Exploit.SWF.bd „Virus“ Scam – Remove It

Exploit.SWF.bd „Virus“ Scam – Remove It

This article will aid you to remove the Exploit.SWF.bd „Virus“ scam totally. Follow the tech support scam removal instructions at the end of the article.

Exploit.SWF.bd „Virus“ is seen in messages on various websites that host a tech support scam with a phone number that allegedly belongs to Microsoft support. Constant pop-ups that show and the way such landing pages are designed, will lock the page of the browser. The browser can be shut down successfully in some cases, without any repercussions, but in other ones your computer and browser might get affected further with more malware. Most variants of this scam feature a black background image that tries to look like a legitimate Microsoft Windows error image. Do not call any phone numbers and read more about the scam below.

Threat Summary

NameExploit.SWF.bd „Virus“
TypeTech Support Scam
Short DescriptionA number of tech support scams trying to scare you that you have your Firewall damaged by a Exploit/Virus. You are provided with a phone number to a supposed Microsoft tech support team.
SymptomsMessages, pop-up boxes, and redirects appear in your browser. It is not excluded for there to be a lockscreen function among these, or your PC freezing because of the activity going on in your browser related to the scam.
Distribution MethodFreeware Installers, Suspicious Sites, Redirects
Detection Tool See If Your System Has Been Affected by Exploit.SWF.bd „Virus“


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Exploit.SWF.bd „Virus“.

Exploit.SWF.bd „Virus“ – Distribution

Surfing the Web can be dangerous, especially when you reach new and unknown websites by causally browsing. Clicking on advertisements or targeted content could have hidden links that redirect you to dubious online places. That is the most common way in which this kind of a tech support scam can use for its distribution. Other websites could filled with advertisements and redirect links and you could land on a page which has the Exploit.SWF.bd „Virus“ related message.

Below you can see how one of the domains spreading this tech support scam, namely error-finder.xyz/main/, is detected by one anti-virus engine on the VirusTotal service:

Freeware applications, regarded as PUPs (potentially unwanted programs) could also distribute this sort of scam. Different software could cause the scareware to appear in your browsers or another related Microsoft Tech Support scam. Such websites usually come with third-party installations and freeware packages. These packages tend to have extra features selected for installation from the get-go. To avoid installing any additional features could be done if you find an Advanced or a Custom settings menu.

Exploit.SWF.bd „Virus“ – In Depth

Exploit.SWF.bd „Virus“ is the supposed threat used in messages related to a tech support scam. The scam is generally the same, but has multiple domains involved with different phone numbers. The domain which is currently spreading a lot is error-finder.xyz and the full message displayed inside its landing page is Windows Firewall Security Damaged by Exploit.SWF.bd Virus.

All of these technical support scams are shown with pop-ups as alerts and are trying to scare you into calling the phone number given on the page. To make it sound more trustworthy, the scammers have put the Microsoft name as the supposed entity which has blocked the page or browser. The phone number used with the error-finder.xyz domain is the following:

  • 1-888-223-4021

There could be plenty more phone numbers associated with this scam, depending on the URL addresses and landing pages involved. The criminals that are on the other end of the telephone line will try to trick you into believing that they are part of some sort of an official tech support team of Microsoft and say they are employees there without shame, when that is clearly a lie. The most common pop-up with the message Exploit.SWF.bd „Virus“ looks like this:

The full message reads the following:

Windows Firewall Security Damaged By Exploit.SWF.bd Virus
A suspicious Connection Was Trying To Access Your logins, Banking Details & Tracking Your Internet Activity.
Windows Security Center & Firewall Services Are Disabled. Error Code 0x8024402c
Your TCP Connection Was Blocked by Your Firewall. Your Account May be Suspended Until You Take an Action.
Your Personal Information May Have Leaked. IMMEDIATE RESPONSE REQUIRED.
Your Hard Disk Has Exploit.SWF.bd Virus! Please Do Not Try To Fix Manually. It May Crash Your Data.
Please Visit Your Nearest Windows Service Centre OR Call Microsoft Windows Help Desk Now.
CUSTOMER SERVICE: +1-(888)223-4021 (TOLL FREE)
Your Browser have been hijacker or hacked.

Your Hard drive will be DELETED if you close this page. You have a ZEUS virus! Please call Support Now! Call Toll-Free: +1-(888)-223-4021 To Stop This Process.

Windows Detected Potential Threat On Your Computer.

Windows Security Essentials wasn’t able to block virus. Windows detected potential threats that might compromise your privacy or damage your computer. Error Code: 0x8024402c, windows couldn’t install the definition updates. More Information & Support Please Contact HELP DESK: +1-888-223-4021

In case you see any of those messages, know that the site you are on isn’t in any way related to the official Microsoft website or company. Also, no matter how many pop-ups, alerts and message boxes are displayed, remember that this is just scareware that is trying to trick you into calling the 1-888-223-4021 phone number that goes along with the corresponding message. Other domains than error-finder.xyz are involved with this scam, and you should pay more attention to the URLs and messages you see as signs of being on such a scam page.

Your browser or computer screen can become locked and may seem like your whole screen is blocked and totally inaccessible. In such a situation, you could try clicking the “Windows” button and combinations such as “Ctrl+Alt+Del” or even the “Close” button to check if you still can interact with your computer system.

The scammers want to make you believe that the only way to fix your computer device is by calling one of the phone numbers, provided on your screen. They also will blatantly lie to you that they are an expert team of technicians and as already mentioned above, in most cases pretend to be Microsoft employees. Not even a small fraction of that is true. Also, note that most of the time the person on the other line has an Indian accent or is from India – that is not racist or discriminatory in this case, but the sad truth. The whole scam is made in a way to convince you into calling the provided telephone numbers, based mainly on scareware tactics.

Do NOT call any of the phone numbers in any circumstance. It is not toll free as presented on the websites, and even the shortest of calls could cost you next to a small fortune. Furthermore, while the con artists can present themselves as Microsoft employees or similar experts or even partners, they will try to acquire personal information and financial data from you. That information can be sold, and you could get into more problems, such as identity theft, your bank accounts getting emptied etc.

Remove “Exploit.SWF.bd „Virus“” Scam

To remove the Exploit.SWF.bd „Virus“ tech support scam and its related files manually from your PC, follow the step-by-step removal instructions provided below. If the manual removal guide does not get rid of the scam and its redirects completely, you should search for and remove any leftover items with an advanced anti-malware tool. Software like that will keep your system secure in the future.

Berta Bilbao

Berta is a dedicated malware researcher, dreaming for a more secure cyber space. Her fascination with IT security began a few years ago when a malware locked her out of her own computer.

More Posts

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share