I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2018-04-10T22:33:42+00:00

    Southside2005 - next time you hit this, could you please click on "Feedback", write "ad with trojan/virus on MSN article" and send it? Due to privacy reasons I can't look you up in our systems, but I can anonymously check what your request had served based on that entry. I get a bit more metadata I can mine on my end to see and potentially take this down.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-04-11T03:27:37+00:00

    Hi Rodrigo

    Today also I got redirected to adobe flash player page and below is the page url which I got redirected.

    https://cai3vfopgames.com/2428825466112/5d73431b4ef56d8f0bffd307671d248e/097d5fe8a636e15375aa1706ca6476ce.html

    It redirects whole page and I need to hit back in order to go to MSN page again.

    Today I got redirected with below MSN page - https://www.msn.com/en-us/sports/nfl/aaron-rodgers-meets-dalai-lama-on-india-trip-gives-packers-gifts/ar-AAvIRib?ocid=spartanntp

    I am not sure hot to send feedback so please help with steps here. 

    Thank you.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-04-11T17:33:03+00:00

    Hi Bhavesh,

    Sorry I missed the instructions on how to give feedback. For that, just go to any MSN page after you saw the offending ad and click on the "feedback" button on the bottom right corner of the page. If you don't see it, just scroll a bit down and the button should show up. If you give feedback right on the page that is not performing, even better. I understand that in this case it's difficult since the browser is being redirected without any action on your end.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-04-11T22:05:11+00:00

    I've received this red screen about 3 times with a verbal loud computer sounding voice repeating the message -I had to control alt dlt to remove the tab - can some one assist me in removing his from my computer. I cant particularly find this in my registry . any help would be greatly appreciated.

    Thanks

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-04-12T01:31:01+00:00

    Hi, Rodrigo.

    I also am regularly being redirected from MSN news pages to both the fake Flash Player update page and once to the red page warning of a virus infection. Defender blocks a virus from downloading from the fake Flash Player page, but I have run Defender, Malwarebytes, ADW, CCleaner and nothing has eliminated this problem. I even have run them from safe mode. The redirects only seem to happen with Edge and only on MSN pages. 

    I hope you are able to find a solution. In the meantime, I am using Chrome. I have not had a problem with their browser.

    Was this answer helpful?

    0 comments