Good 'ol Windows notifications

Nemocod is spread via email infections, not infected ads. Indeed it's very scary, as it grabs credentials, and downloads other malware (including encryption ransomware). It sometimes masquerades as a Chrome update.

vram said:

Odd. Email wasn't open when WD detected it.

Although Windows Defender has gotten much better lately, I still don't have much love for it, because it tends to let infections in, and then tries to clean them, whereas it's best not to let them in at all (this has been my experience, at least). Do you run MBAM free or paid?

vram said:

I dl'd and ran the free trial after WD detected and cleaned it.

OIC. To be safe, I would download and run ADWCleaner, then run MBAM custom scan on the entire C drive, making sure to check the box to scan for rootkits.

vram said:

I will :)

Cool. Let us know if anything untoward pops up. After that, the free trial of MBAM will be good to have for a while. I usually recommend running MBAM Paid together with Defender on systems, just to be safe. A layered approach is best. Cheers!

vram said:

I've been meaning to buy a MBAM sub for a long while, but between Defender and running Adblockers, This is the first potential problem with malware in at least 12 years.

About the malware itself, are you sure ads aren't a vector? When I first googled it yesterday, ads were mentioned. Doesn't really matter. Just curious.

Nemocod is usually found in an infected email. Infected ads are indeed a vector, just not normally for this particular infection. But, Nemocod has been morphing recently, so who can be sure?