Jump to content

Recommended Posts

Well , I'm back again. This time I have yet another virus.

This time when I was browsing Wikia/Fandom. I suddenly had a web page popup claiming that my system files are damaged and have been deleted. This was accompanied by a loud ominous sounding beep. When looking in my browser history, the redirect page is listed as Win Erx03, which after a quick google search is some sort of new malware or something.

Between my visits to this forum, I see the same thing happening again and again. Where I seem to remove the malware plaguing my computer, a few weeks pass with no problems, but then I get another redirect after a while. Each time I've gotten a redirect it was a separate virus, but knowing my luck with computers and seemingly usually the case, my gut tells me these popup/redirects might be all connected to a deep rooted problem that will be a nightmare to remove. Or could the problem stem from issues with Wikia/fandom sites? Though not in every instance, a lot of the time when I get these issues, I'm usually on Wikia or regular Wiki sites like ssbwiki.com.

5-7-19.txt FRST.txt Addition.txt

Share this post


Link to post
Share on other sites


Similar to these ?

I have created a 1series of videos generated from these kinds of fraud sites for the purposes of recognition and education.  They are all  videos from real web sites.  ALL are FRAUDS.

All these have one thing in common and they have nothing to do with any software on your PC.  They are all nefarious web sites meant to defraud you of money. The objective is to, falsely, goad you to make the phone call and pay for some service contract for an incident that never happened.  From there they may continue to charge your Credit Card for other services, remote into your computer and do real damage and/or exfiltrate your personal data and they may use the information they obtain from you to commit additional frauds.

MalwareScam.wmv
MalwareScam-1.wmv
MalwareScam-2.wmv
MalwareScam-3.wmv
MalwareScam-4.wmv
MalwareScam-5.wmv
MalwareScam-6.wmv

I have also created a PDF ScreenShow of a myriad of FakeAlert screens - FakeAlert-Screens.pdf  /  Flash Version


Reference:            
US FBI PSA - Tech Support Fraud
US FTC Consumer Information -  Tech Support Scams
US FTC - Tech Support Operators Agree to Settle Charges by FTC and the State of Ohio
US FTC - FTC and Federal, State and International Partners Announce Major Crackdown on Tech Support Scams
Malwarebytes' Blog - Search on - "tech support scams"
Malwarebytes' Blog - "Tech support scams: help and resource page"



1.  Also located at "My Online Security" - Some videos of typical tech support scams

 

 

Share this post


Link to post
Share on other sites

Hi David,

What I got was similar to the examples you provided. I think the people in these forums threads seem to be having the same problem as me:

https://forums.malwarebytes.com/topic/241874-can-malwarebytes-effectively-find-and-remove-win-erx03/

https://community.norton.com/en/forums/win-erx03

Share this post


Link to post
Share on other sites
Posted (edited)

These are classed as malicious advertisements or malvertisements.

As such it is not about what software is on your PC but about what web sites you visit and one's browsing habits.  For example there are certain porn sites that have a greater propensity to exhibit a FakeAlert.  If you are on Windows, a Microsoft FakeAlert.  If you are on an Apple iPhone or MAC, you will see an Apple FakeAlert.  Then there are sites that don't care who they do business with when it comes to advertisement revenue.  Or when one marketing company outsources to another.  Then the malvertisement may be rotated in or randomly displayed.  As I have explained in other discussions I have seen fake Mozilla Firefox malvertisements emanating from the Weather Channel web site.

There was a case where members visited AllMusic.com and on rare occasions they got a Microsoft FakeAlert.  The reports were few and reproducing it was difficult but finally I was able to coax a Microsoft FakeAlert from a visitation. It was all discussed in This Thread.  Reference: Post #20

You stated  " Between my visits to this forum, I see the same thing happening again and again. "
Well, you need to review and look at your browsing habits as to what you were doing and what sites you visited when you receive these FakeAlerts and try to avoid these sites.

The other thing is you stated " When looking in my browser history, the redirect page is listed as Win Erx03 "
We want to identify those web sites and get them submitted so Malwarebytes' products can block access to the malicious sites.

Submissions of FakeAlert sites are done in;  Newest IP or URL Threats ( as per the directions in READ ME: Purpose of this forum

 

Edited by David H. Lipman
Edited for content, clarity, spelling and grammar

Share this post


Link to post
Share on other sites

Hi David,

Thank you for your information. Just so I understand correctly. Are you saying you don't think that there is any virus on my computer? I'll try to take notice of my browsing habits.

Also, just now I when I came out from taking a shower, my Firefox browser was opened to a big red page saying "Mozilla Firefox Critical Error!". Should I be adding this to the link you provided?

Share this post


Link to post
Share on other sites

Yes.  There is no malware on your PC as a causative factor.  They are just malvertisements.

 

3 minutes ago, Aubiter said:

Also, just now I when I came out from taking a shower, my Firefox browser was opened to a big red page saying "Mozilla Firefox Critical Error!". Should I be adding this to the link you provided?

Yes.

Share this post


Link to post
Share on other sites

I refreshed Firefox the last time I was here. Between then and now I haven't had any problems, I'll try to keep an eye on my browsing history. Sorry for leaving you in the dark and thank you for your help.

Share this post


Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.