I think I've just been invaded by something like this.
Got a much-too-fast-to-read message about java being updated. Then got another much-too-fast-to-read message mentioning windows security.
That was enough for my personal alarm system so, having updated MBAM, it found five nasties which have been removed and a restart carried out.
First time I can recall anything getting past Avast.