I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Anonymous
    2018-05-25T16:26:12+00:00

    its not infecting your computer, its a vulnerability in the browser and you have to go into task manager and kill the browser, they need to fix it.

    Not really MikeST, the browser's doing exactly what it's supposed to, though Microsoft might possibly make it a bit easier to exit some of these within Edge.

    In truth the real problem is the malvertising within certain ad networks used by MSN as has now been discussed in depth in this thread and others.

    Though most seem to indicate now that the problem has declined for MSN itself and so the number of reports have declined here as well, these same particular detections will continue to appear on other websites until the offending advertisers and/or networks themselves are truly shut down.  This would be part of the goal of the Windows Defender detections and the only true solution, while all of the effort in this thread has been focused on stopping them on the MSN and related Start pages for the Edge and Internet Explorer browsers.

    Rob

    You're exactly right. We did find 3 offenders and have taken the ads down, but I've seen new reports of other flavors of the same issue and my team is still working on tracking them down as well as beef up the quality gates that happen at the ad exchange so new issues never flow into the MSN network again. We have not stopped investigating despite the lower number of reports in the last couple of weeks.

    Was this answer helpful?

    0 comments
  4. Rob Koch 26,160 Reputation points Volunteer Moderator
    2018-05-25T15:54:56+00:00

    its not infecting your computer, its a vulnerability in the browser and you have to go into task manager and kill the browser, they need to fix it.

    Not really MikeST, the browser's doing exactly what it's supposed to, though Microsoft might possibly make it a bit easier to exit some of these within Edge.

    In truth the real problem is the malvertising within certain ad networks used by MSN as has now been discussed in depth in this thread and others.

    Though most seem to indicate now that the problem has declined for MSN itself and so the number of reports have declined here as well, these same particular detections will continue to appear on other websites until the offending advertisers and/or networks themselves are truly shut down.  This would be part of the goal of the Windows Defender detections and the only true solution, while all of the effort in this thread has been focused on stopping them on the MSN and related Start pages for the Edge and Internet Explorer browsers.

    Rob

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-05-25T01:59:46+00:00

    THis is truly disturbing, please fix this..it's coming back no matter what spyware malware, virus delete I use

    Was this answer helpful?

    0 comments