What does this mean?

"ttyymmnn" (ttyymmnn) 08/26/2018 at 16:34 • Filed to: None

0

27

My wife was using one of our boys’ PCs and got this page. I’ve never seen its like before, but I’m not a PC guy.

Cé hé sin > ttyymmnn 08/26/2018 at 16:43

1

I wouldn’t ring the number....

CarsofFortLangley - Oppo Forever > ttyymmnn 08/26/2018 at 16:44

0

That.. doesn’t look legit.

Eric @ opposite-lock.com > ttyymmnn 08/26/2018 at 16:44

1

Scan it for malware. You have a browser hijack going on.

Aremmes > ttyymmnn 08/26/2018 at 16:45

2

It’s a scam.

Don't call that number.

ttyymmnn > Eric @ opposite-lock.com 08/26/2018 at 16:48

0

Had to force quit the browser. Ran a MSE scan and it came back with nothing found.

ttyymmnn > Aremmes 08/26/2018 at 16:49

0

That’s what I figured. 

His Stigness > ttyymmnn 08/26/2018 at 16:51

7

Download Maywarebytes and run a scan. 

Nom De Plume > ttyymmnn 08/26/2018 at 16:51

1

Tl;dr  Russian windows site sounds totally legit and not threatening at all.  :)

More likely than not it means they clicked on something unintentionally and the computer needs a thorough cleaning. Mom, ie old person hiding under the bed every time a rain cloud forms because of the red alert all hands on deck weather reporting , should put her concerns to bed.

Windows.com/ RU is suspect as fuck and she should disconnect from the internet immediately. This was not a pornographic issue it was a predatory hack.

duurtlang > ttyymmnn 08/26/2018 at 16:57

1

Download Google Chrome and use a  decent adblocker. It should prevent you from seeing these malware peddlers again. Additionally, be sure to have a good virus scanner. Especially if that computer is sometimes used by people who might fall for clicking on the wrong links.

Additionally, be VERY skeptical of websites who allow advertising that enable these crooks.

ttyymmnn > duurtlang 08/26/2018 at 17:07

0

I’ve got MSE running on these PCs, and the scan came back negative. So I guess nothing got installed. 

duurtlang > ttyymmnn 08/26/2018 at 17:10

2

No when you didn't fall for it you might be safe. But my chrome+adblocker suggestion is meant as prevention. You don't get to see this trash ever again. 

lone_liberal > Eric @ opposite-lock.com 08/26/2018 at 17:12

3

Second on the MalwareBytes recommendation.

ttyymmnn > duurtlang 08/26/2018 at 18:04

0

It was pretty clever. When I went to force quit the browser, it said, “ You can’t quit the browser until you respond to it. Force quit anyway?” So I force quit anyway. I suspected it was BS from the beginning, but it never hurts to be sure. I also hadn’t noticed the RU in the URL. Assholes.

Highlander-Datsuns are Forever > ttyymmnn 08/26/2018 at 18:38

1

Ttymmnn, were you looking at suggestive photos of airplanes again?

ttyymmnn > Highlander-Datsuns are Forever 08/26/2018 at 18:48

2

Blunion05 drives a pink S2000 (USER WAS BANNED FOR THIS POST) > ttyymmnn 08/26/2018 at 19:25

1

Highly unlikely any harm was done, it’s a hack performed within the browser to display a seemingly legitimate message. It is in essence, scareware.

Mercedes Streeter > ttyymmnn 08/26/2018 at 19:59

1

You’re good, it’s just one of those scam sites that try to get you to pay them.

wkiernan > ttyymmnn 08/26/2018 at 20:10

1

Ctrl-Alt-Delete

Start Task Manager

select “End Program” off list

repeat until your browser closes

---

404 - User No Longer Available > Blunion05 drives a pink S2000 (USER WAS BANNED FOR THIS POST) 08/26/2018 at 20:13

1

Not even a hack... really just a bad ad. Unless OP actually installed something.

---

facw > ttyymmnn 08/26/2018 at 20:40

1

As others have said, it’s probably just Javascript based malware being served up. Very common on illegal download sites. Probably did no lasting damage though I’m slightly concerned that it seems to be showing as coming from a M icrosoft site. That may just be some redirect trickery though. If you’d run MSE and Malwarebytes, I wouldn’t worry too much unless you see it again. Do install an ad-blocker if they don’t have one though.

---

ttyymmnn > facw 08/26/2018 at 21:35

0

This came from an established recipe site my wife was visiting. Not even looking at pron! I never did accept the message box, which probably kept anything from being installed. As it is, I have my kids set up with non-admin logins, which should at least make it harder for something to get installed. I force quit the browser, and even then, it warned me that the browser was waiting for response. I can see how easily people get tricked into this stuff. 

---

ttyymmnn > wkiernan 08/26/2018 at 21:36

0

Yup. That’s what I did. Thanks.

---

facw > ttyymmnn 08/26/2018 at 21:48

1

It is sometimes possible for bad stuff to sneak through via malicious ads (modern ads often have a whole chain of networks reselling the ad space, as the page is loading, so the original page often has very little control over what runs, and there is very little recourse for bad ads other than punishing the buyer after the fact).

Making the kids regular users is definitely a good idea.

And yeah, some of these things are quite persistent, not letting you close the browser, playing audio messages, making threats that you will be locked out of your machine or off the internet if you don’t contact them. It’s all a pretty nasty mess.

---

boxrocket > ttyymmnn 08/26/2018 at 23:34

1

Sounds like you did everything right. Send the screen capture to Microsoft’s security team, at least, maybe update your firewall settings and setup a VPN to browse with (free basic VPN support comes with most editions of Windows 10 but there are paid ones that offer more features ) . I also recommend using Microsoft Edge because it’s less-targeted than chrome and firefox (and in my experience it runs leaner anyway). lastly, if the computer runs oddly, backup and reinstall Windows.

---

user314 > ttyymmnn 08/27/2018 at 10:26

1

Virus Alert!

---

For Sweden > ttyymmnn 08/27/2018 at 11:39

1

This is the “Don’t talk to strangers” lesson, but online.

Also similar to the “Don’t believe everything you see on TV” lesson.

---

For Sweden > ttyymmnn 09/28/2018 at 12:42

0

Don’t believe everything you see on TV the internet

I made the same comment on the same post one month apart. I am a bad person.

---