You May Have a Virus

Discussion in 'other anti-virus software' started by JerryM, Dec 9, 2017.

  1. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,296
    Several times in the last three months I have experienced a full page alert that I may have a virus. I am not supposed to shut down, but to call Microsoft.
    I am unable to close the page, and have to shut off power.

    After restart I scan with ESET and Malwarebytes and all is clean. I am sure it is not MS sending this alert and think it may be
    Ransomeware. So far no infection that my security software detects.

    Anyone else experience this<
    Thanks,Jerry
     
  2. zapjb

    zapjb Registered Member

    Joined:
    Nov 15, 2005
    Posts:
    4,307
    Location:
    USA still the best. But getting worse!
  3. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,296
    Windows 10
    The blogs are the same as mine. I will do the suggested. Many thanks.
    I think I put this in the incorrect forum SORRY.
    Jerry
     
  4. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    2,653
    you need a better ad and script blocker.

    current there is a wave with several popups as full screen "your browser is oudated" or "you have a virus" blah blah.
    see also
    https://www.blackhatworld.com/seo/analyse-of-a-fake-update-landing-page.986673/

    problem ist to close such pages, either they reload instantly or running loops in a htaccess mask.
    Mozilla is aware of this and has resolved a gap in firefox 58, but with a decent adblocker its is easy to close such crap without abnormal terminating browser.

    concerning ebay and winning awards - complete fake, close instant. ebay is also aware of it but cant do anything because its an ad provider outside ebay.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,415
    There are many malicious domains or compromised websites that all they do is display a fake alert (e.g. 3ebook.XXX/call-microsoft-support-at-1-855-390-1666) . If the fake alert page was opened just once and not repeatedly and antivirus programs like ESET didn't find anything malicious, your computer should be clean.
     
  6. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    6,715
    Yes, it's just an ad on a web page rather than actual infection so is nothing to worry about.
     
  7. Tarantula

    Tarantula Guest

    Try scanning with Zemana free.
     
  8. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    6,715
    While Zemana is a good scanner and it won't hurt to do a scan with it, this is not a virus, it is only an ad trying to get the user to call a fake technical support company.
     
  9. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    188
    scan with Roguekiller antimalware

    32bit
    http://download.adlice.com/RogueKiller/RogueKiller.exe

    64bitHang Out
    http://download.adlice.com/RogueKiller/RogueKillerX64.exe
     
    Last edited by a moderator: Dec 10, 2017
  10. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    3,050
    Location:
    Slovakia
    Can you open task manager? If it is located outside the browser, it might be using WSH to run, so disabling it should help.
    Code:
    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
    You might also want to check with Autoruns for suspicious entries, particularly in Logon/Services/Scheduled Tasks.
     
Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.