Backdoor Virus Detected POP-UP Scam

What is "Backdoor Virus Detected"?

"Backdoor Virus Detected" is a fake virus alert displayed in a pop-up window, which appears when a deceptive, untrustworthy website is visited. This scam is used by cyber criminals to extort money from people by encouraging them to use paid software or services that supposedly resolve a problem and remove a virus.

Most people do not visit these scam websites intentionally - they are opened by potentially unwanted apps (PUAs) that users have installed on their computers or browsers. PUAs also deliver intrusive ads and gather various data.

This fake virus alert urges users not to shut down or reset (restart) their computers, otherwise data such as passwords, browsing history, credit card details, and files stored on the computer will be compromised. It states that this Backdoor Virus is distributed mostly through adult/pornography websites, which it suggests the user has visited, thus resulting in computer infection.

According to this scam, the virus steals personal and financial information and perform DDoS attacks (preventing users from accessing various services or networks). This fake virus alert also states that a 'virus defender' has locked the computer to prevent any further damage.

To remove this virus and unlock their computers, users are encouraged to call "Technical Support" via the "1-(844) 460-2415" telephone number. We strongly advise that you do not call this number. Ignore this scam and simply close the opened window. If this cannot be done in the normal way, use Task Manager and end the browser process from there.

Do not restore the closed browsing session, since this will return you to the scam website.

Typically, people download and install unwanted apps that open scam websites such as this unintentionally. When installed, they cause redirects, deliver ads, and gather information. PUAs deliver coupons, banners, surveys, pop-ups and other similar ads. if clicked, they open dubious websites or run scripts designed to download and install other unwanted apps.

Additionally, PUAs collect Internet Protocol (IP) addresses, entered search queries, URLs of visited websites, geolocations, and other data. PUAs also target personal details. Developers share the information with third parties who misuse it to generate revenue. Some of these third parties might be cyber criminals.

Threat Summary:

Name	"Backdoor Virus Detected" virus
Threat Type	Phishing, Scam, Social Engineering, Fraud.
Symptoms	Unauthorized online purchases, changed online account passwords, identity theft, illegal access of the user's computer.
Distribution methods	Deceptive emails, rogue online pop-up ads, search engine poisoning techniques, misspelled domains.
Damage	Loss of sensitive private information, monetary loss, identity theft.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

By using "Backdoor Virus Detected", scam cyber criminals attempt to extort money from people by encouraging them to pay for unnecessary services or software. There are many similar scams including "Error Code 09-986-6321", "Error XR01F5", and "Windows Defender Alert (0x3e7)". 

Most apps that open these websites are also very similar: they are perform actions that help developers to generate revenue and often cause users problems relating to browsing safety, privacy, and so on.

"Backdoor Virus Detected" pop-up scam technical analysis:

• Tech support scammer domain: hinky.asia
• Related domains: lamsiekte.xyz, reconned.icu, ramal.xyz, laminogram.xyz, reconned.icu, ramification.xyz, laminogram.xyz, laminographic.xyz, lamsiekte.xyz

How did potentially unwanted applications install on my computer?

Some PUAs can be downloaded from their websites, however, most people install them together with other, regular software or through clicked intrusive ads. "Bundling" is used by developers to include unwanted apps with other software download/installation set-ups. PUAs are usually hidden in "Advanced", "Custom" and other settings/options.

Information regarding the inclusion (bundling) of PUAs into set-ups is not properly disclosed. Note, however, that people usually cause unwanted installations when they leave available settings/options unchecked and unchanged.

How to avoid installation of potentially unwanted applications?

To avoid unwanted downloads and installations, download software from official and trustworthy websites and use direct links. Torrent clients, eMule and other Peer-to-Per networks, third party downloaders, unofficial/dubious pages etc., are download sources that should not be trusted.

Furthermore, do not skip software download and installation steps, check all available settings, and deselect additionally-included apps (offers to download or install them). Ignore intrusive ads - if clicked, they redirect users to pornography, adult dating, gambling, and other untrustworthy websites.

If redirects or ads of this type occur/appear often, it is possible that they are caused by installed unwanted apps.

Eliminate (uninstall) all unwanted, unknown or suspicious programs from the operating system and extensions, add-ons, and plug-ins from the browser. If your computer is already infected with PUAs, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

Text presented in "Backdoor Virus Detected" pop-up:

Virus Alert: Backdoor Virus Detected on your Computer!
Please do Not Shut down or restart your computer.
The following data will be compromised if you do so:
This Virus is well known and mostly distributed through Adult/Porn sites. Commonly used to steal personal and financial information from the infected device. Your device might also be used for performing DDOS attacks by cyber criminals and cause serious harm to other networks and websites. Virus defender has sandboxed your browser and locked your PC in order to prevent any further harm.
Please call Technical Support to rectify the issue and get your PC unlocked. Toll free helpline at 1-(844)460-2415

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is "Backdoor Virus Detected" virus?
• How to identify a pop-up scam?
• How do pop-up scams work?
• How to remove fake pop-ups?
• How to prevent fake pop-ups?
• What to do if you fell for a pop-up scam?

How to identify a pop-up scam?

Pop-up windows with various fake messages are a common type of lures cybercriminals use. They collect sensitive personal data, trick Internet users into calling fake tech support numbers, subscribe to useless online services, invest in shady cryptocurrency schemes, etc.

While in the majority of cases these pop-ups don't infect users' devices with malware, they can cause direct monetary loss or could result in identity theft.

Cybercriminals strive to create their rogue pop-up windows to look trustworthy, however, scams typically have the following characteristics:

• Spelling mistakes and non-professional images - Closely inspect the information displayed in a pop-up. Spelling mistakes and unprofessional images could be a sign of a scam.
• Sense of urgency - Countdown timer with a couple of minutes on it, asking you to enter your personal information or subscribe to some online service.
• Statements that you won something - If you haven't participated in a lottery, online competition, etc., and you see a pop-up window stating that you won.
• Computer or mobile device scan - A pop-up window that scans your device and informs of detected issues - is undoubtedly a scam; webpages cannot perform such actions.
• Exclusivity - Pop-up windows stating that only you are given secret access to a financial scheme that can quickly make you rich.

Example of a pop-up scam:

How do pop-up scams work?

Cybercriminals and deceptive marketers usually use various advertising networks, search engine poisoning techniques, and shady websites to generate traffic to their pop-ups. Users land on their online lures after clicking on fake download buttons, using a torrent website, or simply clicking on an Internet search engine result.

Based on users' location and device information, they are presented with a scam pop-up. Lures presented in such pop-ups range from get-rich-quick schemes to fake virus scans.

How to remove fake pop-ups?

In most cases, pop-up scams do not infect users' devices with malware. If you encountered a scam pop-up, simply closing it should be enough. In some cases scam, pop-ups may be hard to close; in such cases - close your Internet browser and restart it.

In extremely rare cases, you might need to reset your Internet browser. For this, use our instructions explaining how to reset Internet browser settings.

How to prevent fake pop-ups?

To prevent seeing pop-up scams, you should visit only reputable websites. Torrent, Crack, free online movie streaming, YouTube video download, and other websites of similar reputation commonly redirect Internet users to pop-up scams.

To minimize the risk of encountering pop-up scams, you should keep your Internet browsers up-to-date and use reputable anti-malware application. For this purpose, we recommend Combo Cleaner Antivirus for Windows.

What to do if you fell for a pop-up scam?

This depends on the type of scam that you fell for. Most commonly, pop-up scams try to trick users into sending money, giving away personal information, or giving access to one's device.

• If you sent money to scammers: You should contact your financial institution and explain that you were scammed. If informed promptly, there's a chance to get your money back.
• If you gave away your personal information: You should change your passwords and enable two-factor authentication in all online services that you use. Visit Federal Trade Commission to report identity theft and get personalized recovery steps.
• If you let scammers connect to your device: You should scan your computer with reputable anti-malware (we recommend Combo Cleaner Antivirus for Windows) - cyber criminals could have planted trojans, keyloggers, and other malware, don't use your computer until removing possible threats.
• Help other Internet users: report Internet scams to Federal Trade Commission.

▼ Show Discussion