'ISP HAS BLOCKED YOUR PC' Pop-Ups
The 'ISP HAS BLOCKED YOUR PC' pop-up windows in your Internet browser should not be trusted. The 'ISP HAS BLOCKED YOUR PC' pop-up windows are generated on untrusted sites, which have been registered recently. The 'ISP HAS BLOCKED YOUR PC' notifications are created by con artists who aim to lead users into calling a fake computer support line like 800-765-1745. The 'ISP HAS BLOCKED YOUR PC' notifications were found on the windows[.]microosft[.]com[.]msf-help[.]info domain and feature the following text:
'ISP HAS BLOCKED YOUR PC
Error # 268D3
Call Microsoft immediately at:
Do not ignore this critical alert.
If you close this page, your PC access will be disabled to prevent further damage to our network.
Your PC has alerted us that it has been infected with a virus and spyware. The following information is being stolen…
Facebook Login
Credit Card Detail
Microsoft Account Login
Photos stored on this PC.
You must contact us immediately so that our engineers can walk you through the removal process over the phone. Please call Microsoft within the next 5 minutes to prevent your PC from being disabled.'
PC security experts add that the windows[.]microosft[.]com[.]msf-help[.]info domain is registered to the 83.243.40.115 IP address, and Web surfers may notice that their Internet client loads links that look like:
h[tt]p://www.windows.microsoft[.]com.msf-help[.]info/_windows/62/
h[tt]p://windows.microsoft.com[.]msf-help[.]info/_help/chr/0123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107
Researchers found that the Web pages on windows[.]microosft[.]com[.]msf-help[.]info include a slightly obfuscated code that freezes the latest versions of Google Chrome. Con artists abuse the Blob constructor (a form of raw data constructor) and the window.navigator.msSaveOrOpenBlob processing method to corrupt the download function in the browser and issue a torrent of download requests. All versions of Google Chrome are vulnerable to this form of attack, and the result is an unresponsive Web browser that you need to kill via the Task Manager. Users who might be unable to leave windows[.]microosft[.]com[.]msf-help[.]info and see that their Internet service provider (ISP) has blocked their machine might believe the misleading message on their screens.
You should note that the 800-765-1745 phone line is not operated by certified computer support specialists. Microsoft Corp. does not provide and promote services via windows[.]microosft[.]com[.]msf-help[.]info. The con artists behind the 'ISP HAS BLOCKED YOUR PC' tactic might claim to be employed by Microsoft and decline to present users with valid credentials as well as the registration of their company. You should ignore the 'ISP HAS BLOCKED YOUR PC' pop-up windows and use a reliable anti-malware shield that can block connections to phishing domains like windows[.]microosft[.]com[.]msf-help[.]info. You may want to block connections to the following domains associated with the 'ISP HAS BLOCKED YOUR PC' tactic:
error[.]secure-alert[.]site
error[.]secure-system[.]site
error[.]virus-alert[.]site
error[.]virus-notice[.]site
support[.]microsoft.com[.]secure-system[.]site
