I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  2. Anonymous
    2018-05-30T18:14:28+00:00

    THANKS.  WE MAY NOT BE LOOKING AT THE SAME THING.  MINE WAS (I GUESS ) A RANSOME WARE IN WHICH I HAD TO CALL A MICORSOFT HELP LINE ON THE SCREEN TO AVOID LOSS OF ALL INFO IN THE COMPUTER.  Sorry for the caps.    I unplugged the computer for several  minutes and then got a normal restart.  Dave

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-05-30T16:33:06+00:00

    The ads are targeted and dynamic in nature so it would change for every user. Having the feedback entry from you would allow me to dig through my logs to find the ads served to you at that moment. You can submit the feedback from any page...

    Thanks Dave!

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-05-30T15:53:43+00:00

    We've been trying to take each ad that causes this down, but they're popping up in other flavors everywhere. Our ad exchange upping their quality checks to catch these before the ads are served. For now, if you could submit a piece of feedback, it would help a lot. Go to MSN.com, scroll down the page just a bit and click on the "Feedback" button on the lower right corner of the page. Write: "please help - virus alert" and my team will follow up on it. Click submit and you're done.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-05-30T15:04:00+00:00

    Hi all,

    I'm on the MSN Engineering team and would love help if anyone encounter this again. We've been tracking this since it started in mid February. We do quite a bit of work to scan the ads we get from our exchanges, but some behave differently for certain users than they do when we do our scanning. In the future, please continue to submit feedback so we can narrow the scans on our end and potentially reproduce and remove this once and for all. If your page was hijacked and you couldn't view the article, please mention the article headline you've visited as well. 

    If anyone is still experiencing this, please reply here. 

    Thanks,

    -Rodrigo (MSN Engineering)

    Have received this message a few times.  How do I get rid of it?

    https://ssdf.space/page/us/virus/virusKiller.php?clickid=20180530225949\_544\_0e8986Fh

    Was this answer helpful?

    0 comments