Windows Malware or Real?

[Lowflyer1]

I was using Yahoo mail in Mozilla Firefox when a warning popped up saying, "Your Windows 10 is infected with 3 viruses"

The link in the address bar changed to:

 

https://www.mscheck002.club/sk/fa9ff2ca/us/?clid=c45693d5bc364beb8cffa6e9f15eff8d9ca7&p1=74070&p2=&pre_tpl=6

 

Is this malware?  The last time it happened I ran Malwarebytes and found nothing.

Thanks

Edited December 10, 2018 by AdvancedSetup
Removed live hyperlink

[David H. Lipman]

Scam !

This is called a FakeAlert and because it is referencing Microsoft's name, it is a Microsoft FakeAlert

Please reference:  Microsoft FakeAlert 
I have submitted the URL, on your behalf, such that Malwarebytes' products may block the URL.

I have created a ¹series of videos generated from these kinds of fraud sites for the purposes of recognition and education.  They are all  videos from real web sites.  ALL are FRAUDS.

All these have one thing in common and they have nothing to do with any software on your PC.  They are all nefarious web sites meant to defraud you of money. The objective is to, falsely, goad you to make the phone call and pay for some service contract for an incident that never happened.  From there they may continue to charge your Credit Card for other services, remote into your computer and do real damage and/or exfiltrate your personal data and they may use the information they obtain from you to commit additional frauds.

MalwareScam.wmv
MalwareScam-1.wmv
MalwareScam-2.wmv
MalwareScam-3.wmv
MalwareScam-4.wmv
MalwareScam-5.wmv
MalwareScam-6.wmv

I have also created a PDF ScreenShow of a myriad of FakeAlert screens - FakeAlert-Screens.pdf  /  Flash Version

Reference:   
US FBI PSA - Tech Support Scam
Malwarebytes' Blog - Search on - "tech support scams"
Malwarebytes' Blog - "Tech support scams: help and resource page"

 

---

1.  Also located at "My Online Security" - Some videos of typical tech support scams

 

Edited December 10, 2018 by David H. Lipman
Edited for content, clarity, spelling and grammar

[Lowflyer1]

Thanks, David.  I even found the screen I had in my browser in your document.  That website is now blocked.

[David H. Lipman]

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks