Strange Message While Surfing Internet

[mr__ed]

I hadn't experienced this before: I was on the Internet when out of the blue a message appeared on my screen with an 800 number and a female voice informing me that my computer had a virus and to call that number for assistance in removing it. Of course, I didn't act on the message I'm running Bitdefender security on Windows 10, so I ran a scan and a 2 objects were detected and removed. So far, so good. I just installed Bitdefender security today. I was running Norton before and thought it was OK but after upgrading to W10 Norton kept informing my that I had to activate he program. I had trouble doing that because it was supposedly already activated wen I first purchased it last year. So on a whim I thought I'd try another program. Bitdefender had good reviews so I went with that program.

[1492]

Gdetrailer wrote:

bwanshoom wrote:

Gdetrailer wrote:
Think of JavaScripts as very tiny programs that have complete and full administrator access rights to your PC.

This is 100% incorrect. Javascript runs in the context of the browser and browsers have a lot of security surrounding their execution. While it's true that sometimes holes can be found in this protection, the way you tell it there's no protection at all.

And to avoid any program from having "full admistrative access rights to your PC" the best advice is to not use an administrative account for your day to day activities, especially if it involves the web.

NOPE, sorry JavaScripts do not behave totally within the browser.

JavaScripts ARE the main mechanism used to deliver MALWARE and that malware CAN contain very harmful payloads like virus, keyloggers, ransomware, adware and so on.

The Javascripts work silently in the background AND HAVE COMPLETE AND FULL CONTROL OF YOUR PC. JavaScripts can and are able to download and install REMOTE programs, change your registry and even lock you out of your own PC.

I HAVE WATCHED this happen on my own PC once before I wised up and quit fully relying on Antivirus software. I took action by installing FireFox with AdBlockPlus along with NoScript. Doing those steps will not make your PC "bullet proof" but they do return some control back to you the PC user by choking down the full unrestricted access of JavaScript.

Every web page you visit whether you feel it is safe or not use the scripting of JavaScripts and there is huge security hole with JavaScripts.

This is not completely accurate. Yes, Javascript runs with system privileges. Which is compelling reason not to connect to the NET using a default Admin user account. Something Windows users have never understood, and could prevent as much as 90% of malware exploits as indicated by a security report release last year. Using an Admin account makes it that much easier for hackers.

If Javascript was allowed to have system admin privileges by default in a browser environment, all browsers would ban its use completely. Instead, browser basically sandbox Javascript, allowing only limited system access.

The reason Javascript can do so much damage is that it typically takes advantage of a vulnerability, in the browser, plug-ins or extensions, or in the OS, to bypass the sandbox restrictions to gain system access. This is a another reason to keep browsers, plug-ins, and your OS updated with all security patches.

[wa8yxm]

Yes, from time to time I get pop ups or ads that are designed to get me excited

Your computer has issues
Your computer has viruses
Your computer is running slow
Click on our link to fix it
I do not bite. I trust the multi-layer security system on my computer.

Most of these sites have one thing in common. AFTER YOU CLICK ON THE LINK

Your computer will have issues
It will have malware
And it will run slow.

Oh and you will also get phone calls "This is Microsoft and we have detected issues with your computer".. NOT POSSIBLE .

[bwanshoom]

Wow, okay, if you say so. Complete and full control, huh. We're doomed, then.

[Gdetrailer]

bwanshoom wrote:

Gdetrailer wrote:
Think of JavaScripts as very tiny programs that have complete and full administrator access rights to your PC.

This is 100% incorrect. Javascript runs in the context of the browser and browsers have a lot of security surrounding their execution. While it's true that sometimes holes can be found in this protection, the way you tell it there's no protection at all.

And to avoid any program from having "full admistrative access rights to your PC" the best advice is to not use an administrative account for your day to day activities, especially if it involves the web.

NOPE, sorry JavaScripts do not behave totally within the browser.

JavaScripts ARE the main mechanism used to deliver MALWARE and that malware CAN contain very harmful payloads like virus, keyloggers, ransomware, adware and so on.

The Javascripts work silently in the background AND HAVE COMPLETE AND FULL CONTROL OF YOUR PC. JavaScripts can and are able to download and install REMOTE programs, change your registry and even lock you out of your own PC.

I HAVE WATCHED this happen on my own PC once before I wised up and quit fully relying on Antivirus software. I took action by installing FireFox with AdBlockPlus along with NoScript. Doing those steps will not make your PC "bullet proof" but they do return some control back to you the PC user by choking down the full unrestricted access of JavaScript.

Every web page you visit whether you feel it is safe or not use the scripting of JavaScripts and there is huge security hole with JavaScripts.

[2oldman]

mr. ed wrote:

2oldman wrote:
What browser?

I think I was using the new Edge browser at the time, but I do alternate between that browser and Chrome, so I ant say for sure.

Ok. I use Chrome and assume it does a good job. I do immediately reboot if that *ever* happens.

[Belgique]

Me too using Chrome and 10. Malwarebytes nor McAfee find it. I find that I can get to Task Manager (Control-ALt-Delete) and stop Chrome and then I'm good again.

[bwanshoom]

Gdetrailer wrote:
Think of JavaScripts as very tiny programs that have complete and full administrator access rights to your PC.

This is 100% incorrect. Javascript runs in the context of the browser and browsers have a lot of security surrounding their execution. While it's true that sometimes holes can be found in this protection, the way you tell it there's no protection at all.

And to avoid any program from having "full admistrative access rights to your PC" the best advice is to not use an administrative account for your day to day activities, especially if it involves the web.

[mr__ed]

2oldman wrote:
What browser?

I think I was using the new Edge browser at the time, but I do alternate between that browser and Chrome, so I ant say for sure. I was a little disappointed that Bitdefender didn't catch it in the first place.

[timmac]

Yep just shut down and reboot and its gone..

[Ductape]

Yep, had exactly as discussed in previous post happen on my kindle. Moused over some ad, redirected to some fake FBI ransomeware page. Had to kill the wireless and reset the browser to get the browser off that page.

I gave up on Norton for the pc a while back, using Webroot now. Happy with that so far.

[Gdetrailer]

Old-Biscuit wrote:
SPAM....plus real good way to get virus.

Click on message and wham.....computer screen get blue/or black with message. You MUST pay...your computer is being held Hostage.


NEVER click!!!!

Bitdefender, Malwarebytes Anti-Expoit, SUPERantispyware----all free (upgrade versions available but free versions work)

OP was browsing the internet, spam is what goes into your email box.

What the OP was a victim of is called a drive by malware attack.

You CAN get malware on ANY compromised website and or any site with "3rd party" advertisements which use JavaScripts (not the same as "Java"). JavaScripts can easily bypass ALL antivirus/anti-malware software therefore you have very little control once the malware gets started.

Think of JavaScripts as very tiny programs that have complete and full administrator access rights to your PC.

A compromised website or advertisement has a JavaScript which is altered to deliver malware payload to your PC silently. Then the malware disables your antivirus and then installs the main payload which is a virus..

I learned that the hard way when I got hit from visiting a website I had visited plenty of times and it had those inline ads which if you scrolled your mouse over the blue text with an underline a 3rd party ad would pop up..

I quit using IE and installed FireFox along with AdBlockPlus which gets rid of the inline ads and as a extra precaution I also use NoScript which BLOCKS ALL JavaScripts from running. NoScript can be a pain because it will disable legit JavaScripts that some websites require. For those you can just enable ONLY the JavaScripts needed to restore the website functions.

OP did nothing wrong, just a fact of life that if you must live in this world now days you will be taking a few risks on the Internet that can't be helped. You can mitigate some of the risks by locking down and taking control of your browser with things like NoScript and AdBlockPlus..

[pconroy328]

Annoyware.

Often snuck in with installer packages on some other hunk of software you installed. Go to control panel and see if you see a program or two you don't recognize. if so, uninstall it.

A lot of annoyware uninstalls OK, you don't need to do anything drastic.

Malware Bytes does an excellent job of keeping this junk off your system.

[Old-Biscuit]

SPAM....plus real good way to get virus.

Click on message and wham.....computer screen get blue/or black with message. You MUST pay...your computer is being held Hostage.


NEVER click!!!!

Bitdefender, Malwarebytes Anti-Expoit, SUPERantispyware----all free (upgrade versions available but free versions work)

[mikensallyt]

I hear you. I had gotten that frigging "FBI virus" once and had to get another virus removal tool. Norton just wasn't working so great. I got "F-Secure" and it has served its purpose pretty darn good. I'll never use Norton again. It seemed with "Norton" every time I did an upgrade it wanted me to re-install it again and when I did the confirmation number or whatever its called would not work unless you paid for it again. Sort of like CW, lol.