Just had a wierd 'virus' popup

JohnB47

I was surfing just now and had just created a new tab in Chrome when a popup appeared saying:

"13292x905898-3399x014-virus.comsays:

RDN/Trojan.worm!055BCCAC9FEC Infection

Call Microsoft Technical Support Immediately at 0800 086 9996

The following data will be compromised if you contunue (sic)
1. Passwords
2. Browser History
3. Credit Card Information

This virus is well known for complete identity and credit card theft blah blah...."

I did something else (can't remember what) and an American female accent came over the speakers, repeating the 'advice' to call the 0800 number.

I'm pretty sure this is a scam and have no intention of calling the number. Any idea how this happened? I've never had this before.

I'm running an Avast scan now.

P.S. my PC is Win 10 with auto-updates set to on. Also, the most recent thing I've done is to rip a CD to MP3 that a friend gave my wife. Could this have introduced the problem?

Thanks.

hans_2

Download and run MALWAREBYTES ADWCLEANER

DavidP24

SCAM

http://www.unknownphone.com/search.php?num=08000869996

http://who-called.co.uk/Number/08000869996

As they are paying for the call I suggest we all call it, play incredibly dumb, say there is no start menu and not find anything they want (they will try to enable remote access) and eventually after 30m to an hour say "but I am using Linux and it does not allow scammers from India to access my PC"

Apparently they get quite rude so could be fun

Biggles

hans_2 wrote: »

Download and run MALWAREBYTES ADWCLEANER

Actually, that's a link to Adwcleaner (now owned by Malwarebytes), which just gets rid of adware.

What you need is Malwarebytes itself (https://www.malwarebytes.com/), as well, of course, as your own anti-virus scanner.

And if you should be tempted to play silly !!!!!!s and ring these people, as suggested, make sure your caller ID is withheld. But they're not really worth it.

hans_2

Biggles wrote: »

Actually, that's a link to Adwcleaner (now owned by Malwarebytes), which just gets rid of adware.

Probably why it's called MALWAREBYTES ADWCLEANER
and
Removes adware
Removes unwanted toolbars
Removes potentially unwanted programs (PUPs)
Removes browser hijackers

JohnB47

Thanks for suggestions everyone.

I ran a full avast scan - no problems found. Then I downloaded and ran ADWCLEANER. It said I had 22 problems and it cleared them.

So is that the problem sorted?

The files that ADWCLEANER deleted mentioned azlyrics.com and nicerfoods.com It also deleted folders C:\ProgramData\Booking.com and C:\Users\Public\Pokki (among others).

Does this help determine where the problem originated, or is that not worth doing?

Cheers.

forgotmyname

You deleted stuff without checking what data of yours its deleting?

I used the nectar toolbar. Searches earn you bonus nectar point. Yes they are probably selling the data. But they can sell as much data as they like when all the searches are made up just to get the nectar points.

If you search kinky fetish items they do not seem to offer any great deals for some odd reason. When searching for cat and dog stuff though there were plenty of offers.

Adware and Malwarebytes said it was malware. Not its a search toolbar that I installed.

Biggles

hans_2 wrote: »

Probably why it's called MALWAREBYTES ADWCLEANER and Removes adware

Exactly, this fellow was a bit nastier than adware, I fancy. Malwarebytes is much more thorough.

Interestingly, I noticed that the version of Malwarebytes now available for download was a completely new version, Malwarebytes 3, which I downloaded to replace my existing v.2. Seems to work in very much the same way, though.

JohnB47

forgotmyname wrote: »

You deleted stuff without checking what data of yours its deleting?

Well, I did in the best way I could. I inspected the report it gave and tried to identify websites that mattered. The only two sites mentioned meant nothing to me so I assumed that any relevant data could be deleted. I have a recent backup anyway.

How would you have checked what data was being deleted?

Biggles

JohnB47 wrote: »

The files that ADWCLEANER deleted mentioned azlyrics.com and nicerfoods.com It also deleted folders C:\ProgramData\Booking.com and C:\Users\Public\Pokki (among others).

Does this help determine where the problem originated, or is that not worth doing?

If it was the same as the [identically worded] message I got, it probably didn't put anything on your disk and was relying on you ringing the Freefone number to give them access, in other words the reverse method of the phone calls from 'Microsoft support' that most of us have had at some point.

I ran everything I'd got immediately afterwards and none of them found anything.

What you had was probably just adware that had been on your disk for ages, I found loads the first time I ran Adwcleaner.

hans_2

JohnB47 wrote: »

Also, the most recent thing I've done is to rip a CD to MP3 that a friend gave my wife. Could this have introduced the problem?

Did you use Windows media player or downlload a progamme for the rip?
.