View original (French)

Virus or Other Infection Suspicions

LauraNsn Posted messages 4 Status Member -  
LauraNsn Posted messages 4 Status Member -
Hello, yesterday while visiting a webpage a virus appeared and a program tried to install itself, the page wouldn't close so I had to turn off my computer and restart it. I then deleted Google Chrome, ran a scan with Avast, Malwarebytes Anti-Malware, and Malwarebytes Anti-Rootkit, which found nothing unusual. Then I ran a scan with the GMR software and apparently when infected, the lines turn red; there are none in the "Rootkit/Malware" category. However, I don't know if it's possible for the computer to be infected without the line appearing in red. In the "Files" category, there are several files highlighted in red; are they infected? Should I delete them? Also, under the control panel in the generic credential information, an account named "SSO_POP_Device" has appeared and I don't know where it came from. Thank you in advance for your help. I don't know much about computers, I just followed some instructions given on your site.

1 answer

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hi,

    Your scans are useless.
    The computer is not infected;

    The message that popped up is fake, as usual in these cases.
    It's a phone support scam trying to make you believe that your PC is infected to get you to call a support line....
    The aim of this support is to convince you that your computer is infected, so they can make you purchase software at high prices, often ending up at around 200 euros.
    These messages attempting to block the web browser and indicating that the PC is infected come from ads on illegal streaming/torrent sites.

    This can also occur through phone campaigns, where you receive a call from a technician pretending to be Microsoft.
    Your computer is not infected.

    --
    Please press a key to continue the disinfection...
    2
    1. LauraNsn Posted messages 4 Status Member
       
      Thank you for your response. However, something else just happened in the meantime: my computer displayed a blue screen with a sad face ":(" and wrote "Your computer has encountered a problem and needs to restart. We’re collecting some error information, and then we'll restart your computer. For more information about this problem and possible solutions, check out https://support.microsoft.com/en-us/sbs/windows/troubleshoot-blue-screen-errors-5c62726c-6489-52da-a372-3f73142c14ad?ui=en-US&rs=en-US&ad=US If you contact support, provide them with this information Stop code: CRITICAL STRUCTURE CORRUPTION." What does this mean? Considering that my computer is functioning properly.
      0
      1. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712 > LauraNsn Posted messages 4 Status Member
         
        Have you been experiencing these crashes since you made adjustments following that warning, or has it been happening for a while?
        0
      2. LauraNsn Posted messages 4 Status Member > Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention  
         
        In itself, I was doing nothing at that precise moment and it crashed on its own (it's the first time I've seen this kind of error message appear on my screen). So far, it has crashed only once, and upon restarting, the computer was working correctly again. I went to check at the same time in Generic Credential Information, and the SSO_POP_Device profile disappeared after restarting my computer. However, there is a "virtualapp/didlogical" profile that persists, and it says Modified: today. I didn't do anything after that error message appeared, though.
        0
      3. LauraNsn Posted messages 4 Status Member > Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention  
         
        Finally, the "SSO_POP_Device" profile keeps coming back every time I delete it, and I don't know where it comes from.
        0