# microsoft cold call scam \*urgent answer needed

**URL:** <https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465>\
**Category:** Factual Questions\
**Created:** [March 1, 2012, 5:38pm UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465 "2012-03-01T17:38:33Z")\
**Posts on this page:** 8\
**Page:** 2

<div class="post-metadata">

**Author:** ![Boyo\_Jim](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@Boyo\_Jim](https://boards.straightdope.com/u/Boyo_Jim)\
**Post date:** [March 2, 2012, 5:41am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/21 "2012-03-02T05:41:07Z")

</div>

> [@filmore](#):
>
> Disconnect and turn off the laptop immediately.
> 
> I would recommend replacing the hard drive. Take the old drive out, install a new drive and reinstall the OS onto the new drive. If the hacker installed a boot sector virus, it will be a major hassle to remove it. A boot sector virus is not removed by a reinstall. You would need to do a full overwrite format of the whole drive _including the boot sector_. If you don’t know how to clear the boot sector, get a new drive to be safe.
> 
> To backup files, pull the hard drive out and put it in an external drive. Once the laptop is reinstalled on a new drive, copy over the files you need.

Really? The OP might as well just hold it under water a while, put a couple of bullets into it, and burn it at the stake.

---

<div class="post-metadata">

**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\
**Post date:** [March 3, 2012, 3:09am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/22 "2012-03-03T03:09:52Z")

</div>

> [@Cleophus](#):
>
> This is nonsense. The boot sector (part of the MBR) isn’t magic and it isn’t necessary to replace the drive to remove a boot sector virus. Running fixmbr and fixboot (XP) or bootrec (Vista/7) with appropriate options from a Windows install disc will rewrite the MBR, even on an existing system. Repartitioning the hard drive (ie. deleting all existing ones and recreating them) will also rewrite the MBR and so will a program that erases the entire drive, like DBAN.

I think you may have just explained how I beat a very nasty piece of malware I got. It never would completely go away, so I just gave up and installed Linux, repartitioning the drive to do so. When I later reinstalled Windows for a single game that wouldn’t run in Wine, I had no problems, and eventually migrated back to Windows, all without ever having a problem with that malware again.

---

<div class="post-metadata">

**Author:** ![NurseCarmen](https://avatars.discourse-cdn.com/v4/letter/n/5daacb/32.png) [@NurseCarmen](https://boards.straightdope.com/u/NurseCarmen)\
**Post date:** [March 3, 2012, 3:21am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/23 "2012-03-03T03:21:45Z")

</div>

> [@filmore](#):
>
> You are speaking from the point of view of an expert. True, it’s not hard to clear the boot sector if you know what you are doing. But are you going to be on the phone with his in-laws to walk them through all these steps with fixmbr, fixboot, DBAN?
> 
> If you don’t know what you’re doing, it’s very easy to not clear the MBR. In a case like this where some hackers had total access to the laptop and the owners are computer neophytes, it’s much safer to not attempt to reuse the drive.

So instead, since they know so little, you encourage them to replace the hard drive on a laptop? I could print out and snail mail a step by step pictorial on how to fix the master boot record on any windows machine.

Not quite the same if I want a clueless person to swap and configure a hard drive for one of many gazillion possible configurations. Fix the friggen mbr. It’s cheaper, less invasive, and just as effective.

---

<div class="post-metadata">

**Author:** ![filmore](https://avatars.discourse-cdn.com/v4/letter/f/7993a0/32.png) [@filmore](https://boards.straightdope.com/u/filmore)\
**Post date:** [March 3, 2012, 4:56am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/24 "2012-03-03T04:56:47Z")

</div>

> [@NurseCarmen](#):
>
> So instead, since they know so little, you encourage them to replace the hard drive on a laptop? I could print out and snail mail a step by step pictorial on how to fix the master boot record on any windows machine.
> 
> Not quite the same if I want a clueless person to swap and configure a hard drive for one of many gazillion possible configurations. Fix the friggen mbr. It’s cheaper, less invasive, and just as effective.

I would trust a clueless person to swap a drive correctly more than I would trust a clueless person to clear the MBR. I’ve easily talked my father-in-laws through swapping cards and even replacing the power supply. But when I try to talk him through software fixes, it’s like he’s never used a computer before.

If you know what you’re doing it’s not hard to clear the MBR, but I don’t get the sense that the OP or the in-laws are tech savvy enough to know they did it correctly. If they don’t clear the MBR, they stand the risk of reinfection the next time they boot. If you were on the phone with them, you could probably talk them through what needed to be done and verify it was done correctly. But if they do it on their own, they may make a mistake. In this particular situation, I don’t think it’s worth trying to save a few bucks on the drive. We have to assume the MBR is infected.

By replacing the drive they still have all their original files on the old drive. They don’t have to copy everything to CD before doing a reinstall. This way they can retrieve the files at their leisure and they don’t risk losing anything.

It’s cheaper to clear the MBR, but I don’t think it’s easier in this case. If you clear the MBR and reinstall the old drive, you first need to backup all the files. If you don’t mind spending a few bucks on a new drive, you will save yourself the hassle of having to do a backup first. Plus, you now have an external drive you can use for backups in the future.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 3, 2012, 5:35am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/25 "2012-03-03T05:35:02Z")

</div>

> [@One\_And\_Only\_Wanderers](#):
>
> Thanks for the info guys. Have advised to ask for a new install on a new drive and have warned it may be cheaper to get a new laptop…

If someone came into my shop saying this, I would tell them they got bad advice and my advice is to worst case wipe and reload on same drive, and this is coming from someone who would make more money selling you a hard drive.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 3, 2012, 5:39am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/26 "2012-03-03T05:39:05Z")

</div>

> [@filmore](#):
>
> By replacing the drive they still have all their original files on the old drive. They don’t have to copy everything to CD before doing a reinstall. This way they can retrieve the files at their leisure and they don’t risk losing anything.
> 
> It’s cheaper to clear the MBR, but I don’t think it’s easier in this case. If you clear the MBR and reinstall the old drive, you first need to backup all the files. If you don’t mind spending a few bucks on a new drive, you will save yourself the hassle of having to do a backup first. Plus, you now have an external drive you can use for backups in the future.

I wouldn’t even bother reformatting if the machine is otherwise working, hit them with a cocktail of AV apps and call t good. AVG, SAS, Malwarebytes, combofix. 95% of the time you have a squeaky clean system no matter what they did after that.

---

<div class="post-metadata">

**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\
**Post date:** [March 3, 2012, 5:40am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/27 "2012-03-03T05:40:32Z")

</div>

> [@BigT](#):
>
> repartitioning the drive to do so.

Once you do this, the drive is clean, you could have reloaded windows and been fine.

---

<div class="post-metadata">

**Author:** ![casdave](https://avatars.discourse-cdn.com/v4/letter/c/c6cbf5/32.png) [@casdave](https://boards.straightdope.com/u/casdave)\
**Post date:** [March 3, 2012, 8:32am UTC](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465/28 "2012-03-03T08:32:57Z")

</div>

Make sure that the wifi is turned off while as well. If you start the computer you never what it is trying to hook up with.

[Previous page](https://boards.straightdope.com/t/microsoft-cold-call-scam-urgent-answer-needed/614465.md?page=1)
