"Speed-Up" Tools, "Optimisers" and Fake Warnings: How to Spot the Scam and Avoid Paying Fraudsters

A full-screen window with red warnings: "37 threats detected!", "Your computer has been locked", "Call Microsoft support immediately". Or a program that installed itself along with a free media player and tells you every day that your computer is "running at 23% capacity" and needs "speeding up" for a small monthly fee. Behind messages like these there's almost never concern for your computer — just an attempt to get your money or access to your data. Let's look at how these schemes work and how to protect yourself.

Scheme 1. "Speed-up" tools and "optimisers"

Programs with names like "PC Speed Up", "Driver Booster Pro" or "Advanced Cleaner" arrive on a computer bundled with free software installers or through adverts. When run, they "scan" the system and find hundreds of "problems": outdated drivers, registry errors, "junk" files, "privacy threats". You're offered a fix once you buy a subscription. In reality most of the "problems" are normal parts of the system, and the benefit of "fixing" them is zero or negative.

Signs

• The program appeared without a conscious decision on your part.
• Scary numbers and red indicators every time it starts.
• The scan is free; the "cure" costs money.
• The program is hard to remove or comes back after removal.

Scheme 2. Fake antivirus and scareware

These are programs or web pages that imitate antivirus software and show "detected viruses" in order to sell a "licence". They often look very much like Windows system windows. Sometimes they're full-blown malware that blocks the computer until you pay.

Scheme 3. Fake "Microsoft support"

The most dangerous scheme. A full-screen page suddenly opens in the browser with a siren, an infection warning and a "support number". Sometimes they call you directly: they claim to be from Microsoft, your bank or your internet provider and say a "virus attack" is coming from your computer. They then ask you to install a remote-access program, "show" you supposed threats in the system logs and demand payment for a "fix" — or access to your online banking to "protect your account".

It's important to know that Microsoft, banks and internet providers never call out of the blue about viruses on your computer, and never put phone numbers in browser warnings.

Scheme 4. Pushed browser extensions

"Speed-up", "protection" and "ad-blocking" extensions of dubious origin replace your search engine, show adverts and collect your browsing history. There's more on this in our article on hijacked search engines and home pages.

What to do if such a window appears in your browser

• Don't call the number shown and don't download anything.
• Close the tab or the whole browser; if it won't close, end it through Task Manager or restart the computer.
• When you next open the browser, don't restore the closed tabs.
• If the window keeps coming back, there's most likely adware or an extension on the computer — it needs checking.

What to do if you've already paid or let a fraudster into your computer

1. Disconnect the computer from the internet immediately.
2. Contact your bank, block your card and dispute the payment.
3. From another, clean device, change the passwords for your email, banking, social media and messengers, and turn on two-factor protection.
4. Don't use the computer for payments or signing in to accounts until a specialist has checked it: fraudsters often leave behind a remote-access program or spyware.
5. If the loss is significant, report it to the police.

How to protect yourself

• Download programs only from official websites and read every step of the installer carefully.
• Don't trust pop-ups with phone numbers and frightening messages.
• Use the built-in Windows Defender and keep up with updates.
• Work in a standard rather than an administrator account.
• Tell older relatives about these schemes — they're the most frequent victims.

What our technician does

1. Removes "speed-up" tools, fake antivirus programs, adware and extensions.
2. Finds and removes remote-access programs and spyware left behind by fraudsters.
3. Checks the system for malicious code and restores browser settings.
4. Helps you change passwords, turn on two-factor protection and check important accounts.
5. Sets up protection and explains how to recognise tricks like these in future.

A real example

An elderly woman in Saburtalo saw a "Microsoft warning" with a siren in her browser and called the number. The "specialist" talked her into installing a remote-access program and paying for "a year's protection" by card. The next day someone tried to take another large sum from the card. Her daughter called us: our technician disconnected the computer from the network, removed the remote-access program and a spyware module, checked the system, helped change all the passwords and turned on protection in the banking app. The bank managed to block the second transaction. We also installed scam-page blocking in the browser and wrote a simple reminder sheet for her.

Call a technician

If suspicious "speed-up" tools have appeared on your computer or you've run into fake support, we'll come to any district of Tbilisi around the clock. Learn more on our virus removal, antivirus installation and 24/7 computer help pages.