I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2018-06-06T17:22:01+00:00

    All - we have our ad partners identify several ad IDs that were causing this. Most of them have been taken out of the rotation and we should see less occurrences of this. We also identified a particular ad buyer that seems to be the culprit and we're looking to ban it from our site. I'll keep you all posted.

    If you have a virus report, make sure to run Windows Defender on it. It should clean up your machine, though other adware might be present. I don't have a recommendation on it, but several folks seem to like Malwarebytes software for it.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-06-06T22:07:01+00:00

    Thank you for the update.

    I'm sure that I have the virus, but nothing seems to help.  I have scanned my two-month old laptop with Windows Defender (both full scan and Windows Defender Offline), Malwarebytes, Zemana, and HitPro, yet none of them detected the virus after my last post (page 21 of this thread).  I also have performed a Clean Install twice...to no avail.

    I think that maybe the virus embeds itself into Windows 10's main code after it installs onto a device.  I'm saying this because I saw Flash Player (32-bit) installed as a setting in the System and Security section of my Control Panel.  I had never seen it before I had reported the rogue page to you.  It's only speculation, though; I'm not sure how many others have seen this as well.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-06-06T22:11:32+00:00

    Thank you for the update.

    I'm sure that I have the virus, but nothing seems to help.  I have scanned my two-month old laptop with Windows Defender (both full scan and Windows Defender Offline), Malwarebytes, Zemana, and HitPro, yet none of them detected the virus after my last post (page 21 of this thread).  I also have performed a Clean Install twice...to no avail.

    I think that maybe the virus embeds itself into Windows 10's main code after it installs onto a device.  I'm saying this because I saw Flash Player (32-bit) installed as a setting in the System and Security section of my Control Panel.  I had neverseen it before I had reported the rogue page to you.  It's only speculation, though; I'm not sure how many others have seen this as well.

    I wish I had more experience with the viruses. Always safe to remove all Flash from your machine, though. I block it on my computer.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2018-06-07T00:22:27+00:00

    Thank you for the update.

    I'm sure that I have the virus, but nothing seems to help.  I have scanned my two-month old laptop with Windows Defender (both full scan and Windows Defender Offline), Malwarebytes, Zemana, and HitPro, yet none of them detected the virus after my last post (page 21 of this thread).  I also have performed a Clean Install twice...to no avail.

    I think that maybe the virus embeds itself into Windows 10's main code after it installs onto a device.  I'm saying this because I saw Flash Player (32-bit) installed as a setting in the System and Security section of my Control Panel.  I had never seen it before I had reported the rogue page to you.  It's only speculation, though; I'm not sure how many others have seen this as well.

    In my Control Panel>System and Security, I also have Flash Flayer (32 bit) just like you do. 

    But the problem is my programs and Features do not show FP.

    The WD and Malwarebytes do not find any virus. 

    So, where does Flash Player come from? and how do we remove it? This is my new computer. I have fake FP problem since day one. 

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-06-07T00:41:37+00:00

    How do we remove all of Flash? I've tried using Adobe's official uninstaller, but it didn't get rid of it

    Was this answer helpful?

    0 comments