Windows 10: Fake Ransomware

Hi all.

I'm not loyal to any one browser; I alternate between Edge, Google Chrome, Firefox, and, yes, sometimes still Internet Explorer *Wink

But something I noticed, it mostly seems to happen when I'm using Chrome.

If I specifically go to the web site of www.yahoo.com and click on one of the articles, all of the sudden the browser gets hijacked and it's one of those fake Ransomware attacks; making it seem like you've contracted a virus, and if you try to navigate away by using the Home button, Back button, or click the "X" in the top right-hand corner, it won't let you, and a further pop-up tells you to call a phone number, blah blah blah, etc.

I just launch Task Manager and "End Task" on the Chrome browser; I then re-launch the browser and clear the History/ Cache.

In the Chrome browser, I click on the three vertical dots in the top right-hand corner, go to More Tools/ Extensions, but I don't see anything suspicious in here.

I have Windows 10 Pro, 64 bit, and no 3rd party anti-virus programs; I just use the built-in Windows Defender. I've run a Full System Scan, and nothing detected.

Any ideas anyone? And keep in mind: this mostly seems to happen only when using the Chrome browser, and only when clicking on articles on Yahoo.com

Thanks for any help or suggestions,


:)

 

Help Ransom virus?? how do you get rid of it some files on my flash drive were encrypted.

I'm not sure but I think that is Nemucod .CRYPTED or Decrypt.txt ransomware.

I suggest you read and do:
http://www.bleepingcomputer.com/news/security/decryptor-released-for-the-nemucod-trojans-crypted-ransomware/

and/or ask for help here: .crypted fake Ransomware

 

AVG has disabled all my drivers in Window 10 and now Ransomeware is taking over my computer

Actual ransomware infections typically targets and encrypts data files, appends an obvious extension to the end of encrypted filenames, and demands a ransom payment by dropping ransom notes in every directory/affected folder where data has been encrypted
but leaves the operating system working so the victim can pay the ransom.

If there are no obvious extensions appended to your file names, no ransom notes and you data is not actually encrypted, then you most likely are dealing with

fake ransomware, a
fake web page in your browser, or some other version of a

Tech Support Scam.

 

Sounds like you should download Malwarebytes and run a full scan. There's something on your computer if your browser is being hijacked.

 

Hi.
You're correct, to close the browser using Task Manager when this happens - never click on anything else, as it could trigger a malicious download. The Yahoo main page is well-known for constantly having infected ads at any given time, so I would stay away from it.

For your issue:
Download and run:
ADWCleaner (scan then clean if anything is found)
Downloads - AdwCleaner - ToolsLib
post the log

Reset all browsers on the system - every one, even if you never use it.
Reset Microsoft Edge to Default in Windows 10 Windows 10 Tutorials

How to Reset Your Web Browser To Its Default Settings

Run Ccleaner (free) on all browsers to clear out cache and temp files
Download CCleaner | Clean, optimize tune up your PC, free!

Turn off syncing, if you use that in your browser(s).

Flush your DNS
open an admin command prompt and type: ipconfig /flushdns

Consider usingOpenDNS DNS servers on your NIC to prevent going to known-bad sites:
Setup Guide | OpenDNS
.