I have been using Windows 8.1 on a brand new computer for about a month. Since yesterday, about every half hour or so, a web page pops up saying:

=======================

Message from webpage

Microsoft Real Time Web Monitor has detected Liam.x on the system Due to Unsafe Browsing.

Its (sic) strongly adviced (sic!) to contact Windows Online Support to have the virus removed as it can cause a system failure.

Please Call Microsoft Windows Support Helpline for Assistance.

TOLL FREE: 0-800-078-6078

=======================

Win 8.1 inbuilt Defender program doesn't detect this virus (even after a full scan). Nor does Malwarebytes.

Is there a recommended way of removing this virus? I just did a System Restore to about two weeks ago but the virus is still there.

• Edited by Bertram12 Tuesday, July 07, 2015 2:14 PM

1. This is phone scam. Never ever call these numbers. Never provide credit card numbers when they want you to do so.

2. If you receive something like this and if you like to be sure, then you can backup data and restore clean installation from reliable backup and restore data afre restore clean install. (You have good backukup I hope.)

3. If you feel like IT expert, then you can do analysis to find which process(es) is(are) causing troubles (with Sysinternals tools), dig into these processes, kill them and remove.

4. Never use more AV at the same time, unless you are certain that these are not interfering with each other. Keep AV database up to date.

5. Be very cautious about where you "travel" on internet. Clean IE cache, search what has Internet added, never save password,... Use special computer for dangerous experiments if you are doing something like this and avoid doing this on computer that host important data (workor personal).

Regards

Milos

• Marked as answer by Bruce WoodingModerator Tuesday, July 21, 2015 9:28 PM

Same issue here. Also using Magic Puzzles.

No AV solution or Malwarebytes detects it.

MS - this is YOUR app store - people purchase items though it, via your secure system which means it is down to you to fix the infected applications.

Sort this out!

• Marked as answer by Bruce WoodingModerator Tuesday, July 21, 2015 9:28 PM
• Unmarked as answer by Bruce WoodingModerator Saturday, July 25, 2015 12:15 PM

Thank you for the detailed feedback. We have performed extensive testing in an attempt to replicate your problem and have not experienced the error you described or that is shown in the video. It is possible that the malware causing the Liam.X popup you are seeing is still present on the system, did you format the drive when performing a clean installation? It could be that the Magic Puzzles app is creating a condition that allows the Liam.X popup code to execute, if the code is still present and the Magic Puzzles app is creating such a condition you could potentially see the popups again.