I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2018-06-10T10:17:46+00:00

    This is what I am getting in my history even as I am online this keeps coming I changed passwords checked my security still this is showing up

    askqyrrw1yllb089

    (Count: 60)

    • pSDhCyDkGXmDXLdmBJ1RXpPLt5SUJMG0QHYTBriZu0TIUIIVScmUm6pIKuAHkUA/bxgmjAz1oO0vJcFf5iIn4u1dMwDkOf/3gU5YSqomBByU= http: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
    • http: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
    • pYpuk4BNRn1TFLabzqnA4RBEJCkDH/yv4BtaTWsK826AhqVAD+POI4GGlvY9lVQh5OFE4QB6PnLcIJV/WO6DyN09aiVeUZ2UHIQ7lyEZJemA= http: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
    • http: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
    • http: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
    • http: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
    • pc7Uxzvd5ichkAUpTEupHPnEyAkSQ8nkTBvBdPX1PEeXKkCXcTuidE7

    Was this answer helpful?

    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  4. Anonymous
    2018-06-12T04:38:22+00:00

    Im still getting this issue. Now what?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2018-06-14T13:54:25+00:00

    Im still getting this issue. Now what?

    Dear Engineer, first of all I have got another Anti-virus that has crept in without my awareness it's AVG, I already have BT McAfee that comes as a free one because I am a BT customer for home phone and Broadband. It takes long for me to start my PC and recently I had to keep changing passwords many times. Secondly, I am far from a Developer and got into Windows Insider I should never have done, as I seem to have been one before. I shall be greatly relieved if this issues can be solved as I tried to Uninstall AVG without result. After I wrote to you, I restarted and got Windows Defender eventually. I will be happy with that as I used to be. I tried to Unsubscribe from Windows Insider too, without luck getting lot of Community replying that I don't want either. I would like to be left in Peace. Thank you so much.

    Zarina Bhatia

    Was this answer helpful?

    0 comments