I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Anonymous

2018-05-04T17:40:38+00:00

Hi Mary,

Could you please submit a piece of feedback saying "trojan threat - please help"? I'll use this as a seed to investigate your cases together with all others. You're definitely getting the offending ad that downloads the virus as a targeted advertisement.

To submit feedback - just go to www.msn.com. Scroll the page just a tad bit to see the "Feedback" button at the bottom right corner of the page; click to open the dialog and write the message above. It would help me a ton!!

Thank you!

-Rodrigo

MSN Engineering.
Was this answer helpful?

0 comments No comments
Anonymous

2018-05-04T23:57:40+00:00

Last week, my new Dell computer had so many issues with fake Adobe update and fake Microsoft Technical Supporters pop-ups. Later, I learned that my computer was infected with viruses. At that time, McAfee LifeSafe which was installed for free with Dell computer could not block them. I removed McAfee and downloaded Malwarebytes.

When I used Windows Defender to scan on April 29, I found three viruses:

Trojan:JS/Flafisi.D

Trojan:Win32/Powessere.H

Trojan:Win32/Powessere.I

Then Malwarebytes found 7 more. See my link topic:

https://answers.microsoft.com/en-us/windows/forum/windows\_10-security/fake-adobe-flash-player-fake-ms-supporters-in-ms/86d6ddbd-7632-404e-902a-75643deb311a?tm=1525025303327

I use Malwarebytes and Windows Defender to scan my computer several times a day. On May 3, my Windows10 updated to version 1803.

This morning, May 4, while I was reading the topic on MSN homepage about “Report: Trump, Giuliani did not consult WH on Stormy reveal”, a fake Adobe Flash Player popped up again. This evening when I was reading the article “the bizarre reason why this woman says she was booted from plane” on MSN homepage, popped up another fake Adobe Flash Player.

I copied the link and its image. Because I found no virus on my computer, I think popup ad is in MS ad homepage.

https://fan9iegglesscooking.org/6877480231424/4e215124e9a06a0f72408702fdd0222a/19112ea2e28bf09e363ee6944da6da75.html
Was this answer helpful?

1 person found this answer helpful.

0 comments No comments
Anonymous

2018-05-07T15:20:53+00:00

I have been getting these alerts for Trojan:JS/Flafisi.D for about three weeks now almost every time I linked through a story on MSN (being careful to only try linking through to reputable sites, i.e. NYT, WashPo, etc.) This only seems to happen when I use Edge. First, is my computer infected at this stage (Defender seems to have quarantined it each time (have not clicked on the fake Flash message)? Second, what is MS doing about this since it seems to have been going on since February?
Was this answer helpful?

1 person found this answer helpful.

0 comments No comments
Anonymous

2018-05-08T20:54:53+00:00

Hello, I have been using the UBlock since 4/28. The good I have not gotten any flash popups since then. The bad I use MSN as my home page and had a practice of reading or browsing the 12 or so articles daily. Now they no longer appeasr and I just have a white empty box.

I would gladly uninstall Ublock if Microsoft ever gets around to improving Edge and stop the Flash popup. Any Financial work or deep browsing I now use Chrome.
Was this answer helpful?

0 comments No comments
Anonymous

2018-05-08T21:19:36+00:00

Hello, I have been using the UBlock since 4/28. The good I have not gotten any flash popups since then. The bad I use MSN as my home page and had a practice of reading or browsing the 12 or so articles daily. Now they no longer appeasr and I just have a white empty box.

I would gladly uninstall Ublock if Microsoft ever gets around to improving Edge and stop the Flash popup. Any Financial work or deep browsing I now use Chrome.

Received the following information the other day. Have not had time to verify. Except that I've been using MBytes for years.

Larry (Malwarebytes Support)

May 1, 09:48 PDT

See if this helps with uBlock

https://www.dailywoke.com/how-to-use-ublock-origin-to-block-all-ads-complete-guide/

Larry Tate - "LDT"

Senior Malware Removal Specialist

Technical Support Specialist

support.malwarebytes.com
Was this answer helpful?

0 comments No comments