I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2018-04-12T01:48:23+00:00

    Hi Gonzo, 

    I would love to go deeper into the telemetry data that led you to those problems in Edge. If you don't mind just sending some feedback with the following "Adobe ad fake flash player - please investigate", I can take care of it on my end. You can send the feedback from Chrome too, but best if you do it from Edge itself. From any article, just scroll a bit down to make the "feedback" button show up on the bottom right corner of the page; click on it and write the text in quotes above.

    Thanks for taking the time to share your experience. Once it's resolved, I'll update the thread here and give you all an update. 

    PS: my suspicion on why the malware cleaners are not solving the problem is that you got targeted for the ad that causes this by the exchange and the chances of it showing up again are high.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-04-12T01:31:01+00:00

    Hi, Rodrigo.

    I also am regularly being redirected from MSN news pages to both the fake Flash Player update page and once to the red page warning of a virus infection. Defender blocks a virus from downloading from the fake Flash Player page, but I have run Defender, Malwarebytes, ADW, CCleaner and nothing has eliminated this problem. I even have run them from safe mode. The redirects only seem to happen with Edge and only on MSN pages. 

    I hope you are able to find a solution. In the meantime, I am using Chrome. I have not had a problem with their browser.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-04-11T22:05:11+00:00

    I've received this red screen about 3 times with a verbal loud computer sounding voice repeating the message -I had to control alt dlt to remove the tab - can some one assist me in removing his from my computer. I cant particularly find this in my registry . any help would be greatly appreciated.

    Thanks

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-04-11T17:33:03+00:00

    Hi Bhavesh,

    Sorry I missed the instructions on how to give feedback. For that, just go to any MSN page after you saw the offending ad and click on the "feedback" button on the bottom right corner of the page. If you don't see it, just scroll a bit down and the button should show up. If you give feedback right on the page that is not performing, even better. I understand that in this case it's difficult since the browser is being redirected without any action on your end.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-04-11T03:27:37+00:00

    Hi Rodrigo

    Today also I got redirected to adobe flash player page and below is the page url which I got redirected.

    https://cai3vfopgames.com/2428825466112/5d73431b4ef56d8f0bffd307671d248e/097d5fe8a636e15375aa1706ca6476ce.html

    It redirects whole page and I need to hit back in order to go to MSN page again.

    Today I got redirected with below MSN page - https://www.msn.com/en-us/sports/nfl/aaron-rodgers-meets-dalai-lama-on-india-trip-gives-packers-gifts/ar-AAvIRib?ocid=spartanntp

    I am not sure hot to send feedback so please help with steps here. 

    Thank you.

    Was this answer helpful?

    0 comments