Popup stating infection
Just got a popup, written and veral stating my WEBROOT firewall had an infection, do not use any personal information online until I call a specific number. I could not get out of the popup; I ran a scan and indicates no infection, what do I do?
Hello there, welcome to the Community!
To keep everything in one place, I went ahead and merged your posts into one thread. I hope you do not mind.
Since you have had a pop up showing a possible issue, but a scan is not finding anything, I would suggest you submit a Trouble Ticket and let Webroot Support take a look. There is no charge for this, Support is free with your valid WSA license.
I think there is a good chance that you may have not any malware on the computer but maybe you do have some form of annoyware or adware that we usually refer to as a Potentially Unwanted Application. (PUA for short). While WSA does find and remove many of these, since they are not actually malware, and are not DEFINITELY unwanted, it does not remove them all... Support DOES remove them though when asked :)
Here is a short copy/paste info about PUA's that we often provide to users having a problem to help you understand what they are and how to avoid them.
If the popup is appearing on all websites visited it sounds like you may have fallen foul of a PUA or Potentially Unwanted Application.
There is usually some indication of the source of the popup in the popup itself, as it is usually advertising something. Can you check and let us know any details related to the popups and their source? That would help us to further advise you as to how to proceed.
Below is some generic information on PUAs that we give out. It will help inform you of what they are and has some information of some generic steps that you can try/do to get rid of them. But what we really need is details on the source.
PUAs are very annoying at best in that they cause pop-ups, redirect your browser home page, and other behaviour that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools. But they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
The key to avoiding them is to make sure that when downloading apps one does so from the author's own website or one that they have recommended, and not 3rd party downloading site.
WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behaviour that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.
If you feel or consider yourself technically proficient then you can try these steps to remove it from your system.
However, if that does not work or you do not feel technically capable then the best thing to do is to Open a Support Ticket & ask Webroot Support to take a look and remove these for you. There is NO CHARGE for this for valid WSA license holder.
To keep everything in one place, I went ahead and merged your posts into one thread. I hope you do not mind.
Since you have had a pop up showing a possible issue, but a scan is not finding anything, I would suggest you submit a Trouble Ticket and let Webroot Support take a look. There is no charge for this, Support is free with your valid WSA license.
I think there is a good chance that you may have not any malware on the computer but maybe you do have some form of annoyware or adware that we usually refer to as a Potentially Unwanted Application. (PUA for short). While WSA does find and remove many of these, since they are not actually malware, and are not DEFINITELY unwanted, it does not remove them all... Support DOES remove them though when asked :)
Here is a short copy/paste info about PUA's that we often provide to users having a problem to help you understand what they are and how to avoid them.
If the popup is appearing on all websites visited it sounds like you may have fallen foul of a PUA or Potentially Unwanted Application.
There is usually some indication of the source of the popup in the popup itself, as it is usually advertising something. Can you check and let us know any details related to the popups and their source? That would help us to further advise you as to how to proceed.
Below is some generic information on PUAs that we give out. It will help inform you of what they are and has some information of some generic steps that you can try/do to get rid of them. But what we really need is details on the source.
PUAs are very annoying at best in that they cause pop-ups, redirect your browser home page, and other behaviour that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools. But they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
The key to avoiding them is to make sure that when downloading apps one does so from the author's own website or one that they have recommended, and not 3rd party downloading site.
WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behaviour that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.
If you feel or consider yourself technically proficient then you can try these steps to remove it from your system.
However, if that does not work or you do not feel technically capable then the best thing to do is to Open a Support Ticket & ask Webroot Support to take a look and remove these for you. There is NO CHARGE for this for valid WSA license holder.
+3Hello ? and Welcome to the Webroot Community.
Did it specifically name Webroot? Nevertheless, pay no attention, and call no number....And take David's good advice also as there may be a PUA.
THIS IS A SCAM!! Neither Microsoft nor any other company sends emails, pop ups, or phone calls of any kind advising that you may have a problem.
If you clicked anything links, allowed them to remote into your computer, or went to any web sites please submit a Trouble Ticket ASAP. (Now would be a good idea....)
If you would like more information, read on (After submitting that Trouble Ticket.....)
NEWS ARTICLE: Tech Support Scams are on the rise.
Microsoft never issues this type of warning or email or anything of a sort! Please see the following link for Microsofts official word on this:
http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx
"Neither Microsoft nor our partners make unsolicited phone calls (also known as cold calls) to charge you for computer security or software fixes.
Cybercriminals often use publicly available phone directories so they might know your name and other personal information when they call you. They might even guess what operating system you're using.
Once they've gained your trust, they might ask for your user name and password or ask you to go to a website to install software that will let them access your computer to fix it. Once you do this, your computer and your personal information is vulnerable."
Also see Avoid scams that use the Microsoft name fraudulently
http://www.microsoft.com/security/online-privacy/msname.aspx
For more information here iwhat the United States Federal Trade Commission has to say on the subject::
http://www.consumer.ftc.gov/articles/0346-tech-support-scams
"In a recent twist, scam artists are using the phone to try to break into your computer. They call, claiming to be computer techs associated with well-known companies like Microsoft. They say that they’ve detected viruses or other malware on your computer to trick you into giving them remote access or paying for software you don’t need.
These scammers take advantage of your reasonable concerns about viruses and other threats. They know that computer users have heard time and again that it’s important to install security software. But the purpose behind their elaborate scheme isn’t to protect your computer; it’s to make money."
This scam is common and has been around for quite a while. Here is a good Webroot Blog article from April 2013 by Threat Researcher Roy Tobin.
http://www.webroot.com/blog/2013/04/30/fake-microsoft-security-scam/
Also add a good free Ad Blocker like the ones suggested below:
For Internet Explorer Ad Block Plus: https://adblockplus.org/
For Firefox uBlock: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ss or Privacy Badger: https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/
Google Chrome uBlock: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en or Privacy Badger: https://chrome.google.com/webstore/detail/privacy-badger/pkehgijcmpdhfbdbbnkijodmdjhbjlgp
Thanks,
Did it specifically name Webroot? Nevertheless, pay no attention, and call no number....And take David's good advice also as there may be a PUA.
THIS IS A SCAM!! Neither Microsoft nor any other company sends emails, pop ups, or phone calls of any kind advising that you may have a problem.
If you clicked anything links, allowed them to remote into your computer, or went to any web sites please submit a Trouble Ticket ASAP. (Now would be a good idea....)
If you would like more information, read on (After submitting that Trouble Ticket.....)
NEWS ARTICLE: Tech Support Scams are on the rise.
Microsoft never issues this type of warning or email or anything of a sort! Please see the following link for Microsofts official word on this:
http://www.microsoft.com/security/online-privacy/avoid-phone-scams.aspx
"Neither Microsoft nor our partners make unsolicited phone calls (also known as cold calls) to charge you for computer security or software fixes.
Cybercriminals often use publicly available phone directories so they might know your name and other personal information when they call you. They might even guess what operating system you're using.
Once they've gained your trust, they might ask for your user name and password or ask you to go to a website to install software that will let them access your computer to fix it. Once you do this, your computer and your personal information is vulnerable."
Also see Avoid scams that use the Microsoft name fraudulently
http://www.microsoft.com/security/online-privacy/msname.aspx
For more information here iwhat the United States Federal Trade Commission has to say on the subject::
http://www.consumer.ftc.gov/articles/0346-tech-support-scams
"In a recent twist, scam artists are using the phone to try to break into your computer. They call, claiming to be computer techs associated with well-known companies like Microsoft. They say that they’ve detected viruses or other malware on your computer to trick you into giving them remote access or paying for software you don’t need.
These scammers take advantage of your reasonable concerns about viruses and other threats. They know that computer users have heard time and again that it’s important to install security software. But the purpose behind their elaborate scheme isn’t to protect your computer; it’s to make money."
This scam is common and has been around for quite a while. Here is a good Webroot Blog article from April 2013 by Threat Researcher Roy Tobin.
http://www.webroot.com/blog/2013/04/30/fake-microsoft-security-scam/
Also add a good free Ad Blocker like the ones suggested below:
For Internet Explorer Ad Block Plus: https://adblockplus.org/
For Firefox uBlock: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ss or Privacy Badger: https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/
Google Chrome uBlock: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en or Privacy Badger: https://chrome.google.com/webstore/detail/privacy-badger/pkehgijcmpdhfbdbbnkijodmdjhbjlgp
Thanks,
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.