I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2018-05-18T21:49:55+00:00

    This is causing huge problems, how do I remove this virus

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-05-19T13:29:21+00:00

    I don't know if this has something to do with the trojan, but something weird happened to my brand new laptop.  Yesterday, I clicked on a non-Microsoft web site, and a message from Windows Defender stating that it had blocked Trojan:JS/Flafisi.d popped up in my notifications. The message instructed me to restart my computer. I noticed a button which was supposed to remove the virus just above the Quarantine history link. I clicked on the button and then restarted my computer. Later in the afternoon, I turned on my laptop again, and I left it alone for a couple of hours.  I tried to wake it from sleep, but it took a long while to power on.  When it did, my load screen came on and remained on for over an hour. Windows finally displayed a message saying that Windows could not load properly and that it will roll back to a previous version.  I didn't see an arrow, so the only thing I could do was to unplug the laptop and let the battery run down. This morning, I turned it on, and everything is ok. What do you think?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2018-05-20T02:03:25+00:00

    Just got Trojan: JS/Flafisi.D around 8:30pm central, 5/19/2018.  I was on finance/yahoo.com reading up on ticker MU in the financials tab.  Don't get this very often but, when I do it totally takes over the page.  So far Windows Defender has blocked it.

    Would appreciate if Microsoft would tell me how to get rid of this!

    I'm getting a notice of a major Microsoft update that needs my help to download. I have been clicking to remind me later. Does anyone know if I can trust this?  I don't know what to trust anymore?

    Thanks,  Jim

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-05-20T04:55:32+00:00

    This just happened and I "x" out of the tab and checked Windows Defender and it shows this threat found. I don't know how to "remove" the threat. Now what do I do??? I took a couple of screen shots to include here- This is the history at 902 and the site I was on when it popped up. ![](https://learn-attachment.microsoft.com/api/attachments/22e4c437-e8de-4065-954f-4abd1b6ff235?platform=QnA

    Was this answer helpful?

    0 comments
  5. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more