I deleted all findings in SuperAntiSpyware and nothing was found in Malwarebytes. Kapersky full scan will take several hours. I'm not doing these clean ups in safe mode as I don't know if my computer will reboot since I don'the know what kind of infection this is.

Also you could dbl check on that fake alert by going through your browser's History to find what site you had visited, then run it through Virustotal.com and use the URL tab, or Google’s Safe Browsing Diagnostic Tool :

the how to :
http://searchengineland.com/googles-safe-browsing-diagnostic-tool-14064

Thanks. I went into chrome and checked the history. These sites are the last 2 that appeared before I closed it down.

http://s.ad127m.com/ul_cb/player.html?rt=popunder&a=31631031038&size=800x60p&conte...

System performance checkup www.technicalsupport247.org

Note, just after the first one popped up, the second one popped up indicated the infection. My full scan anti virus is running currently.

I ran the sites on Google diagnostics and both were unsuspicious. Hummm.

Not sure if this if helps. Thanks for suggestion of checking history.

I wonder if you're computer isn't actually infected. I've seen similar things where you'll get a popup or be redirected to a site and it will say "Your computer has been infected", then it'll ask you to click to perform a virus scan and clicking on it is what infects your computer.

That http://s.ad127m.com . . . link is not a full url but the ad127m.com domain is down right now, so I'm thinking they've discovered a problem. Perhaps they are the ones infected with malware.

The "s" in front of ad127m is a little curious and suspicious, but it doesn't necessarily mean it's something bad, just typical of something bad.

ad127m.com is registered to some company in Tel Aviv.

If you read about the technicalsupport247.org page, that's a page you're redirected to when the server you just tried to connect to is having problems.

I suppose if there's a very recent infection of ad127m.com, google et al might not have picked it up yet.

Kapersky full scan did not detect anything. I've rebooted with sucess. Things appear to be running fine. Still wondering if a restore is needed just to be safe.

Kbarb, I'm aware the ad127 site wasn't the complete url, but that is all it showed in history. I'm hoping the infection did not get on to the computer.

Sounds pretty much to me like a typical fake alert to get you to click on a "Fix my infected computer" link, whatever. It doesn't sound like you're actually infected.

Clicking on those types of links can have disastrous results though.

There are a number of types of malware going around that encrypt all your files, and you have to pay to get them back, unencrypted. Called ransomware for obvious reasons.

Yes, I know about that horrid ransomeware and know better not to click through those popups, though I thought this particular attack may have been directly installed as soon as that popup appeared or via the site before it. Thanks for your replies.

I hope you looked in control panel uninstall and scroll the list for any strange things or anything conduit, and uninstall ASAP?

aputernut, yes, the first thing I did was go to CP>Programs and look for anything suspicious. Didn't find anything.