Several times in the last three months I have experienced a full page alert that I may have a virus. I am not supposed to shut down, but to call Microsoft. I am unable to close the page, and have to shut off power. After restart I scan with ESET and Malwarebytes and all is clean. I am sure it is not MS sending this alert and think it may be Ransomeware. So far no infection that my security software detects. Anyone else experience this< Thanks,Jerry
What: OS, updated, browser? https://malwaretips.com/blogs/remove-your-computer-may-have-3-virus-popups/ https://malwaretips.com/blogs/warning-your-computer-may-be-infected-removal/
Windows 10 The blogs are the same as mine. I will do the suggested. Many thanks. I think I put this in the incorrect forum SORRY. Jerry
you need a better ad and script blocker. current there is a wave with several popups as full screen "your browser is oudated" or "you have a virus" blah blah. see also https://www.blackhatworld.com/seo/analyse-of-a-fake-update-landing-page.986673/ problem ist to close such pages, either they reload instantly or running loops in a htaccess mask. Mozilla is aware of this and has resolved a gap in firefox 58, but with a decent adblocker its is easy to close such crap without abnormal terminating browser. concerning ebay and winning awards - complete fake, close instant. ebay is also aware of it but cant do anything because its an ad provider outside ebay.
There are many malicious domains or compromised websites that all they do is display a fake alert (e.g. 3ebook.XXX/call-microsoft-support-at-1-855-390-1666) . If the fake alert page was opened just once and not repeatedly and antivirus programs like ESET didn't find anything malicious, your computer should be clean.
While Zemana is a good scanner and it won't hurt to do a scan with it, this is not a virus, it is only an ad trying to get the user to call a fake technical support company.
scan with Roguekiller antimalware 32bit http://download.adlice.com/RogueKiller/RogueKiller.exe 64bitHang Out http://download.adlice.com/RogueKiller/RogueKillerX64.exe
Can you open task manager? If it is located outside the browser, it might be using WSH to run, so disabling it should help. Code: reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f You might also want to check with Autoruns for suspicious entries, particularly in Logon/Services/Scheduled Tasks.
