1-888-303-5121.” This is indeed a fake alert message that can pop up in your browser if you get redirected to a certain malicious webpage set up by cyber criminals. This page may look like an authentic Microsoft security center to the untrained eye, but you should know that this is a total scam aimed at your wallet. Although we have found that currently this malicious site may not be working, the server it is hosted on gives home to a number of other similar threats, too. In any case, should you encounter this fake alert, do not fall for it and do not call the emergency phone number given to you. In fact, you should remove 0800-014-8604 Pop-Up and all possibly related and harmful applications as well.

This malware infection may show up in your browser after you click on the wrong web content, such as a corrupt link, a banner, or pop-up ad, but it is also quite likely that your computer is infected with adware that can redirect you to this malicious page (continuescanx.xyz). If you do not want to end up being scammed by 0800-014-8604 Pop-Up, you should avoid suspicious websites, including torrent, shareware, porn, and gaming pages. These are packed with unsafe third-party contents, such as fake buttons, fake notification, and so on. Clicking on these can easily redirect you to this malicious page or drop a package of malware infections onto your system. In other words, seeing this fake alert on your screen could also indicate the presence of other, potentially more dangerous malware threats, such as adware programs, browser hijackers, Trojans, backdoors, and potentially unwanted programs. This is why you should not hesitate to use a reliable online malware scanner after you delete 0800-014-8604 Pop-Up from your system.

As we have already mentioned, it is also possible that your computer is infected with adware, which would mean that you are never really safe while surfing the net. This infection may spy on you as well as hijack legitimate third-party ads. An ad-supported program may show you a flow of annoying ads that can take you to malicious sites like this one or drop a bundle of threats onto your machine. No wonder why we keep emphasizing how vital it is for you to make sure at all times that your system is completely clean and secure. Do not think for a second that it will be enough for you to delete 0800-014-8604 Pop-Up alone. Once you use a proper security tool to scan your computer, you will see what you are up against.

Our research shows that this malicious website could be down for the time being. In any case, it is important that we talk about it and share what might hit you even if in a bit different form or name in the future. When you get hit by this fake alert, you suddenly get redirected to this page that resembles an authentic Microsoft security center and a pop-up window appears informing you that your computer has been blocked due to a supposed infection and “suspicious activity” on your system. You are warned not to close this page but, instead, you should call 0800-014-8604 immediately to sort out this “critical” issue. This is how a lot of users are easily deceived since they just would not know better.

You should know that calling this number would not give you a real and authentic Microsoft technician. Instead, you would talk to a sales person trying to sell you some useless system fixing tool or service. This may cost you up to a few hundred dollars if you are gullible enough to believe that there is a critical problem with your computer and nothing else can help. Fortunately for you, we are here to give you another option: With our help you can remove 0800-014-8604 Pop-Up from your computer. So let us tell you how.

While it is possible that your fake alert infection was not due to a previous malware infection and you were simply redirected from another malicious website, our experience shows that there could be a number malware threats on your system anyway. Although we cannot tell you a specific adware program that could be responsible for this malicious redirection, we suggest that you scan your list of installed programs in Control Panel for any suspicious application you may find. Once you uninstall what should not be there in the first place, you could also remove all questionable browser extensions by resetting your main browsers. Please use our instructions below if you need assistance with these steps. However, it is still possible that even after going through all this cleaning spree, more covert threats might remain hidden on your system. Therefore, we recommend that you use a trustworthy malware removal tool, such as SpyHunter to automatically protect your PC from all possible malware infections.

How to remove 0800-014-8604 Pop-Up from Windows

Windows XP

  1. Open the Start menu and navigate to Control Panel.
  2. Click Add or Remove Programs.
  3. Select the suspicious application and press Remove.

Windows Vista/Windows 7

  1. Press the Windows button on the Taskbar and choose Control Panel.
  2. Open Uninstall a program.
  3. Select the suspicious application and press Uninstall.

Windows 8/Windows 8.1/Windows 10

  1. Press Win+X and select Programs and Features.
  2. Select the suspicious application and press Uninstall.

How to remove 0800-014-8604 Pop-Up from your browsers

Google Chrome

  1. Press Alt+F and select Settings.
  2. At the bottom, click Show advanced settings.
  3. At the bottom, click Reset settings.
  4. Click Reset in the confirmation window.

Mozilla Firefox

  1. Press Alt+H and select Troubleshooting Information.
  2. Click Refresh Firefox and click Refresh Firefox in the confirmation window.

Internet Explorer

  1. Press Alt+T and select Internet Options.
  2. On the Advanced tab, click the Reset button.
  3. Select the Delete personal settings checkbox and press Reset.
  4. Press Close.
Download Remover for 0800-014-8604 Pop-Up *
*SpyHunter scanner, published on this site, is intended to be used only as a detection tool. To use the removal functionality, you will need to purchase the full version of SpyHunter.

0800-014-8604 Pop-Up technical info for manual removal:

Files Modified/Created on the system:

# File Name File Size (Bytes) File Hash
1ictmdl.dll
2werbettxf.dll245760 bytesMD5: ce170804b323d997aa70fbed1bf11bc3
3wamdl.dll88064 bytesMD5: b4842292aa52007d092c4d3cb9cc6404
41202567261.dll12800 bytesMD5: 1bc6ed4840ce710aa2ca9416f24398af
5isfmdl.dll
61203634438.dll
7G2-tmp.exe
8scu.exe11264 bytesMD5: d87e641e0223633ad0da2c7fd4598f89
9msmsgs.exe
101198448799.dll
11zxserv0.com
12antzozc.dll
13waun.exe10240 bytesMD5: bc863ff018285b1cb8d4fa525306fd1f
14werbetpwg.dll278528 bytesMD5: d372c730ce9bb45b08053af84210ddc2
15hp[X].tmp
16nczupfw.dll12800 bytesMD5: d0615ec6547926e5ece30d4ef3b092cd
17ofcpi.dll13312 bytesMD5: ac935d13e926eef415783e75ba3004ce
18werbetlrw.dll278528 bytesMD5: ac7ed70da85717d60396a2ebdf26e8c7
19dtjby.dll7168 bytesMD5: 0ff460a6ced96fdf0600c2acb8798db7
201201639705.dll14848 bytesMD5: 45f8e9d32c66904bedc012950e2f0994
211202030455.dll
22scm.exe
23vipextnog.dll262144 bytesMD5: 049fc6cd336cb14455fde37980cdf550
24findsiteonline.dll15872 bytesMD5: 36c81dfa646364217fcf1530e9529513
25hdtip.dll192512 bytesMD5: 0132b556cc1362d1e3886eda497e464f
26Trojan.Zlob|eulbn.dll
27vnp7s.net
28sbun.exe10752 bytesMD5: 2ec33cd42dedffd46937e37019e78d88
29sbmntr.exe
30qhcvdw.dll13312 bytesMD5: 9d51df368526b5595f2fd93460c63b1f
31ncompat.tlb
32sbmdl.dll
33laf1.exe19968 bytesMD5: ca3aa637685f5234a042ed69eeb76415
341201639702.dll12800 bytesMD5: 6c234ca9f443d5816350c2a3e5bd673b
35dumpserv.com
36sysdivx.dll219648 bytesMD5: b8885391a6386bba663ae31ce317668f
37voipwet.dll192512 bytesMD5: 3e3e70c7897bad4d4aa57ae7c6e786c3
38uninst.exe37343 bytesMD5: df4298abdbd2aa77beb8b2fdb584ed76
39icthis.exe32768 bytesMD5: f8d05067c46aff0980dfde8f3c40529b
40msvol.tlb
41fsehfcu.dll13312 bytesMD5: acf0ee0c6d8ad7b7cb1d8d11b7343c3d
421198448796.dll
43G5-tmp.exe
44isfmntr.exe34816 bytesMD5: e0ef309928e4176eb996a80a809297cc
45vipextgpk.dll262144 bytesMD5: 3e96379b19eedae04b3d8689dfd375d4
46sbsm.exe
471203140349.dll12800 bytesMD5: 4b9e158462dc58a175c037de771a71c5
48dumpserv.com nvctrl.exe
49scit.exe
501203846321.dll12800 bytesMD5: 04210cd3ddd6ece4f8c89de59628b53c
51iinqyl.dll
52ictun.exe12288 bytesMD5: e641a9a5738bea3e1f98be32389530d3
53vipextpxm.dll253952 bytesMD5: c68aac77a1765862a72090fd22b3a31e
541202650266.dll
55uimcu.dll
56isfun.exe14848 bytesMD5: 86d0920892fb572988749e875eee63db

Memory Processes Created:

# Process Name Process Filename Main module size
1G2-tmp.exeG2-tmp.exe
2scu.exescu.exe11264 bytes
3msmsgs.exemsmsgs.exe
4waun.exewaun.exe10240 bytes
5scm.exescm.exe
6sbun.exesbun.exe10752 bytes
7sbmntr.exesbmntr.exe
8laf1.exelaf1.exe19968 bytes
9uninst.exeuninst.exe37343 bytes
10icthis.exeicthis.exe32768 bytes
11G5-tmp.exeG5-tmp.exe
12isfmntr.exeisfmntr.exe34816 bytes
13sbsm.exesbsm.exe
14dumpserv.com nvctrl.exedumpserv.com nvctrl.exe
15scit.exescit.exe
16ictun.exeictun.exe12288 bytes
17isfun.exeisfun.exe14848 bytes

Registry Modifications:

The following Registry Keys were created:

  • {499B8A53-5949-4625-A8BF-A4D934AFC9DA}
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{03B902B1-9B25-4173-9468-56775C85A8D4}
  • {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • Microsoft\Windows\CurrentVersion\Uninstall\Web Application
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • Microsoft\Windows\CurrentVersion\Uninstall\MultiMedia Software
  • HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe
  • E404.e404mgr.1
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3D76B96-30B9-4DCC-9B3D-D12E31280D29}
  • F10587E9-0E47-4CBE-ABCD-7DD20B8622FF
  • {23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\some
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C566C34-7D72-4DC1-9BBE-1121A76698F8}
  • 7265100a-17e1-41bf-bd08-63b95a25a9c3
  • {60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  • {F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ab75cc7d-2751-4144-a278-5462d5a5884c}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{27cb634d-c84e-4c00-9b53-f5523601dbad}
  • HKEY_CURRENT_USER\Software\Online Add-on
  • Microsoft\Windows\CurrentVersion\Uninstall\Internet Service
  • {6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • Microsoft\Windows\CurrentVersion\Uninstall\Windows Safety Alert
  • {27cb634d-c84e-4c00-9b53-f5523601dbad}
  • {D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentV
  • {aaad3a22-1c07-45f5-bfb3-e9a8c3b382fe}
  • {B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • 10C52A42-DB8B-4ade-AA4A-CED6A8282B85
  • {c0ca766d-060c-48e1-b536-205e321bd174}
  • {F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • Microsoft\Internet Explorer\Toolbar\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • E404.e404mgr
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a6d478c6-7961-4fe9-be4b-e621dd640112}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{c0ca766d-060c-48e1-b536-205e321bd174}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{F2BADA0D-FD61-45EF-A994-64A073FD6613}
  • {C03FD59D-9104-44B7-929A-9EAA0BA05211}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
  • Microsoft\Internet Explorer\Toolbar\WebBrowser\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • {F7D09218-46D7-4D3D-9B7F-315204CD0836}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{60dea04c-9817-4309-bfa2-f8a1766c3cd1}
  • BA0BACB5-FC95-451E-94D2-4959AB0949D2
  • {a6d478c6-7961-4fe9-be4b-e621dd640112}
  • HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
  • {ab75cc7d-2751-4144-a278-5462d5a5884c}
  • Online Add-on
  • {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
  • {41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{23ED2206-856D-461A-BBCF-1C2466AC5AE3}
  • NetProject
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F10587E9-0E47-4CBE-ABCD-7DD20B862223}
  • {2012F73E-7427-4AD8-9E9D-6CBA6E0053D4}
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D579A683-0CC7-4023-BAE7-0544D0D1DA3A}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41F6170D-6AF8-4188-8D92-9DDAB3C71A78}
  • F10587E9-0E47-4CBE-84AE-7DD20B8684CC
  • {81705D67-3F73-4983-859B-97D0922E5ABE}
  • Microsoft\Windows\CurrentVersion\Uninstall\Secure Browsing
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}
  • {10C52A42-DB8B-4ade-AA4A-CED6A8282B67}
  • Microsoft\Internet Explorer\Toolbar\{81705D67-3F73-4983-859B-97D0922E5ABE}
  • {E85F6AA5-7A0C-49A5-9E5E-936FED62347D}
  • c7cd9e83-3bf6-47f8-b2e2-b114c96c1888
  • {747e1fbe-b70f-441d-bbca-6e536c04924a}
  • Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
  • Microsoft\Windows\CurrentVersion\policies\explorer\run\start
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2A1C5CB-C0EF-4689-9436-F62CCA1C5383}
  • Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{747e1fbe-b70f-441d-bbca-6e536c04924a}

Reply

Your email address will not be published.

Name
Website
Comment

Enter the numbers in the box to the right *