Windows 10: OT: Loveworm scam

  1.    03 Feb 2017 #1

    OT: Loveworm scam


    Thought I'd report this incident, in case it's more widespread.

    My browser is Firefox and one of the many extensions is called Tab Mix Plus. I haven't visited the TMP Forum for a long time. (Maybe never on this new Win 10 PC which is now 10 months old.) I did so this morning to post a question and I clearly used a bookmark which is now no longer valid: [removed by admin]. (Haven't tried it again since, so BE CAREFUL.)

    It was immediately hacked (redirected), with the following page displayed:

    https://dl.dropboxusercontent.com/u/4019461/Hack.jpg

    A continuously looped audio track was played:

    "Critical alert from Microsoft. Your computer has alerted us that it is infected with a virus and spyware. If you close this page before calling us we will be forced to disable your computer to prevent further damage to our network...."

    The page and Firefox were frozen so I exited via Windows 10 Task Manager.

    I'm still trying to find what caused it, probably a PUP, downloaded with some other genuine program when I was less careful than usual during the installation procedure.

    --
    Terry, East Grinstead, UK
      My ComputerSystem Spec


  2. Posts : 5,476
    Windows 10 Pro x64
       03 Feb 2017 #2

    Please do not ever post infected links on any of our sites.
      My ComputersSystem Spec


  3. Posts : 2,154
    Windows 10.3 Home 1703 x64 (Home per choice)
       03 Feb 2017 #3

    That is nothing serious, something (a script) has downloaded into you temporary files and ran. Clean your browser's cache (CCleaner) and that is it. I have tested TMP forums, nothing is there, the link is just an empty warning. I was able to close the webpage just fine via Chromium based browser, including the nasty webpage afterwards.
    Attached Thumbnails Attached Thumbnails capture_02032017_234821.jpg   capture_02032017_235101.jpg  
      My ComputerSystem Spec

  4.    04 Feb 2017 #4

    Thanks, appreciate your testing it.

    Terry, East Grinstead, UK
      My ComputerSystem Spec

  5.    04 Feb 2017 #5

    z3r010 said: View Post
    Please do not ever post infected links on any of our sites.
    If you use the extension Thumbnail Zoom Plus on Fx you can hover above the link and it won't open the infected page, but opens an enlarged image. If it's an image, not if it's the page
      My ComputerSystem Spec


 

Related Threads
I purchased $59 worth of Piriform software (CCleaner Lifetime, plus four other programs) from AVANGATE.COM I decided I did not need the extra programs and I can get CCleaner (Lifetime) a lot cheaper (w/coupon code) somewhere else. The programs were...
What A Scam in AntiVirus, Firewalls and System Security
I updated my windows 10 last night and had no problems getting online this morning. After running some errands, I returned and attempted to go online and got a message stating that my network was deemed unsafe by Microsoft and I needed to fix it...
Solved scam but questions in General Support
Just received a phone call from someone with a thick eastern European accent stating he was from Windows 10 and that I had a problem with my computer, running slow, etc. He had my correct address. After asking me to run something that brought up the...
New Windows 10 Scam Call in AntiVirus, Firewalls and System Security
Happy Thanksgiving :party:, There has been a new scam call going around claiming to be a Windows 10 technician. I understand these calls have been going around for about 3 years, but this new one uses the caller-id name on your phone and they ask...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:05.
Find Us