Threat Database Adware '800-941-043' Pop-Ups

'800-941-043' Pop-Ups

By GoldSparrow in Adware

The '800-941-043' pop-up windows in your browser that may originate from wincrashedalertinfo.xyz are not to be trusted. The '800-941-043' notifications are shown on untrusted pages, which work as phishing domains. You may notice that the '800-941-043' alerts are presented on a background that resembles the security alerts associated with the Google Safe Browsing. However, the 800-941-043 phone line is not operated by the staff at the Google Corp. Computer users that load content on wincrashedalertinfo.xyz and cloned pages may be unable to switch tabs, open bookmarks and minimize their browser. The problem is caused by a JavaScript hosted on the page you loaded. Web designers associated with fake computer support companies use JavaScript to prevent the browser from working properly and use it as a screen lock. The messages linked to the 800-941-043 phone line are not provided by legitimate Web filters such as Google Safebrowsing, Mozilla Phishing Protection, Sucuri and Websense ThreatSeeker. The '800-941-043' alerts are used to display misleading information and incite distress into users who stumbled upon pages like wincrashedalertinfo.xyz. We have seen the following text shown with the '800-941-043' pop-ups:

  • Sample 1:
  • 'Your computer has been Locked
    Your computer with the IP address 18224.27.50 has been infected by the Trojans-- Because System Activation KEY has expired & Your information (for example, passwords, messages, and credit cards) have been stolen. Call the Windows Help Desk number 1800-941-043 to protect your files and identity from further damage.
    'Windows Activation Error Code: 0x44578' Lock Screen. To immediate rectify issue and prevent data lose Please call Toll free 1800-941-043
    Toll free : 1800-941-043

  • Sample 2:
  • 'Do not ignore this windows alert
    Please call us immediately at: 1800-941-043 (Toll free)
    If you close this page, your computer access will be disabled to prevent further damage to our network.
    Your computer has alerted us that it has been infected with a trojan and spyware. The following information is being stolen...
    1. Facebook Login
    2. Credit Card Details
    3. Email Account Login
    4.Photos stored & saved on this computer
    You must contact us immediately so that our engineers can walk you through the removal process over the phone. Please call us within the next S minutes to prevent your computer from being disabled.
    Please call us immediately: 1800-941-043 (Toll free)
    Do not ignore this windows alert'

The Trojan and spyware mentioned above are used as scarecrows to frighten users that their PCs are infected. Words like Trojan and spyware combined with the inability to operate the Internet browser may lead users to believe that their systems are under attack by a third- party and their profiles on social media, email accounts and photos may be gathered. As stated above, the '800-941-043' warnings and aberrant Internet client behavior are caused by the bad coding of the site you loaded. You should remain calm and use the Ctrl+Alt+Delete keyboard command to bring up the Task Manager and terminate your Internet client. That would allow you to remove the '800-941-043' pop-ups and resume your operations. However, we have received reports that sites like wincrashedalertinfo.xyz are linked to browser hijacking software, which may redirect users to phishing content. Computer users that are rerouted to sites that display the '800-941-043' warnings may not be able to solve their problems with the Task Manager. It is recommended that you install a trusted anti-malware scanner that can detect potentially unwanted software and the browser hijackers that may be associated with the '800-941-043' alerts. Cyber security researchers note that wincrashedalertinfo.xyz has many clones registered to the 184.168.147.102 IP address, which includes the following:

  • computeriplocked.xyz
  • computerlockedalert.xyz
  • computerlockedinfo.xyz
  • netipblockedinfo.xyz
  • networkiplocked.xyz
  • networksecurityinfo.xyz
  • winsecurityblocked.xyz
  • winsecurityhacked.xyz
  • winsecuritylocked.xyz
  • yournetworkipalertreport.xyz
  • yournetworksecurityinfo.xyz

Trending

Most Viewed

Loading...