Windows 10: OT: Loveworm scam

Thought I'd report this incident, in case it's more widespread.

My browser is Firefox and one of the many extensions is called Tab Mix Plus. I haven't visited the TMP Forum for a long time. (Maybe never on this new Win 10 PC which is now 10 months old.) I did so this morning to post a question and I clearly used a bookmark which is now no longer valid: [removed by admin]. (Haven't tried it again since, so BE CAREFUL.)

It was immediately hacked (redirected), with the following page displayed:

https://dl.dropboxusercontent.com/u/4019461/Hack.jpg

A continuously looped audio track was played:

"Critical alert from Microsoft. Your computer has alerted us that it is infected with a virus and spyware. If you close this page before calling us we will be forced to disable your computer to prevent further damage to our network...."

The page and Firefox were frozen so I exited via Windows 10 Task Manager.

I'm still trying to find what caused it, probably a PUP, downloaded with some other genuine program when I was less careful than usual during the installation procedure.

--
Terry, East Grinstead, UK

:)

 

When starting Edge I get a screen that says there is a BSOD dll registery error code 0x80060402

BSOD: Dllregistery setting has the error code 0x80060402

Then a note to call a Microsoft certified technician with a 855-xxx-xxxx phone number ot help with the issue. I have to use task manager o quit Edge to get off the screen.

There is also a reference to a Windows Defender error code wich I cannot find in Windows defender.

This is a scam but I don't know how to get this to stop.

 

alcatel ot 902

Hi draganpanovski,



Thank you for posting on the forum.



However, this forum is for issues related to the Windows Phone 7 only.



Kind Regards,

 

Please do not ever post infected links on any of our sites.

 

That is nothing serious, something (a script) has downloaded into you temporary files and ran. Clean your browser's cache (CCleaner) and that is it. I have tested TMP forums, nothing is there, the link is just an empty warning. I was able to close the webpage just fine via Chromium based browser, including the nasty webpage afterwards. *Smile

 

Thanks, appreciate your testing it.

Terry, East Grinstead, UK

 

If you use the extension Thumbnail Zoom Plus on Fx you can hover above the link and it won't open the infected page, but opens an enlarged image. If it's an image, not if it's the page*Wink