Internet Security Alert! Code: 055BCCAC9FEC

[NBJoe]

Message from webpage
On April 24, 2018
in Chrome browser:
Message from wbpage
! RDN/YahLower.worm!055BCCAC9EC Infection
Internet Security Alert! Code: 055BCCAC9FEC

Internet Security Alert:
Your computer Might be Infected By Harmful Viruses
Please Do Not Shut Down or Reset Your Computer.

Call Windows Technical Support : (866) 423-1004 

Compurer has McAfee Total Protection
Run  McAfee Quick Scan - nothing found
Run Malwarebytes - nothing found
Run Malwerebytes Adwcleaner - one problem found,
however :
Not Deleted   __MSG_newtab_chrome_extension_name__

Opened a case with McAfee support - they removed problem using McAfee Adware Cleaner 

On 28 April a another message in Chrome (this time big red full screen display):
support.Windows.com says:
Internet Security Alert! Code: 055BCCAC9FEC

Call Windows Technical Support : (877) 2017-4279

the same as on 24  April, no removal with Malwerbytes, opened a case with McAfee,
they fixed problem with a remote access and McAfee Adware Cleaner. 

Attached are screen captures showing URLs and messages from the above Alerts.

My question is why Malwerbytes tools do not find and/or remove the above alerts?
 

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• AdwCleaner user guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[David H. Lipman]

It won't "find" them because those do not exist on your PC.  They are malicious web pages.

They all have one thing in common and they have nothing to do with any software on your PC.  They are all nefarious web sites meant to defraud you of money. The objective is to, falsely, goad you to make the phone call and pay for some service contract for an incident that never happened.  From there they may continue to charge your Credit Card for other services, remote into your computer and do real damage and/or exfiltrate your personal data and they may use the information they obtain from you to commit additional frauds.

MalwareScam.wmv
MalwareScam-1.wmv
MalwareScam-2.wmv
MalwareScam-3.wmv
MalwareScam-4.wmv
MalwareScam-5.wmv
MalwareScam-6.wmv

I have also created a PDF ScreenShow of a myriad of FakeAlert screens - FakeAlert-Screens.pdf  /  Flash Version

Reference:   
US FBI PSA - Tech Support Scam

 

---

1.  Also located at "My Online Security" - Some videos of typical tech support scams

Edited April 29, 2018 by David H. Lipman

[David H. Lipman]

I have submitted the FakeAlert URLs, on your behalf, so they can be blocked by Malwarebytes' products.

RE:  Microsoft FakeAlert

 

 

Edited April 29, 2018 by David H. Lipman
Edited for content, clarity, spelling and grammar

[NBJoe]

David,

thank you!

Based on your explanation and videos it seems to me that McAfee support with McAfee Adware Cleaner did not fix anything...

 

[David H. Lipman]

I don't know about "McAfee Adware Cleaner" but adware refers to software that resides on the computer that foists advertisements upon the computer user.

HTML.FakeAlerts ( aka; TechBrolo ) are web sites.  They don't emanate from the computer.  They are presented to the computer user when you hit a malicious advertiser ( aka; malvertiser ) or when visiting  a reputable web site that has advertisements whose advertisers may lean to the dark-side and may occasionally present malicious advertisements such as HTML.FakeAlerts.

Edited April 29, 2018 by David H. Lipman
Edited for content, clarity, spelling and grammar