Aubiter Posted May 8, 2019 ID:1311752 Share Posted May 8, 2019 Well , I'm back again. This time I have yet another virus. This time when I was browsing Wikia/Fandom. I suddenly had a web page popup claiming that my system files are damaged and have been deleted. This was accompanied by a loud ominous sounding beep. When looking in my browser history, the redirect page is listed as Win Erx03, which after a quick google search is some sort of new malware or something. Between my visits to this forum, I see the same thing happening again and again. Where I seem to remove the malware plaguing my computer, a few weeks pass with no problems, but then I get another redirect after a while. Each time I've gotten a redirect it was a separate virus, but knowing my luck with computers and seemingly usually the case, my gut tells me these popup/redirects might be all connected to a deep rooted problem that will be a nightmare to remove. Or could the problem stem from issues with Wikia/fandom sites? Though not in every instance, a lot of the time when I get these issues, I'm usually on Wikia or regular Wiki sites like ssbwiki.com. 5-7-19.txt FRST.txt Addition.txt Link to post Share on other sites More sharing options...
David H. Lipman Posted May 8, 2019 ID:1311757 Share Posted May 8, 2019 Similar to these ? I have created a 1series of videos generated from these kinds of fraud sites for the purposes of recognition and education. They are all videos from real web sites. ALL are FRAUDS. All these have one thing in common and they have nothing to do with any software on your PC. They are all nefarious web sites meant to defraud you of money. The objective is to, falsely, goad you to make the phone call and pay for some service contract for an incident that never happened. From there they may continue to charge your Credit Card for other services, remote into your computer and do real damage and/or exfiltrate your personal data and they may use the information they obtain from you to commit additional frauds. MalwareScam.wmvMalwareScam-1.wmvMalwareScam-2.wmvMalwareScam-3.wmvMalwareScam-4.wmvMalwareScam-5.wmvMalwareScam-6.wmv I have also created a PDF ScreenShow of a myriad of FakeAlert screens - FakeAlert-Screens.pdf / Flash Version Reference: US FBI PSA - Tech Support Fraud US FTC Consumer Information - Tech Support Scams US FTC - Tech Support Operators Agree to Settle Charges by FTC and the State of Ohio US FTC - FTC and Federal, State and International Partners Announce Major Crackdown on Tech Support Scams Malwarebytes' Blog - Search on - "tech support scams" Malwarebytes' Blog - "Tech support scams: help and resource page" 1. Also located at "My Online Security" - Some videos of typical tech support scams Link to post Share on other sites More sharing options...
Aubiter Posted May 9, 2019 Author ID:1311923 Share Posted May 9, 2019 Hi David, What I got was similar to the examples you provided. I think the people in these forums threads seem to be having the same problem as me: https://forums.malwarebytes.com/topic/241874-can-malwarebytes-effectively-find-and-remove-win-erx03/ https://community.norton.com/en/forums/win-erx03 Link to post Share on other sites More sharing options...
David H. Lipman Posted May 9, 2019 ID:1311925 Share Posted May 9, 2019 (edited) These are classed as malicious advertisements or malvertisements. As such it is not about what software is on your PC but about what web sites you visit and one's browsing habits. For example there are certain porn sites that have a greater propensity to exhibit a FakeAlert. If you are on Windows, a Microsoft FakeAlert. If you are on an Apple iPhone or MAC, you will see an Apple FakeAlert. Then there are sites that don't care who they do business with when it comes to advertisement revenue. Or when one marketing company outsources to another. Then the malvertisement may be rotated in or randomly displayed. As I have explained in other discussions I have seen fake Mozilla Firefox malvertisements emanating from the Weather Channel web site. There was a case where members visited AllMusic.com and on rare occasions they got a Microsoft FakeAlert. The reports were few and reproducing it was difficult but finally I was able to coax a Microsoft FakeAlert from a visitation. It was all discussed in This Thread. Reference: Post #20 You stated " Between my visits to this forum, I see the same thing happening again and again. " Well, you need to review and look at your browsing habits as to what you were doing and what sites you visited when you receive these FakeAlerts and try to avoid these sites. The other thing is you stated " When looking in my browser history, the redirect page is listed as Win Erx03 " We want to identify those web sites and get them submitted so Malwarebytes' products can block access to the malicious sites. Submissions of FakeAlert sites are done in; Newest IP or URL Threats ( as per the directions in READ ME: Purpose of this forum ) Edited May 9, 2019 by David H. Lipman Edited for content, clarity, spelling and grammar Link to post Share on other sites More sharing options...
Aubiter Posted May 9, 2019 Author ID:1312056 Share Posted May 9, 2019 Hi David, Thank you for your information. Just so I understand correctly. Are you saying you don't think that there is any virus on my computer? I'll try to take notice of my browsing habits. Also, just now I when I came out from taking a shower, my Firefox browser was opened to a big red page saying "Mozilla Firefox Critical Error!". Should I be adding this to the link you provided? Link to post Share on other sites More sharing options...
David H. Lipman Posted May 9, 2019 ID:1312057 Share Posted May 9, 2019 Yes. There is no malware on your PC as a causative factor. They are just malvertisements. 3 minutes ago, Aubiter said: Also, just now I when I came out from taking a shower, my Firefox browser was opened to a big red page saying "Mozilla Firefox Critical Error!". Should I be adding this to the link you provided? Yes. Link to post Share on other sites More sharing options...
David H. Lipman Posted May 11, 2019 ID:1312270 Share Posted May 11, 2019 Is there anything else ? Link to post Share on other sites More sharing options...
Aubiter Posted May 11, 2019 Author ID:1312305 Share Posted May 11, 2019 I refreshed Firefox the last time I was here. Between then and now I haven't had any problems, I'll try to keep an eye on my browsing history. Sorry for leaving you in the dark and thank you for your help. Link to post Share on other sites More sharing options...
David H. Lipman Posted May 11, 2019 ID:1312311 Share Posted May 11, 2019 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 12, 2019 Root Admin ID:1312368 Share Posted May 12, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts