An elderly friend allowed the wrong "fictitious" Amazon representative to install "AWESUN" remote access software to his laptop. Luckily he realized something was wrong before the hacker scammer got full access.
I sent the email below to AweRay, creator of AWESUN and got no reply.
Is anyone familiar with this software and how to remove the code attached to ANY of my elderly friends internet desktop shortcuts?
Thank you
To: contactus@aweray.com <contactus@aweray.com> Subject: hacker using AwerayAwesun
Hello, My name Pclaptop and I do computer repair.
A client of mine brought his laptop to me because an email from a Hacker/Scammer was demanding $1500 for a purchase of a 55" 4K TV from Amazon. My client does not have an Amazon account, he did not purchase a 55" TV from Amazon and he did not purchase any 55" TV from ANY SOURCE, and deleted the email from noreply@amzinninfo.com (not AMAZON).
Amazon was called and informed of the SCAM attempt and I included the Hacker/Scammers bogus amazon help support number. 1- 800-557-0469
That same Hacker/Scammer also initiated an installation of your AWESUN software, so he could attempt to remote access my clients machine.
At that point ANY saved web link (most importantly his email link, OUTLOOK) on my clients page (when clicked on to connect) first displays a message indicating a pending installation of "AWESUN" remote control software. (See attached pic)
This HAS to be connected to the Hacker/Scammer with the $1500 demand for the 55" TV, as my client had no such message prompts prior to his opening of the email from "noreply@amznninfo.com" .
I've tried multiple methods to remove the "AWESUN" install prompt to no avail, registry search, folder deletion (none found), app removal (none found) complete HD search (None found) and a restore point to a previous date .
The prompt to install "AWESUN" still appears first with any attempt to open a web page.
After initiating the "Restore" function which takes time, the client took his machine home and at some point that night or next day chose "YES" (against my advice) to the "AWESUN" install query, and the second picture attached appeared. (See attached pic)
I went into Win10 "Settings then Apps", found "AWESUN/AWERAY" chose uninstall, I then scanned the registry again for "AWESUN/AWERAY" and deleted 7 registry entries, deleted the "AWERAY" folder.
No he's back to square one, when choosing ANY internet link (including the OUTLOOK link to check his email), he gets the "AWESUN" prompt to install "yes or No"
How do I remove your software so as to prevent the hacker/scammer from having remote access to my clients machine?
thank you
Take a look at our
ThinkPads.com HOME PAGE
For those who might want to contribute to the blog, start here: Editors Alley Topic
Then contact Bill with a Private Message
ThinkPads.com HOME PAGE
For those who might want to contribute to the blog, start here: Editors Alley Topic
Then contact Bill with a Private Message
AweSun Remote Access software from AweRay
Re: AweSun Remote Access software from AweRay
Sounds like a typical browser hijack. I think that downloading MalwareBytes free version and running a full manual scan should be enough to spot and remove it.
Thinkpad 25 (20K7), T490 (20N3), Yoga 14 (20FY), T430s (IPS FHD + Classic Keyboard), X220 4291-4BG
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
X61 7673-V2V, T60 2007-QPG, T42 2373-F7G, X32 (IPS Screen), A31p w/ Ultrabay Numpad
Re: AweSun Remote Access software from AweRay
ok thanks for reply
-
- Similar Topics
- Replies
- Views
- Last post
-
-
HELP! I Cant access BIOS menu during windows 11 start
by canonmasta » Mon Dec 04, 2023 5:07 pm » in ThinkPad X230-X280 / X390 Series - 5 Replies
- 3372 Views
-
Last post by Brad
Sat Dec 16, 2023 6:40 am
-
-
-
Using a Virtual Machine for software
by ThinkPad560X » Wed Nov 01, 2023 12:57 pm » in Off-Topic Stuff - 0 Replies
- 2744 Views
-
Last post by ThinkPad560X
Wed Nov 01, 2023 12:57 pm
-
-
-
Win98SE Temperature Monitor software for the A31?
by franjimo24 » Sun Jan 14, 2024 11:10 am » in ThinkPad R, A, G and Z Series - 3 Replies
- 1287 Views
-
Last post by RealBlackStuff
Tue Jan 16, 2024 12:23 am
-
-
-
Issues with restoring original factory software to a t42
by Glaurung-quena » Thu Feb 08, 2024 7:37 pm » in ThinkPad T40/T41/T42/T43 Series - 9 Replies
- 1418 Views
-
Last post by dr_st
Wed Mar 06, 2024 1:11 pm
-
Who is online
Users browsing this forum: No registered users and 13 guests