.Message from Windows Network Defender

  • 2 August 2015
  • 1 reply

My Outlook was interrupted with a message from Windows Network Defender saying my system is infected with critical spyware/malware. A browser lock is in place to prevent infection of your network and the network of others.  I am to call 855 399 2087. Is this a scam?

1 reply

Userlevel 7
Hi gda76-9
Welcome to the Community Forums.
Yes, this is most likely to be a scam and, from my research, likely to be related to a PUA (or Potentially Unwanted Application as we call then in the Community) called Pcsupportapplication.com.
So first thing is DO NOT CALL the number as no legitimate support company would do this and, secondly, please read through information on PUAs; what they are, what you can do about them via WSA, etc.
PUAs are very annoying at best in that they cause pop-ups, redirect your browser home page, and other behaviour that may slow down the computer and direct ads your way, but in the vast majority of cases they are not actually doing anything bad like damaging files or stealing information.
Often they are installed intentionally by the user as browser add-ons for various tasks such as quick search tools. But they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto ones system.
The key to avoiding them is to make sure that when downloading apps one does so from the author's own website or one that they have recommended, and not 3rd party downloading site.

WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behaviour that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see this link for more information regarding Webroot's stance on these annoying programs.
If you feel or consider yourself technically proficient then you can try these steps to remove it from your system.
However, if that does not work or you do not feel technically capable then the best thing to do is to Open a Support Ticket & ask Webroot Support to take a look and remove these for you.  There is NO CHARGE for this for valid WSA license holders.
I hope that the above is of assistance?
Regards, Baldrick