Windows 10: Edge Browser hijack scam

Last night I got the scam where the Browser (Edge) is locked and a message pops up saying to call a number. There is a computerised voice telling me I have a problem.

I can open Explorer ok and am using it to type this. I ran AV (Defender & MBAM) but nothing came up.
I disconnected my router and went back to Edge and I seemed to be able to clear that scam page. But did not connect the modem.

Today
Connected modem & downloaded ADwcleaner. It found nothing except for the following;

Is it ok to delete this registry stuff?
***** [ Registry ] *****
Key Found: HKLM\SOFTWARE\Classes\protector_dll.Protector
Key Found: HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Key Found: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Key Found: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Key Found: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Key Found: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Key Found: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Key Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C168639F-5810-4EC8-B1E8-0251AA8A771C}

***** [ Web browsers ] *****
No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

:)

 

Windows Security Alert

This is a scam do not reply. Can Hijack your browser also.

 

Can't close Edge- Message to call a number for help, to get off this web site

Close Edge with Task Manager and then open it indirectly by just doing a Web search in the Search box. You should then have the Tech Support Scam page plus a search result page. Don’t touch either one of those pages – go directly to the menu icons
in the upper right corner and click on the Hub menu icon (it looks like three lines of text) to see if it will open.

If the menu icons are still locked up, then you might want to try disconnecting from the internet:

http://malwarefixes.com/fixing-a-hijacked-edge-browser/

 

Yep - get rid of that stuff.

 

Thanks Simrick.

I just cleaned it. Went back to Edge and it opens ok. The hijack crap is gone.

Anything else I need to do?

 

You're welcome Jeddie.
A full (custom) scan with Malwarebytes AntiMalware Free (be sure to check the box for rootkits) wouldn't hurt.
Also might want to use OpenDNS servers on your NIC and Malwarebytes AntiExploit (free) to help in the future.
Cheers!

 

That's because what you were experiencing wasn't actually a virus, or malware per se. It was just a web page that makes clever use of javascript to prevent you from navigating away. Of course, when you kill the browser, it just reopens the same page and you're back to where you were.

What you did is exactly the correct thing, disconnect the computer from the internet, kill the browser, then reopen it. Since it can't now reach the page, it just gives you an error and no javascript executes, so you can close it out and you're good after that. No viruses, no malware.

While It looks like you had some other malware on there, they weren't related to the page you saw. That's strictly an annoying page. FYI, there exists similar hijack pages for most (if not all) of the major browsers.

 

Jeddie,

One more program for you, it complments ADWCleaner, which you already ran.

Please proceed to:
Downloading Junkware Removal Tool
Save it to the Desktop

Temporarily shutdown your antivirus to avoid any conflicts.

Right-click on JRT.exe and select: Run as Administrator
Press any key to launch the scan, and let it finish.

Once the scan completes, a report called JTR.txt opens on the Desktop.

Please copy/paste the content of the JTR.txt in your reply.