SCAMMER INVESTIGATION DOCUMENT

Scam Description:

“I was telephoned by person purporting to be from "Computer Maintenance" on behalf of Microsoft and that my computer had a virus. Caller had Indian accent. Got me to switch on the computer and look at Start Menu > Computer > Manage > Event Viewer > Error logs. Tried to convince me normal error logs were evidence of virus infection. I realized it was a scam, and want other people to know about this also so no one falls victim to it.”

 

Caller ID: #91618 ( a lead, and a quick google later... )

 

http://whocallsme.com/Phone-Number.aspx/91618

 

Scammers want you to visit supportvirtual.com ( or perhaps curingyourpc.com ) and want remote access to your computer, to install malware, your credit card or both.

 

A quick DNS whois query ( yay, linux ) on the domain name shows:

Scammer’s domain name registration details

whois supportvirtual.com

 

Domain Name: SUPPORTVIRTUAL.COM

 

Registrant:

  Virtual Access Ltd

  145-157 St. John  Street, London

  London, London  EC1V 4PY        

  GB                              

 

  Registrar: DOTSTER

  Domain Name: SUPPORTVIRTUAL.COM

     Created on: 17-MAY-10      

     Expires on: 17-MAY-11      

     Last Updated on: 12-NOV-10  

 

  Administrative Contact:

     George, Peter rajat@curingyourpc.com ( hmm Indian name, matches the accent, and a new domain name in the email there... )

     145-157 St. John Street              

     London, London  EC1V 4PY            

     GB                                  

     08455085236                          

 

  Technical Contact:

     Jones, David  david@curingyourpc.com

     Virtual Access Ltd                  

     145-157 St. John Street            

     London, London  EC1V 4PY            

     GB                                  

     08455085236                        

 

  Domain servers in listed order:

     NS1.WONDERZHOSTING.COM      

     NS2.WONDERZHOSTING.COM  

 

  Registrar: DOTSTER, INC.      

  Whois Server: whois.dotster.com

  Referral URL: http://www.dotster.com

  Name Server: NS1.WONDERZHOSTING.COM

  Name Server: NS2.WONDERZHOSTING.COM

  Status: clientDeleteProhibited      

  Status: clientTransferProhibited    

  Status: clientUpdateProhibited      

  Updated Date: 13-nov-2010          

  Creation Date: 17-may-2010  ( This is quite a new website... )

  Expiration Date: 17-may-2011    

 

The domain name curingyourpc.com is obviously owned by the same people, the site looks the same as supportvirtual.com , just a different colour scheme, and a DNS whois check gives the following information

 

whois curingyourpc.com

 

Domain Name: CURINGYOURPC.COM

 

Registrant:

  JARS Services

  9 Old Court House Street

  Kolkata, West Bengal 700001

  India ( there's that Indian connection )

 

  Registered through: GoDaddy.com, Inc. (http://www.godaddy.com)

  Domain Name: CURINGYOURPC.COM

     Created on: 21-Jul-10

     Expires on: 21-Jul-11

     Last Updated on: 30-Jul-10

 

  Administrative Contact:

     Jain, Rajat  rajat@jarsservices.com ( here’s rajat again, and the real name this time! plus a new domain name again )

     JARS Services

     9 Old Court House Street

     Kolkata, West Bengal 700001

     India

     03327250984      Fax --

 

  Technical Contact:

     Jain, Rajat  rajat@jarsservices.com

     JARS Services

     9 Old Court House Street

     Kolkata, West Bengal 700001

     India

     03327250984      Fax --

 

  Domain servers in listed order:

     NS1.WONDERZHOSTING.COM

     NS2.WONDERZHOSTING.COM

 

  Registrar: GODADDY.COM, INC.

  Whois Server: whois.godaddy.com

  Referral URL: http://registrar.godaddy.com

  Name Server: NS1.WONDERZHOSTING.COM      

  Name Server: NS2.WONDERZHOSTING.COM      

  Status: clientDeleteProhibited            

  Status: clientRenewProhibited            

  Status: clientTransferProhibited          

  Status: clientUpdateProhibited            

  Updated Date: 30-jul-2010                

  Creation Date: 21-jul-2010     ( this is another quite new website..)

  Expiration Date: 21-jul-2011          

 

and of course you’re wondering, what about jarsservices.com, well:

 

whois jarsservices.com

 

Registrant:

  JARS

  114 Westbourne Studios

  242 Acklam Road

  London, London  W10 5JJ

  GB

 

  Registrar: DOTSTER

  Domain Name: JARSSERVICES.COM

     Created on: 12-OCT-07 ( This looks like the real company site, created 3 years ago )

     Expires on: 12-OCT-12

     Last Updated on: 14-OCT-10

 

  Administrative, Technical Contact:

     Jain, Rajat rajatjain313@gmail.com ( ah, and a personal gmail address! )

     JARS

     114 Westbourne Studios

     242 Acklam Road

     London, London  W10 5JJ

     GB

     +44(0)2079938513

     +44(0)2089680660

 

  Domain servers in listed order:

     NS1.ZABCO.NET

     NS2.ZABCO.NET

 

and the gmail address queried via Google yields...

 

More online and contact information...

 

Name: Rajat Kumar Jain

Twitter: http://twitter.com/rajatjain313

WAYN: http://www.wayn.com/profiles/rajatjain313

 

And some more information on the scammers, embellished CV type info...

 

JAR Services Biography details:

 

Board Of Directors, jarsservices.com

http://www.jarsservices.com/about-leader.html

 

Rajat Kumar Jain – Managing Director & CEO

 

Mr. Jain is an entrepreneur with expertise in information technology and outsourcing businesses. Mr. Jain has over eight years of venturing, IT product strategy, P&L management, and off shoring/outsourcing experience. Mr. Jain founded and operated JARS Services LLC - a company that enables global captive centers for technology and business services companies. At JARS Services, Mr. Jain consulted with Fortune 500 and small start-ups alike on how to start and operate offshore-based delivery capabilities. Prior to founding JARS Services, Mr. Jain was a strategy consultant for Mainspring, an Honeywell subsidiary, focusing on cost-saving opportunities for venture capitalist funded software companies.

 

Prior to that, Mr. Jain held several leadership positions within General Electric Company including helping GE create offshore development teams and data centers.

 

Mr. Jain holds an e-MBA in general administration/finance from Arizona University, AZ. Mr. Jain is on the board of Future Infocomm, 24seven solutions (an offshore based call center), JARS Services, LLC, Jain & Associates (Construction Unit), Manipur Tea and Marketing (into tea plantation), Billmaintenance.co.uk. He is also a certified Six Sigma Black belt quality professional.

 

( yeah, right )

 

Shraddha Kapoor - Director,Operations ( suspect female caller ).

 

shraddha brings with her Human Resource planning, management & development experience in the IT & ITES industries. Having spent quite some time in Business development during his formative years with Services companies has developed a customer service oriented approach.

 

She has been involved in instrumental roles for managing talent acquisitions, transition of Captive Unit Processes and operational setup during her tenure with previous companies.

 

Shraddha holds a graduate degree and management specialization from ICFAI University, Kolkata. Her last assignment was with GCD, Vancouver, Canada.

 

Shraddha has transitioned business from client end, stabilize process and successfully met customer satisfaction from clientele such as GreenDOT Corporation, elephant.co.uk and others.

 

( what? )

 

Further contact details

 

Here’s their public contact information on their websites:

 

US Office

JARS Services LLC

2711 Centerville Road

Suite 400

Wilmington

New Castle

Delaware 19808

Phone Number: 1201 338 6180

Fax Number: +1718 228 9180

 

Indian Office

JARS Services

9 Old Court House Street

Kolkata 700 001

West Bengal, INDIA

Phone number:  +913365350602

 

UK Office

Virtual Access ltd.

Suite 14522, 2nd Floor

145-157 St John Street

London

EC1V 4PY

Phone Number: 02030262783

Fax Number: 02078068051

 

Customer Service No.:

United Kingdom Customer:         02030262783

United States Customer:          12013386180

Canada Customer:          12013386180

Australia Customer:         0870041012

New Zealand Customer:  6499518119 ( see 12+ spam report descriptions on http://www.phonespamfilter.co.nz/search.php/099518119 same experiences and all connected!! )

Singapore Customer:         +8000029135

Ireland Customer:         +8000029135

 

The circle completes iteself. Search result website contact number yields same initial spam reports http://www.phonespamfilter.co.nz/search.php/099518119

 

Sorry scammers, you called the wrong number.

 

2011-Feb-08