I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

386 answers

Sort by: Newest
  1. Rob Koch 26,080 Reputation points Volunteer Moderator
    2018-07-05T20:51:12+00:00

    Jesus,

    This thread has grown to many pages, so finding the instructions RodrigoLode from Microsoft provided many pages back is now difficult.

    Providing the kind of information you offered might help, but it's more important that they can find your specific activity within the millions of individual log entries daily.  The following response Rodrigo made to a user named "Taffy087" back on page 24 of this thread gives the most basic instructions.

    It's ok if you can't repro. I can go look in the history. Just need a seed so any feedback it's good. You can write "auto-redirect issue - please follow up - taffy" and I'll investigate from that. 

    So in your case, you should post something to MSN feedback like "auto-redirect issue - please follow up - jesus" and then return here and post a reply to one of Rodrigo's posts that you've completed this with exactly what you posted to feedback so he can find it.

    The MSN feedback button is displayed on any page while browsing the MSN website and appears as you scroll down on the page somewhere in the lower right-hand corner as I recall, similar to the one displayed here for feedback to the Community website.  So make certain you are on the MSN website when you select the feedback button.

    Rob

    < EDIT > I should have made clear Jesus, that Rodrigo's group can only help with advertisements coming from via the MSN advertising networks, since that's where his group operates.

    Since I see you are having the issue while operating within Outlook email, I'm not sure whether Rodrigo can access that particular information or not, so he'll need to respond to that question.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2018-07-05T16:38:32+00:00

    RodrigoLode(MSFT), could you help us, users from Spain and Latin America with a similar problem we are having with the advertising that appears in Outlook?.There is a phishing campaign, using the name of Microsoft for months, and there is no way to contact someone to help us eliminate the problem. There are numerous affected users.

    If you need the web addresses of the advertisements or the links to the Discussion threads, I will indicate to you in my next answer.

    Thanks and best regards.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2018-07-04T03:47:07+00:00

    ALOS, the address is:  intravenously.stream

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2018-07-03T21:06:33+00:00

    Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested " If anyone is still experiencing this, please reply here." For more specifics on information requested please refer to the reply from Rodrigo at the following link:

    https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

    In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

    Invisible resource thieves: The increasing threat of cryptocurrency miners

    https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

    Especially important to report these occurrences or any other odd behaviors after using MSN website.

    Moderator Edit: Provided update.

    Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

     This one was easy to handle because it was just the old-fashioned dialog loop based scam:

    – but what’s coming next Microsoft?

    GreginMich

    [Original Title: Surprised again]

    I’m seeing Trojan:JS/Flafisi.D

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2018-07-02T22:12:21+00:00

    ransomware appearing and cutting off my access is:  intravenously.stream

    Was this answer helpful?

    0 comments No comments