I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

386 answers

Sort by: Oldest
  1. Anonymous
    2018-05-12T10:48:36+00:00

    Yes, it seems my computer has experienced some much more sluggish performance at times. Running Defender scans show no infections however since you guys can't seem to get the malvertising issue ironed out with your own website, not sure how much faith I have in your security scans.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2018-05-12T17:04:54+00:00

    Hello Rob…

    This message concerns an Adobe Flash Player Update popup, which pops up on my desktop computer 2 or 3 times a day when I sign onto the internet. (Not every time I sign on) 

    I am using Windows 7 with Internet Explorer 11 (Version: 11.0.9600.19002) - (Update Versions: 11.0.60 "KB4103768") - (Product ID: 00150-20000-00003-AA459). I use Microsoft Security Essentials.

    When signing on several times during the day or night, a "popup" for "Adobe Flash Player" update takes over my Yahoo homepage. I get a warning in my task-bar from Security Essentials. When I open Security Essentials and click on "History" I see this "Trojan:JS/Flafisi.D". It is shown several times in the "Quarantined Items" and in "All Detected Items". I delete all of them, but it keeps coming back!

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2018-05-12T19:45:48+00:00

    windows defender is not correcting this intrusive problem....Please help

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2018-05-12T20:23:07+00:00

    Hi all,

    I'm on the MSN Engineering team and would love help if anyone encounter this again. We've been tracking this since it started in mid February. We do quite a bit of work to scan the ads we get from our exchanges, but some behave differently for certain users than they do when we do our scanning. In the future, please continue to submit feedback so we can narrow the scans on our end and potentially reproduce and remove this once and for all. If your page was hijacked and you couldn't view the article, please mention the article headline you've visited as well. 

    If anyone is still experiencing this, please reply here. 

    Thanks,

    -Rodrigo (MSN Engineering)

    Hey Rodrigo:  This is RICKCOE.  Have plenty of issues with this latest mess posted on site.  A significant amount of time was wasted with Malwarebytes. After I told them that I was just not "getting" what it was that they wanted me to do in order to get them information; they stopped responding to my email requests for help.

    I have also had several phone contacts with Microsoft over the last few days.  They tried to contact me to talk about the case, but the agent I had worked with never sent me a follow-up to the chat, gave me a case number, or sent me anything verifying her remote access to my PC.

    Now I do have a case number from the person that called me back.  I also have a long "Notepad" transcript of an info recovery program from Malwarebytes.  Something called FRST and something Farbar recovery tool.  I want to get the info to someone at Microsoft, but need a secure way to do so.

    I have had many fewer problems since I installed uBlock Origin.  FYI-Another fake pop-up is a registration form for Bitware.  I am still noticing some Windows 10 irregularities since downloading the newest upgrade.  I don't know why, but every time MS issues a major upgrade I have problems.  Going from 7 to 10 was a real blast!!!!  Anyway, I read an article in a release from Malwarebytes saying that Google was having many more problems than they were expecting!  

    After what, 3-5 days of dealing with this, I'm beat!!!!  Please feel free to contact me with other ?'s, you have my personal email and phone number. Regards, RICKCOE

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2018-05-13T00:51:55+00:00

    Hi,    Just got the Trojan:js/fla at 7:40pm central. Msm page and went to yahoo/finance then it popped up.

    Please get rid of this soon as I am running out of patience.  I suggest the Microsoft take about 6 laptops and use them just like we do.  I'm sure you will get the pop ups just like us. That way you won't need feed backs from us.

    Guys, this isn't rocket science!  It's a matter of giving service.  If you don't have enough employees just tell us that you don't want to be in the business anymore.

    Jim

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments