I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

386 answers

Sort by: Most helpful
  1. Anonymous
    2018-05-19T13:29:21+00:00

    I don't know if this has something to do with the trojan, but something weird happened to my brand new laptop.  Yesterday, I clicked on a non-Microsoft web site, and a message from Windows Defender stating that it had blocked Trojan:JS/Flafisi.d popped up in my notifications. The message instructed me to restart my computer. I noticed a button which was supposed to remove the virus just above the Quarantine history link. I clicked on the button and then restarted my computer. Later in the afternoon, I turned on my laptop again, and I left it alone for a couple of hours.  I tried to wake it from sleep, but it took a long while to power on.  When it did, my load screen came on and remained on for over an hour. Windows finally displayed a message saying that Windows could not load properly and that it will roll back to a previous version.  I didn't see an arrow, so the only thing I could do was to unplug the laptop and let the battery run down. This morning, I turned it on, and everything is ok. What do you think?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2018-05-16T18:57:13+00:00

    Different people are having different issues with the Version 1803 Update, depending on lots of different factors. I’m not seeing any issues at all myself, and consequently I haven’t done any research on the topic. So I can only suggest that you might want to review the recent threads in this Answers Forum category, and maybe ask some questions there:

    https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install?sort=lastreplydate&dir=desc&tab=All&status=all&mod=&modAge=&advFil=&postedAfter=&postedBefore=&threadType=all&isFilterExpanded=true&tm=1526493315112

    When I’m looking for answers, I usually start by searching the Answers Forum – but the local search engine has been “improved” to the point where it’s almost totally useless now, so it’s usually better to use a web search engine. For general Windows issues, the result pages will usually include lots of Answers Forum links, along with links from other popular forums, which can sometimes be quite useful. Unfortunately this method doesn’t work very well at all for malware-related issues, because the rogue antimalware concerns have somehow managed to fill up the top SERPs with hundreds of their timely and topical booby-trap links.

    GreginMich

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2018-05-15T23:57:02+00:00

    I'm done, IE and Edge are both compromised to pop ups.  I have pop up blocking on and everything where the browser is nearly unusable... IE is getting pop ups, edge is getting this Flasfisi everywhere now.  Not just MSN.com

    Its absurd that Microsoft is ignoring IE and Edge, they both spam vocal popups that lock the browser, it doesn't infect but I have to use task manager to stop the pop up login pop up box and its says call here etc etc.

    its been going on for way to long, I guess the IE and Edge team have been on vacation for 6 months...   this just sad and I guess they don't care about losing brower share. Just stop including a browser if you are not going to support it.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  4. Anonymous
    2018-05-07T15:20:53+00:00

    I have been getting these alerts for Trojan:JS/Flafisi.D for about three weeks now almost every time I linked through a story on MSN (being careful to only try linking through to reputable sites, i.e. NYT, WashPo, etc.) This only seems to happen when I use Edge. First, is my computer infected at this stage (Defender seems to have quarantined it each time (have not clicked on the fake Flash message)? Second, what is MS doing about this since it seems to have been going on since February?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2018-05-04T23:57:40+00:00

    Last week, my new Dell computer had so many issues with fake Adobe update and fake Microsoft Technical Supporters pop-ups. Later, I learned that my computer was infected with viruses. At that time, McAfee LifeSafe which was installed for free with Dell computer could not block them. I removed McAfee and downloaded Malwarebytes.

    When I used Windows Defender to scan on April 29, I found three viruses:

    Trojan:JS/Flafisi.D

    Trojan:Win32/Powessere.H

    Trojan:Win32/Powessere.I

    Then Malwarebytes found 7 more. See my link topic:

    https://answers.microsoft.com/en-us/windows/forum/windows\_10-security/fake-adobe-flash-player-fake-ms-supporters-in-ms/86d6ddbd-7632-404e-902a-75643deb311a?tm=1525025303327

    I use Malwarebytes and Windows Defender to scan my computer several times a day. On May 3, my Windows10 updated to version 1803.

    This morning, May 4, while I was reading the topic on MSN homepage about “Report: Trump, Giuliani did not consult WH on Stormy reveal”, a fake Adobe Flash Player popped up again. This evening when I was reading the article “the bizarre reason why this woman says she was booted from plane” on MSN homepage, popped up another fake Adobe Flash Player.

    I copied the link and its image. Because I found no virus on my computer, I think popup ad is in MS ad homepage. 

    https://fan9iegglesscooking.org/6877480231424/4e215124e9a06a0f72408702fdd0222a/19112ea2e28bf09e363ee6944da6da75.html

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments