Threat Database Adware '855-874-1761' Pop-Ups

'855-874-1761' Pop-Ups

By GoldSparrow in Adware

The '855-874-1761' pop-ups that might be shown as '**Microsoft Warning Alert**' on a red background are not to be trusted. The '855-874-1761' pop-ups are produced by phishing pages like error205[.]ga, errorweb.cf, error105[.]tk, error903[.]ml, error205[.]ml, error105[.]gq, error803[.]cf, error205[.]gq and error803[.]tk. The aforementioned pages are hosted on the 47.89.240.222 IP address at the time of writing. However, they are likely to be moved by the time you read this. The '855-874-1761' phishing messages are styled to look like the security alerts in Google Chrome and include a script that forces the visitor's browser to access many URLs in the background. Loading the '855-874-1761' alerts is accompanied by a loop of dialog boxes brought the foreground and high CPU usage. Web surfers using Edge who have stumbled upon the '855-874-1761' pages have reported continuous browser redirects and inability to close their browser. Google Chrome and Mozilla Firefox users may be able to interrupt the looped messages from error205[.]ga, errorweb.cf, error105[.]tk, error903[.]ml, error205[.]ml, error105[.]gq, error803[.]cf, error205[.]gq and error803[.]tk by ticking the 'Prevent page from showing additional messages.' option. The text on the '855-874-1761' pop-ups reads:

'**Microsoft Warning Alert**
ERROR # 268d3x8938(3)
hxxp://error205[.ga] is requesting your username and password. The site says: "Suspicious activity detected on your IP address due to harmful virus installed in your computer. Call Toll Free now @ +1-855-874-1761 for any assistance"
Please calls us immediately at: +1-855-874-1761:
Do not ignore this critical alert.
if you close this page, your computer access will be disabled to
prevent further damage to our network.
Your computer has alerted us that it has been infected with a
Pornographic Spyware and riskware. The following information is
being stolen...
1.Facebook Logins
2.Credit Card Details
3.Email Account Login
4.Photos stored on this computer
Toll Free +1-855-874-1761'

The 'ERROR # 268d3x8938(3)' branded alerts may include the Windows logo and suggest users call a toll free phone line like '+855-874-1761', but you should abstain from following these instructions. Computer security researchers have stated that the '+855-874-1761' phone line and related Web resources are managed by fake computer support agencies. There have been users who called '+855-874-1761' and were convinced to pay hundreds of dollars to software[.]urbansalida[.]com via PayPal for "computer repair services." In reality, con artists mislead users into thinking that their computers were infected with malware and their system reported to Microsoft that it needs cleaning. Then, the con artists ask for remote desktop access to the user's machine and show several unrelated error reports, system messages and warnings from the Windows Event Viewer.

The Windows Event Viewer is a legitimate tool that keeps logs of ongoing network communications and program functions, and it is often used by con artists to support their claims that there is something wrong with the PC. Another trick they use is to load a script in the Command Line tool and simulate problems with your file explorer. It is recommended to avoid interaction with the 'ERROR # 268d3x8938(3)' and the '855-874-1761' pop-up messages. You can report questionable pages like error205[.]ga by following the guidelines below:

  • Edge: Open the browser's menu and click 'Send Feedback' then choose 'Report site issue,' enter the URL and add a short explanation about your experience.
  • Internet Explorer 11: Click on the gear icon, chose 'Safety' and then click 'Report unsafe site,' in the pop-up window mark the category of the site and complete the CAPTCHA challenge.
  • Google Chrome: Click on the three dots icon, mark 'Help' and chose 'Report an issue.' You can add a few sentences as a comment and click 'Send.'
  • Mozilla Firefox: Open the browser's menu and navigate to 'Help' (the question mark icon) and click on 'Report Deceptive Site.'
  • Opera: Click on the site's badge located in the URL bar and click 'Details' then load the 'Fraud and Malware Protection' tab and click 'Report Site.'

Trending

Most Viewed

Loading...