Topic: Question about a rather concerning pop up. Hoping some one knows what it is?

Posted under Off Topic

I was just chilling around youtube, memecenter, e621, chatango, and a second youtube page when this pop up comes up.

The pop up had a soldier in the top right with a canadian flag. Below that on the right side was a thing asking me to give it money. And to the left of that was a big paragraph. I closed it reflexively confused how it even opened because I didn't click on anything I had been clicking on for like 20 minutes.

A window popped up saying. "You have been blocked from closing this window" So I got confused and started reading. -APPARENTLY- It was from the Canadian police. (I live in Canada) telling me that the porn I was watching was illegal. (What porn?) It said something about child porn and something else but idk remember what it said. It said I was suspected of viewing illegal porn and pirating/downloading it.

Since the window popped up saying I couldn't close it whenever I tried to I got really worried like. What the hell is this that I can't close my browser to make it go away? I've never had this before what is this pop up and what is it doing?

So in a panic I restarted my computer and have now come back with the window gone to ask if ANYONE here knows what the hell that was? It could have been from the add that sit's directly next to the list of friends in chatango but since again I couldn't close the window it freaked me out to the point of restarting the computer worried it was an advanced virus or something. Avast (Yea I know cheap ass avast) Had popped up a couple pages of memecenter earlier telling me it blocked something on my browser but promptly left. I'm running a quick scan on my computer now at 91% done with no infections found.

Has anyone encountered this before? What was that pop up? By the way it was worded there was no way it was a real document from the Canadian police but how did it lock the browser like that? And if you have gotten it before what did it do? Did the app running on the side of the page asking for money have anything to do with it? Was it a scam to grab money or was it just a virus trying to implant itself? And lastly what if anything should I do about it?

-Confused

Updated by 123easy

download rkill and malwarebytes, run the first then the second, then download an antivirus and a script blocker addon for your browser, so that malicious code inserted into programs like that won't run.

Updated by anonymous

I've seen similar things, though it's the FBI(supposedly, not really) since I'm in the US.
It's basically a scam and/or malware.
If it's popping up when you watch youtube, I'd bet money on malware on your machine.

Updated by anonymous

123easy said:
download rkill and malwarebytes, run the first then the second, then download an antivirus and a script blocker addon for your browser, so that malicious code inserted into programs like that won't run.

Avast has found malware no problem in the past. It's fairly good for doing this stuff as far as I can tell. It's currently 97% done a full system scan with no issues found. Is avast trust-able with this stuff? It has found some bad stuff in the past such as the following.

Mostly win:32 malware (globalkeychecker)
a win:32 adware
And a win:32 searchprotect

It's solved alot of problems for me as I got rid of norton and was unprotected for a while. It was very bad and I got bad virus's then I put avast up and it solved all my problems. It seems to be fine but do you think I need something better?

Updated by anonymous

I don't know about that nuisance in particular, but we can safely assume it's not legitimate and something undesirable. I'm just going to name freeware that I've used to disinfect malware. In addition to malwarebytes and rkill, you can also try adwcleaner, Junkware Removal Tool, and Combofix, all from bleepingcomputer. adwcleaner is good for a fast and decent scrub of smaller, mostly browser-related malware, but it will force close any apps and reboot your computer when it cleans. You can try Junkware Removal Tool if adwcleaner isn't enough. You probably don't need Combofix. It's pretty thorough and has helped remove the most persistent malware that my AV doesn't fully clean.

I like mvps hosts as a preventative measure. It will prevent your computer from resolving URLs of known ad and malicious sites.

For browser protection, I use Firefox and can recommend NoScript, Ghostery, Disconnect, and AdBlock Plus. NoScript is the most intrusive, likely the most effective, and has the most security features of those plugins. Ghostery blocks other ad-related content and is much less intrusive than NoScript, but disable Ghost Rank because Ghostery's parent company actually uses it to collect data on which ads are blocked and sells that data. Disconnect is focused on blocking social media components that can monitor your browsing across unrelated websites, among other boons. I don't actually use AdBlock Plus, but it's probably the least intrusive and most effective of these four at granularly disabling ads and other potentially annoying website features. Really, these plugins are fairly redundant, but they all offer something unique.

If you're still not satisfied, you can also try Spybot Search and Destroy (I like the immunize feature) and SUPERAntispyware.

See how badly this got ninja'd... Oh, not bad. My post is light blue now? was... idk

Updated by anonymous

Cronolgical said:
It seems to be fine but do you think I need something better?

If you don't want to pay, then my browsing of anecdotal AV discussions suggest Avast is good right now, if not the best free AV. However, AV solutions don't typically extend into decent malware prevention. I would also recommend a firewall if Avast doesn't have one. I believe Comodo has a free firewall, but I've read that set-up might be a bit technical. The main thing is you want a real-time scanner that will check files or websites immediately when downloading them. Most freeware is not real-time.

If you wanted to go a step further, you can try setting up a free IPS/IDS solution. I forget the name of the "military class" one I would use if I did use an IPS, but I think it's *nix only.

Updated by anonymous

abadbird said:
If you don't want to pay, then my browsing of anecdotal AV discussions suggest Avast is good right now, if not the best free AV. However, AV solutions don't typically extend into decent malware prevention. I would also recommend a firewall if Avast doesn't have one. I believe Comodo has a free firewall, but I've read that set-up might be a bit technical. The main thing is you want a real-time scanner that will check files or websites immediately when downloading them. Most freeware is not real-time.

If you wanted to go a step further, you can try setting up a free IPS/IDS solution. I forget the name of the "military class" one I would use if I did use an IPS, but I think it's *nix only.

Well I got malwarebytes as suggested and I started a full system scan.

So far at 179,543 items scanned with...
109 objects detected.

>http://static3.wikia.nocookie.net/__cb20120730225902/thefanfictionwikiofgtfandphazon/images/b/b9/Neutral-bad-poker-face-l.png

Updated by anonymous

That is a fairly widespread ransomware, that thing circulates in practically every bigger nation on this planet, in germany it is done by the BKA, all want your money to unlock the PC for you, some of those go so far as to encrypt parts of your HDD to hinder you from using your PC.

Had to remove it thrice from the notebook of my mother's friend simply because he had no idea where to get his porn from.

Updated by anonymous

FYI Avast is anti-virus.
It will catch the worst malware, but that's not the purpose of the software, it's there to catch viruses.
This is a good thing to have, but it will allow through malware, particularly if it's not directly harmful to you since that wouldn't always be classified as a virus.

For secure internet usage(as good as you can, nothing's perfect) it's best to have a firewall, anti-virus, and anti-malware/adware.
Oh, and learn how to use the firewall properly.
A firewall is not just useless if you don't know how to use it, it's frequently annoying to the person trying to use it.

Updated by anonymous

lol my pop got this one a few months ago, gave him quite a scare. I'm surprised it's still around.

Also, hello fellow Canadian!

Updated by anonymous

abadbird said:
If you don't want to pay, then my browsing of anecdotal AV discussions suggest Avast is good right now, if not the best free AV. However, AV solutions don't typically extend into decent malware prevention.

Actually most AVs have given up the ghost on actually defending against viruses and focus more on malware because it is by far and away the greater threat that needs defending against. That said, every AV differs. Best way to find out? av-comparatives.org summary report for the year. malwarebytes should always be included in any suite of anti-PUP(potentially unwanted programs) software though.

Updated by anonymous

Tangent said:
lol my pop got this one a few months ago, gave him quite a scare. I'm surprised it's still around.

Also, hello fellow Canadian!

The scary part of it is not so much the content which you can tell is fake. But the fact it locks the browser. Nothing else I've ever seen in my many years on the internet has ever done that and I was completely dumbfounded. Normally I know how to handle these things. A shortcut key to opt out of it without problems or so forth. But this thing there was no getting it away and I just panicked holding down the power button on my computer. I would have never fallen for the scam it was trying to pull the wording was off the text was off the request is ludicrous. But the locking of the browser threw me completely off guard and it really did give me a scare. >,<

Updated by anonymous

Cronolgical said:
The scary part of it is not so much the content which you can tell is fake. But the fact it locks the browser. Nothing else I've ever seen in my many years on the internet has ever done that and I was completely dumbfounded. Normally I know how to handle these things. A shortcut key to opt out of it without problems or so forth. But this thing there was no getting it away and I just panicked holding down the power button on my computer. I would have never fallen for the scam it was trying to pull the wording was off the text was off the request is ludicrous. But the locking of the browser threw me completely off guard and it really did give me a scare. >,<

At least it's not as bad as the one that like jacks into your webcam and "films" you, that genuinely scared me when it happened to a friend of mine, like FBI warnings and it showed your picture.

Updated by anonymous

Moon_Moon said:
At least it's not as bad as the one that like jacks into your webcam and "films" you, that genuinely scared me when it happened to a friend of mine, like FBI warnings and it showed your picture.

My grandma made me keep a small piece of electrical tape over my web cam if I'm not using it... Thank you grammy?

Updated by anonymous

Lizardite said:
CTRL+ALT+DEL > Close process > ??? > PROFIT

Chrome is a bit better in this field. SHIFT + Esc opens its own task manager that can be used to kill unwanted or unresponsive pages, plug-ins and extensions. The same could theoretically be done with Windows' task manager, however every plugin and page process would look almost completely identical (apart from memory usage and stuff).

Updated by anonymous

In firefox I had to put the tab into a group, add another useless tab and close the entire group so it wouldn't have the chance to ask if I wanted to navigate away and not let me

Updated by anonymous

Rainbow_Dash said:
In firefox I had to put the tab into a group, add another useless tab and close the entire group so it wouldn't have the chance to ask if I wanted to navigate away and not let me

Yeah, that's a really nasty function that hasn't been resolved for four years. :/ TMK, it's a javascript exploit by shady bastards.

Updated by anonymous

Hm, I have many things in FF disabled, mainly that Javascript is allowed to touch anything in FF, be it the right click menu or anything else. Pages are allowed to make FF ask but that is not done through JS.

Updated by anonymous

NotMeNotYou said:
Hm, I have many things in FF disabled, mainly that Javascript is allowed to touch anything in FF, be it the right click menu or anything else. Pages are allowed to make FF ask but that is not done through JS.

Smart man. I was talking about the fact that you have to put the tab into a group with another tab then close group being the exploit; it's meant to be an internal function so you don't close out of important Firefox notifications, but it's been preempted by some shady peoples.

Updated by anonymous

  • 1