I’m seeing Trojan:JS/Flafisi.D detections and Tech Support Scams on the Edge browser Start page

Anonymous
2018-02-28T16:36:56+00:00

Update: A member of Microsoft's MSN Engineering Team (RodrigoLode(MSFT) has responded to acknowledge the malvertising issues associated with MSN portal. They have also requested ***" If anyone is still experiencing this, please reply here."***For more specifics on information requested please refer to the reply from Rodrigo at the following link:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/im-seeing-trojanjsflafisid-detections-and-tech/8fbe8eaf-1af0-4e76-9ab0-57828f631a5f?page=7&messageId=3661a31c-2019-4808-a88b-283919038cc1

In addition to reporting the fake pop-ups themselves I would advise that you take note if there is a significant loss of performance on computer after encountering, in particular, the fake Adobe Flash Player update. If things seem sluggish you may have been subject to one of the more prevalent malicious activities known as crypto-mining/coin mining.

Invisible resource thieves: The increasing threat of cryptocurrency miners

https://cloudblogs.microsoft.com/microsoftsecure/2018/03/13/invisible-resource-thieves-the-increasing-threat-of-cryptocurrency-miners/

Especially important to report these occurrences or any other odd behaviors after using MSN website.

Moderator Edit: Provided update.

Just reading the “Comey trolls Trump” article on the Edge Start page and this pops up:

 This one was easy to handle because it was just the old-fashioned dialog loop based scam:

– but what’s coming next Microsoft?

GreginMich

[Original Title: Surprised again]

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

386 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-05-12T19:45:48+00:00

    windows defender is not correcting this intrusive problem....Please help

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-05-12T17:04:54+00:00

    Hello Rob…

    This message concerns an Adobe Flash Player Update popup, which pops up on my desktop computer 2 or 3 times a day when I sign onto the internet. (Not every time I sign on)　

    I am using Windows 7 with Internet Explorer 11 (Version: 11.0.9600.19002) - (Update Versions: 11.0.60 "KB4103768") - (Product ID: 00150-20000-00003-AA459). I use Microsoft Security Essentials.

    When signing on several times during the day or night, a "popup" for "Adobe Flash Player" update takes over my Yahoo homepage. I get a warning in my task-bar from Security Essentials. When I open Security Essentials and click on "History" I see this "Trojan:JS/Flafisi.D". It is shown several times in the "Quarantined Items" and in "All Detected Items". I delete all of them, but it keeps coming back!

    Was this answer helpful?

    0 comments
  3. Anonymous
    2018-05-12T10:48:36+00:00

    Yes, it seems my computer has experienced some much more sluggish performance at times. Running Defender scans show no infections however since you guys can't seem to get the malvertising issue ironed out with your own website, not sure how much faith I have in your security scans.

    Was this answer helpful?

    0 comments
  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  5. Anonymous
    2018-05-12T00:17:21+00:00

    Hi,

    We are making adjustments on identification of Flafisi.D malware. If you are still getting reports of ‘false detections’, please use this Feedback Link and provide us the steps you follow to reproduce the detection, including the URL from the browser.

    If you would like to report **** ‘false detections” other than Flafisi.D, you can use this Feedback Link or submit the detected file here.

    Thanks,

    Paul...

    Was this answer helpful?

    0 comments