Recommended Posts

What's the deal with the virus/spyware alert messages that are coming up when I mistype a web address? I recently tried to go to androidcentral.com and must have mistyped part of the address. What came up was a norton anti-virus page with a popup that would not go away no matter how many times I clicked the X. There was also a recorded message saying to call this number as soon as possible. I had to completely close Chrome in order to get the message to go away. Another similar situation happened a while back. A website I was going to had a dash in the address and I forgot to put it in. A loud siren type noise played through the speakers while a virus/spyware alert page was open in a tab.

Link to comment
https://www.neowin.net/forum/topic/1251024-virusspyware-alert-messages/
Share on other sites

What's the deal with the virus/spyware alert messages that are coming up when I mistype a web address? I recently tried to go to androidcentral.com and must have mistyped part of the address. What came up was a norton anti-virus page with a popup that would not go away no matter how many times I clicked the X. There was also a recorded message saying to call this number as soon as possible. I had to completely close Chrome in order to get the message to go away. Another similar situation happened a while back. A website I was going to had a dash in the address and I forgot to put it in. A loud siren type noise played through the speakers while a virus/spyware alert page was open in a tab.

 

It's not actual norton, its just a page using popular AV names pretending to be the actual companies. They are trying to trick you into downloading their program which is malware where you could/will have advertising, popups, keystroke recording and/or ransomware where you will be locked out of your computer and to get it back you will have to pay an online ransom. 

It's common for malware authors to set pages on unclaimed typos of high-traffic domain names, expecting typos alone to drive a decent amount of traffic. You could get a pretty good sampling of how pervasive this is by trying typos of Microsoft.com or Hotmail.com.

 

One of them is a "You must update Flash" page (hint: that installer isn't going to install Flash).

Here are some browser cleanup tools that you can run.

 

 

 

Adware Cleaner                                      http://www.lavasoft.com/products/ad_aware_free.php
Junkware Removal To...                          http://thisisudax.org/
Adware Removal Tool.                            http://www.techsupportall.com/adware-removal-tool/
Zhp Cleaner                                            http://www.nicolascoolman.fr/download/zhpcleaner-2/
Bitdefender Adware Tool                         http://www.bitdefender.com/solutions/adware-removal-tool-for-pc.html
Avast Browser Clean                               http://www.techspot.com/downloads/downloadnow/5810/?evp=889daefe83afc42bb4f2208c3a3a2fbc&file=1
Black Sheep Anti Rougeware                  http://tazzy.org/
Ohshi Unhooker                                      http://www.oshiunhooker.com/
Software Removal Tool Google-Beta       https://www.google.com/chrome/srt/index.html

I get that these are fake pages setup to trick someone into downloading a fake program setup with a real name (I.e. Norton). Why though are these pages essentially holding the browser hostage to the point that I can't simply close the tab and instead have to close the whole browser? This makes chrome think it crashed, so it offers to reopen the 'crashed' tabs, but I can't do that otherwise I'll be right back on the same offending tab.

I get that these are fake pages setup to trick someone into downloading a fake program setup with a real name (I.e. Norton). Why though are these pages essentially holding the browser hostage to the point that I can't simply close the tab and instead have to close the whole browser? This makes chrome think it crashed, so it offers to reopen the 'crashed' tabs, but I can't do that otherwise I'll be right back on the same offending tab.

 

if you wanted to force someone to download your crap, you would make it that way too :)

  • Like 2
This topic is now closed to further replies.
  • Posts

    • Microsoft is busy. Lots of changes to be released imminently for Windows server or soon. Also, lots happening for next version as well. Third party virus scanning software is being moved out of Kernel mode to avoid repeat of Crowdstrike incident. Windows Protected Mode and Windows Ready Print no longer require third party print drivers to be installed. New storage stack being developed. New NVME drivers now available for Windows Server 2025 to improve local NVME drive performance by 60+ percent. NVME-Of of fabric being worked on for next release to improve network access to NVME drives. ReFs (next file system) now has ability to boot and will become default file system in next release of Windows Server. ReFs improves on NTFS in several areas including resiliency and reliability and scalability. New update stack is being worked on to unify Windows updates, and updates for drivers and first party/3rd party application software. A stricter and more robust third-party driver certification program (ODI) is being worked on to improve performance, thermals, battery life, and reliability on modern Windows hardware by tightening how OEMs and IHVs (Intel, AMD, Qualcomm, NVIDIA, etc.) build and ship drivers. There is a tone more but too numerous to mention.
    • Now disable that stupid OneDrive backup request when Windows starts please. So unbelievably frustrating to only have “remind me later” instead of “no and never ask me again”
    • Hello, The Media Creation Tool is still at v10.0.26100.7019 from October 2025. Just looks like the backend has been updated. Regards, Aryeh Goretsky
    • Since they open sourced the calculator in Win 10/11 it is much better and can do a lot, I love it.
    • That's just silly imo. The lengths that man goes to just to avoid W11 is just nuts. Very, very few home users would do that. I will say this though, he is committed. Btw, I note on askwoody that Woody Leonhard passed away March, 2025 aged 73. His site was one of my favorites back in the day. Belated yes but RIP Woody.
  • Recent Achievements

    • One Month Later
      Markus94287 earned a badge
      One Month Later
    • Week One Done
      Markus94287 earned a badge
      Week One Done
    • One Year In
      Markus94287 earned a badge
      One Year In
    • Dedicated
      truespursfan earned a badge
      Dedicated
    • Rookie
      restore went up a rank
      Rookie
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      +Edouard
      168
    3. 3
      PsYcHoKiLLa
      154
    4. 4
      ATLien_0
      90
    5. 5
      Steven P.
      79
  • Tell a friend

    Love Neowin? Tell a friend!