You May Have a Virus

Discussion in 'other anti-virus software' started by JerryM, Dec 9, 2017.

  1. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,278
    Several times in the last three months I have experienced a full page alert that I may have a virus. I am not supposed to shut down, but to call Microsoft.
    I am unable to close the page, and have to shut off power.

    After restart I scan with ESET and Malwarebytes and all is clean. I am sure it is not MS sending this alert and think it may be
    Ransomeware. So far no infection that my security software detects.

    Anyone else experience this<
    Thanks,Jerry
     
  2. zapjb

    zapjb Registered Member

    Joined:
    Nov 15, 2005
    Posts:
    3,990
    Location:
    USA still the best. But getting worse!
  3. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,278
    Windows 10
    The blogs are the same as mine. I will do the suggested. Many thanks.
    I think I put this in the incorrect forum SORRY.
    Jerry
     
  4. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    2,378
    you need a better ad and script blocker.

    current there is a wave with several popups as full screen "your browser is oudated" or "you have a virus" blah blah.
    see also
    https://www.blackhatworld.com/seo/analyse-of-a-fake-update-landing-page.986673/

    problem ist to close such pages, either they reload instantly or running loops in a htaccess mask.
    Mozilla is aware of this and has resolved a gap in firefox 58, but with a decent adblocker its is easy to close such crap without abnormal terminating browser.

    concerning ebay and winning awards - complete fake, close instant. ebay is also aware of it but cant do anything because its an ad provider outside ebay.
     
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,405
    There are many malicious domains or compromised websites that all they do is display a fake alert (e.g. 3ebook.XXX/call-microsoft-support-at-1-855-390-1666) . If the fake alert page was opened just once and not repeatedly and antivirus programs like ESET didn't find anything malicious, your computer should be clean.
     
  6. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    6,196
    Yes, it's just an ad on a web page rather than actual infection so is nothing to worry about.
     
  7. Tarantula

    Tarantula Registered Member

    Joined:
    Jul 23, 2010
    Posts:
    392
    Try scanning with Zemana free.
     
  8. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    6,196
    While Zemana is a good scanner and it won't hurt to do a scan with it, this is not a virus, it is only an ad trying to get the user to call a fake technical support company.
     
  9. liba

    liba Registered Member

    Joined:
    Jan 21, 2016
    Posts:
    174
    scan with Roguekiller antimalware

    32bit
    http://download.adlice.com/RogueKiller/RogueKiller.exe

    64bitHang Out
    http://download.adlice.com/RogueKiller/RogueKillerX64.exe
     
    Last edited by a moderator: Dec 10, 2017
  10. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    2,888
    Location:
    Slovakia
    Can you open task manager? If it is located outside the browser, it might be using WSH to run, so disabling it should help.
    Code:
    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
    You might also want to check with Autoruns for suspicious entries, particularly in Logon/Services/Scheduled Tasks.
     
Loading...