Windows 10: Something nasty in my tech preview

I have had a copy of the technical preview since the beginning, using WD and the free Malwarebytes with no problems up till last night. My home page on Edge is Sky.com which has my email and news, and I was looking through the many news items when a "warning " popped up. "PLEASE CONTACT MICROSOFT LIVE TECHNICIANS", and a UK phone number, (020)3805 0592 (toll free). The website was tekharmor.com. The browser was locked, no way to shut it down except shutting down or restarting the pc. After restarting the pc the malware was still there. Another restart later, I ran Malwarebytes and Windows Defender without anything being detected. The tech preview is about to be scrapped and a fresh load put on the pc, I will not be held to ransom by these b*****ds.

:)

 

Windows 10 upgrade installed. Taskbar frozen. Task Manager will not load. No Sound. Sluggish opening progs.

Me too. On my first upgrade attempt from Win10 tech preview I had the frozen taskbar and cortana. Critical error reported. I reinstalled and the problem seems fixed, but it has reappeared. I will try the clean boot solution, since the sfc /scannow suggestion
did not help.

This problem is appearing with some frequency. I suspect a nasty bug, and hope a fix will be forthcoming!

 

memory probs n93

Hi yes this is the same on my N93, the gallery display is ok and the slideshow is really nice, but the preview after the pic is taken is really nasty looking.

Dan

 

Yeah, unfortunately Edge does not support extensions yet, and it sounds like you may have been served an infected ad (very common these days). Malwarebytes Antimalware Free is not an "active" protection. The paid version probably would have prevented this from happening. Their Anti-Exploit helps in these situations a bit. Also CryptoPrevent.

Solved Scammers Exploit Windows 10 Upgrade Rollout-What You Need to Know - Windows 10 Forums

Hate to see you quit the Insiders program over this! *Smile

 

Thanks, Simrick, I have no intentions of leaving the insider program yet. Currently, I have a problem with the replacement, see "what have I installed?" in installation and setup.

 

Just got caught by these scum, though I've got used to dealing with these.

I'd say it's a browser locker, comes from a malicious ad.

Browser can be closed by using task manager (CTRL-ALT-DEL etc.).

But when you re-open, it opens the same tab again!

DO NOT re-open the browser directly, do something that will open a new tab (easy if you use Cortana) - the offending tab will now be inactive, and then you can close the browser (close all tabs) - now you're clear!

 

Disconnect computer from internet, restart computer, delete offending page, then reconnect to internet.

 

You can change that behavior in settings. Smart money is to always closing all tabs on shut down while opening to a secure home page

 

If page is locked it is not possible to access Settings, Task Manager or have any control over mouse.

 

Suggest you run this program to try to terminate the malware process that may be blocking your attempts at removal. Do NOT reboot after running this program. Once this program is run, scan with your malware scanners to see if they show up & can be removed.

RKill Download

Other programs you could run would be AdwCleaner & JRT, which are good at dealing with adware.

AdwCleaner Download

Junkware Removal Tool Download

 

I would recommend running ADW Cleaner, followed by Malwarebytes Premium. I clean this junk off PC's every day and these two tools have not let me down yet...

 

There is no need to install any software or run any scans with these things, simply ctrl alt del and end edge browser, open word pad and type Google or any other web address, click on it and when asked if you want to open the link click yes and edge will open on the address you typed and you can now take pleasure in killing the offending tab.*Smile

 

Well, that may solve the problem of opening the browser, but you really have no idea what was "dropped" on the computer during the attack, so I think scans are an important part of this.

 

Nothing is "dropped", its just a script from an advertisement. It's also a bit difficult to install adwcleaner, Malwarebytes, hitman pro ect. on the affected system when they don't have access to the browser on that system. This gives them their browser back to install as may cleaners as they like so feel free to scan away, better safe than sorry I suppose but if it was clean before it will be clean after.

 

Sorry, but I disagree. Matter of fact, I have personally cleaned computers infected by malicious ads.

Malvertising - Wikipedia

Malvertising is a fairly new concept for spreading malware and is even harder to combat because it can work its way into a webpage and spread through a system unknowingly: "The interesting thing about infections delivered through malvertising is that it does not require any user action (like clicking) to compromise the system and it does not exploit any vulnerabilities on the website or the server it is hosted from... infections delivered through malvertising silently travel through Web page advertisements." [7] It is able to expose millions of users to malware, even the most cautious, and is growing rapidly: "In 2012, it was estimated nearly 10 billion ad impressions were compromised by malvertising." [2] Attackers have a very wide reach and are able to deliver these attacks easily through advertisement networks. Companies and websites have had difficulty diminishing the number of malvertising attacks, which "suggests that this attack vector isn’t likely to disappear soon." [6]