Threatening attempt to gain access issue


Recommended Posts

it's fake. likely a page with a redirect ad. you should be able to just close it and be fine

 

If you're worried though I'd recommend you scan your computer with Malwarebytes and Kaspersky Rescue Disc on a USB. I recommend the rescue disc because booting into an environment to scan ensures the scanner isn't compromised causing it to ignore the infected files and/or be unable to delete them.

  • Like 3
2 minutes ago, Brandon H said:

it's fake. likely a page with a redirect ad. you should be able to just close it and be fine

 

If you're worried though I'd recommend you scan your computer with Malwarebytes and Kaspersky Rescue Disc on a USB. I recommend the rescue disc because booting into an environment to scan ensures the scanner isn't compromised causing it to ignore the infected files and/or be unable to delete them.

As always, TYVM Brandon. I appreciate your help.

Hmm, I tried going to that page in Waterfox and it doesn't even display anything. Just a blank white page. No indication ublock origin is blocking anything or Privacy Badger or any alerts from Windows Defender. Must be my host file blocking it possibly.

1 minute ago, cork1958 said:

Hmm, I tried going to that page in Waterfox and it doesn't even display anything. Just a blank white page. No indication ublock origin is blocking anything or Privacy Badger or any alerts from Windows Defender. Must be my host file blocking it possibly.

most of the time those malicious redirects are smart enough to randomly generate the URL every time and expire after a few min; so could be that too

Your browser got redirected. Probably from a shady ad, but you'd be safe to run a malwarebytes scan just to make sure you don't have any ad/malware installed.

 

The fact that you gave ublock installed would concern me about malware, usually it blocks all this stuff. 

Edited by shockz
8 minutes ago, shockz said:

The fact that you gave ublock installed would concern me about malware, usually it blocks all this stuff. 

true but depends on how new the redirect is. can't update for everything instantly

4 minutes ago, Brandon H said:

true but depends on how new the redirect is. can't update for everything instantly

I get a white screen when hitting that domain, running pihole. I'm sure it's on their list. He needs to run a scan if he's got ublock installed and seeing that.

833 number - yeah that is SCAM!! For sure...

https://www.lifewire.com/what-is-the-area-code-833-scam-4774826

 

But if you have some FREE time and want to F with someone - could be fun ;)

 

Record the call and post it ;)

1 hour ago, shockz said:

Your browser got redirected. Probably from a shady ad, but you'd be safe to run a malwarebytes scan just to make sure you don't have any ad/malware installed.

 

The fact that you gave ublock installed would concern me about malware, usually it blocks all this stuff. 

Didn't even notice OP had ublock origin installed! Definitely time for a quick scan then.

53 minutes ago, BudMan said:

833 number - yeah that is SCAM!! For sure...

https://www.lifewire.com/what-is-the-area-code-833-scam-4774826

 

But if you have some FREE time and want to F with someone - could be fun ;)

 

Record the call and post it ;)

When I was unemployed this is how I passed the time. I didn't actively seek out the scammers, they would randomly phone the house. "Hello sir, I'm phoning from Microsoft and we would like to inform you that your computer is sending viruses."

"Goodness, really? That sounds terrible. What can I do?"

I was running Linux and I (was) an unemployed technician. I had them going for ages. It became a personal challenge to see how much of their time I could waste. :laugh:

3 minutes ago, Nick H. said:

When I was unemployed this is how I passed the time. I didn't actively seek out the scammers, they would randomly phone the house. "Hello sir, I'm phoning from Microsoft and we would like to inform you that your computer is sending viruses."

"Goodness, really? That sounds terrible. What can I do?"

I was running Linux and I (was) an unemployed technician. I had them going for ages. It became a personal challenge to see how much of their time I could waste. :laugh:

Ya, I really like those calls also. :)

1 hour ago, Brandon H said:

most of the time those malicious redirects are smart enough to randomly generate the URL every time and expire after a few min; so could be that too

Didn't try going to the full address that was in OP's image but just the main page/domain.

https://sensakesbusin.info nothing but a white page

I would also recommend you check your chrome extention list and make sure some dodgy ones didn't get installed. I see that happening ALL the time. Some extensions don't even try to hide the fact they are a peice of crap, calling themselves things like "PDF Promotion's".

 

Other pieces of crap extensions are called things like "Search Encrypt" or "Map finder", "*Insert name* Finder". The average user usually gets those ###### extensions installed by trying to find an obituary or a manual on the internet. I'm not sure how they manage to get an extention installed but they do. One person I helped had 11 ###### extensions installed. As you can imagine they were getting redirected all over the place.

  • Like 2
  • Thanks 1

If you're not infected with something ... then stop visiting whatever sketchy website you're visiting.  It could be defeating your ublock.

 

What is this stuff circled?

 

image.png.thumb.jpg.acac96caf950086eb58e87257b0058c6.jpg

 

You can run this in the Chrome browser:

chrome://settings/cleanup

 

...and it will (or try) ...

Quote

Remove unwanted ads, pop-ups & malware

If you're seeing some of these problems with Chrome, you might have unwanted software or malware installed on your computer:

  • Pop-up ads and new tabs that won't go away
  • Your Chrome homepage or search engine keeps changing without your permission
  • Unwanted Chrome extensions or toolbars keep coming back
  • Your browsing is hijacked, and redirects to unfamiliar pages or ads
  • Alerts about a virus or an infected device

I believe ESET created the tool.  It does take a little bit to run and it doesn't have a progress bar ... so enjoy watching the circle for a while.  

2 hours ago, Jim K said:

If you're not infected with something ... then stop visiting whatever sketchy website you're visiting.  It could be defeating your ublock.

 

What is this stuff circled?

 

image.png.thumb.jpg.acac96caf950086eb58e87257b0058c6.jpg

 

You can run this in the Chrome browser:

chrome://settings/cleanup

 

...and it will (or try) ...

I believe ESET created the tool.  It does take a little bit to run and it doesn't have a progress bar ... so enjoy watching the circle for a while.  

Circled are Lastpass and tab wrangler extensions and the bottom is forecast fox extension. All legit.

It's fake. If this happens the fix to avoid that page when you restart Chrome is to disconnect from the Internet then load Chrome, type in something like google.com in the address bar, let it error out then close Chrome. Reconnect your Internet and open Chrome seems to clear that up.

But as to the initial scam popup you can't get rid of it appears Google is going to have to fix that to avoid the workaround I'm using.

  • 2 weeks later...

Here you go - this will be very interesting to you about these sorts of scams

https://www.bbc.com/news/technology-51740214

Scam call centre owner in custody after BBC investigation

 

Panorama broadcast hacked footage from inside the call centre which showed how staff charged people hundreds of pounds to fix non-existent computer problems.

  • Like 3
  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
    • VidCoder 12.20 by Razvan Serea  VidCoder is a DVD/Blu-ray ripping and video transcoding application for Windows. It uses HandBrake as its encoding engine. Calling directly into the HandBrake library gives it a more rich UI than the official HandBrake Windows GUI. VidCoder can rip DVDs but does not defeat the CSS encryption found in most commercial DVDs. You’ll need the NET 8 Desktop Runtime. If you don’t have it, VidCoder will prompt you to download and install it. The Portable version is self-contained and does not require any .NET Runtime to be installed. You do not need to install HandBrake for VidCoder to work. Feature list: Multi-threaded MP4, MKV containers Completely integrated encoding pipeline: everything is in one process and no huge intermediate temporary files H.264, H.265, MPEG-4, MPEG-2, VP8, Theora video Hardware-accelerated encoding with AMD VCE, Nvidia NVENC and Intel QuickSync AAC, MP3, Vorbis, AC3, FLAC audio encoding and AAC/AC3/MP3/DTS/DTS-HD passthrough Target bitrate, size or quality for video 2-pass encoding Decomb, detelecine, deinterlace, rotate, reflect, chroma smooth, colorspace filters Powerful batch encoding with simultaneous encodes Customizable Pickers to automatically pick audio and subtitle tracks, destination, titles and more Instant source previews Creates small encoded preview clips Pause, resume encoding VidCoder 12.20 changes: Updated HandBrake core to 1.11.2. Download: VidCoder 12.20 | 47.0 MB (Open Source) Download: Portable VidCoder 12.19 | 89.3 MB Link: VidCoder Home Page | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Too soon, I'm still not over this death!
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      593
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      76
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!