I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Jesus,

This thread has grown to many pages, so finding the instructions RodrigoLode from Microsoft provided many pages back is now difficult.

Providing the kind of information you offered might help, but it's more important that they can find your specific activity within the millions of individual log entries daily.  The following response Rodrigo made to a user named "Taffy087" back on page 24 of this thread gives the most basic instructions.

It's ok if you can't repro. I can go look in the history. Just need a seed so any feedback it's good. You can write "auto-redirect issue - please follow up - taffy" and I'll investigate from that. 

So in your case, you should post something to MSN feedback like "auto-redirect issue - please follow up - jesus" and then return here and post a reply to one of Rodrigo's posts that you've completed this with exactly what you posted to feedback so he can find it.

The MSN feedback button is displayed on any page while browsing the MSN website and appears as you scroll down on the page somewhere in the lower right-hand corner as I recall, similar to the one displayed here for feedback to the Community website.  So make certain you are on the MSN website when you select the feedback button.

Rob

< EDIT > I should have made clear Jesus, that Rodrigo's group can only help with advertisements coming from via the MSN advertising networks, since that's where his group operates.

Since I see you are having the issue while operating within Outlook email, I'm not sure whether Rodrigo can access that particular information or not, so he'll need to respond to that question.

Rob Koch, Thank you very much, you have been very kind, and you have provided very useful information.

As you say, the problem is appearing in Outlook, and they are being reported by users in Spain and Latin America. When you sign in to Outlook, a page is displayed in a new tab, where it is indicated that Microsoft is rewarding with products such as iPhone X, Samsung Galaxy and PlayStation 4 by answering some questions. Subsequently, the page indicates the product obtained, and the user is asked to enter the bank details to charge a small fee.

I have contacted abuseAToutlookDOTcom to see if they can help me. I understand that as you comment, Rodrigo and his team may not be able to help me. I don't know if the ads that appear in MSN and Outlook are shared on both platforms, although I guess this will depend on the creator of the campaign.

Thank you very much and I will keep you informed.

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested " If anyone is still experiencing this, please reply here." For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

yes, the ransomware:  intravenously.stream is the one of many https disabling my computer

My computer has been taken over by this virus....

Microsoft Edge is telling me:

The server festeroutcasting bid is asking for your user name and password. The server reports that is its from your network. PLEASE DO NOT SHUT DOWN or RESTART YOUR COMPUTER.....etc...

I need help please