Author Topic: Fake Microsoft alert  (Read 6572 times)

0 Members and 1 Guest are viewing this topic.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Fake Microsoft alert
« on: December 12, 2018, 03:05:09 PM »
I just received a full screen fake alert claiming to be from Microsoft, which I couldn't shut down for a while:

Incorrectly claimed the software was pirated. It is not, was activated on the phone by Microsoft.

"This computer is blocked" "Do not close this window and restart your computer" "Your computer's registration key is blocked"

Telling me to call a given number.
 
XP SP3 / Avast Free Antivirus 18.5.2342 / Virus definitions version: 181210-6 / CryptoPrevent

I plan to run Malwarebytes + Avast scans. Please advise. I cannot update the operating system.

Afraid to turn the computer off in case it doesn't restart!

« Last Edit: December 12, 2018, 03:10:57 PM by alicia.rose »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: Fake Microsoft alert
« Reply #1 on: December 12, 2018, 03:31:52 PM »
Sounds like one of the typical fake scam alerts that pop up time to time on certain webpages, once they block the browser from closing it's generally easier to use Task Manager to end the Browser process and clean out Browser temp files with CCleaner or similar.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #2 on: December 12, 2018, 03:45:58 PM »
I see. Thank you for helping CraigB.

I couldn't shut it down with Task Manager either for a while, but did eventually.

It alarmed me - thought that was the end!

About to run Malwarebytes.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #3 on: December 12, 2018, 10:22:59 PM »
Update: Malwarebytes long scan result including rootkits - No malware found.

Wasn't sure what I was dealing with at the time................a friend lost her computer to ransomeware.




Offline schmidthouse

  • VIRUS FREE A Long Time
  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7170
  • When you think you know, Think Again
Re: Fake Microsoft alert
« Reply #4 on: December 12, 2018, 10:42:39 PM »
As CraigB eluded too, the issue would be in your Browser, not your OS.
Try following his instruction in the post and clean up your Browser. :)

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #5 on: December 12, 2018, 11:32:51 PM »
Thank you for further putting my mind at rest schmidthouse..........I will follow CraigB's instruction and clean up my browser. :)

Offline schmidthouse

  • VIRUS FREE A Long Time
  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7170
  • When you think you know, Think Again
Re: Fake Microsoft alert
« Reply #6 on: December 12, 2018, 11:37:14 PM »
You're welcome.  :)

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #7 on: December 13, 2018, 02:34:50 AM »
Something has been done to the os.

I just had a "The system has recovered from a serious error" notification after turning off and restarting my computer.

Believe it blue screened and restarted while I was out of the room.

« Last Edit: December 13, 2018, 04:06:03 AM by alicia.rose »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: Fake Microsoft alert
« Reply #8 on: December 13, 2018, 04:50:33 AM »
I wouldn't worry to much if the system is working fine now, there could have been a small incompatibility of Malwarebytes or some other running program.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #9 on: December 13, 2018, 12:23:17 PM »
Thanks for answering CraigB

Since the incident the right hand side of the screen / any window I open quivers / moves rapidly left to right? Never seen this before.

Not had a BSOD for a long time - computer was running well.



« Last Edit: December 13, 2018, 12:29:33 PM by alicia.rose »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: Fake Microsoft alert
« Reply #10 on: December 13, 2018, 01:05:12 PM »
Alicia, if having further issues you may wish to visit the Viruses and Worms board, read through the Logs to assist with cleaning topic at the top of the board and supply the required logs for one of the Malware team to look over for you.

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 334
Re: Fake Microsoft alert
« Reply #11 on: December 13, 2018, 01:16:27 PM »
Definitely do what CraigB ^ recommends first and do nothing else to try and fix it yourself until someone there helps. But if they find nothing untoward and the trouble persists:-

Do you have a pre-incident restore point? Might be worth trying to see if it fixes the described problem. It can always be undone.

Whether it does fix the trouble or not I'd also put in a restore point and then run System File Checker ie. Run > sfc /scannow. That can fix corrupted systems files which maybe what the symptoms described are being caused by. It should not do any harm and, again, with the restore point you can always go back. 


Offline schmidthouse

  • VIRUS FREE A Long Time
  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7170
  • When you think you know, Think Again
Re: Fake Microsoft alert
« Reply #12 on: December 13, 2018, 06:18:56 PM »
As CraigB suggested, FIRST go here and follow instructions and one of our malware experts will assist.
https://forum.avast.com/index.php?topic=194892.0

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #13 on: December 13, 2018, 07:30:28 PM »
Thank you all, your help is much appreciated. I have already carried out a System Restore back to the 11th December and intended to carry out sfc / scannow, but will seek help first as soon as I have time.

Screen / windows are still shaking slightly.

Written on the malicious screen, along with what I already mentioned...............

"Virus alert"

For several reasons - I do not have Behavio(u)r Shield turned on.......................perhaps that would have stopped it?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Fake Microsoft alert
« Reply #14 on: December 13, 2018, 10:47:37 PM »
Quote
For several reasons - I do not have Behavio(u)r Shield turned on.......................perhaps that would have stopped it?
No, it is just a FakeAlert on a website

A ton of screenshots here:

https://www.google.com/search?q=microsoft+fake+alert&rlz=1C1JZAP_noNO713NO713&source=lnms&tbm=isch&sa=X&ved=0ahUKEwj7z93R453fAhXisYsKHfDVBhAQ_AUIDigB&biw=1600&bih=758