jskfan
asked on
Popup Malware or Virus
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I am using Chrome... I ran Malwarebytes, but still did not fix the issue
it seems like Chrome is Infected.. is there any way to fix it ?
Thank you
it seems like Chrome is Infected.. is there any way to fix it ?
Thank you
Check your installed programs for anything you don't recognise or have recently installed, certainly unistall the unrecognised stuff and make sure the recently installed things are from legitimate sites you trust as smaller software publishers often contract with software bundlers to help distribution and the budlers add potentially unwanted stuff like ytmp3.
Once you've done that you can look at cleaning up Chrome, you'll need to reset it to "out of the box" settings so any changes or add ins you need you'll need to add back once it's clean.
Open Chrome, click on the three vertical dots to get to basic settings
Choose "More Tools", then click "Extensions"
Again check this list for anything you aren't certain is needed
Be wary of anything marked installed by Enterprise or Admin
If you have anything marked up like that you'll need to go through these instructions to remove them (Method 2):
https://www.myantispyware.com/2017/09/07/remove-extensions-installed-by-enterprise-policy/
Now in Chrome go to chrome://settings
Scroll down to "Advanced" then "Reset" then "Reset settings to their original defaults"
Confirm your Reset instruction and this should clear any remaining PuP.
Malwarebytes should also clear up any debris that was hidden by either installed software or add-ons that you've now removed.
Restart computer, scan again with MBAM and see if the pop-up is still with you.
Once you've done that you can look at cleaning up Chrome, you'll need to reset it to "out of the box" settings so any changes or add ins you need you'll need to add back once it's clean.
Open Chrome, click on the three vertical dots to get to basic settings
Choose "More Tools", then click "Extensions"
Again check this list for anything you aren't certain is needed
Be wary of anything marked installed by Enterprise or Admin
If you have anything marked up like that you'll need to go through these instructions to remove them (Method 2):
https://www.myantispyware.com/2017/09/07/remove-extensions-installed-by-enterprise-policy/
Now in Chrome go to chrome://settings
Scroll down to "Advanced" then "Reset" then "Reset settings to their original defaults"
Confirm your Reset instruction and this should clear any remaining PuP.
Malwarebytes should also clear up any debris that was hidden by either installed software or add-ons that you've now removed.
Restart computer, scan again with MBAM and see if the pop-up is still with you.
ASKER
And no recent installs?
OK let's throw AdwCleaner at it and see what else we find.
https://www.bleepingcomputer.com/download/adwcleaner/
OK let's throw AdwCleaner at it and see what else we find.
https://www.bleepingcomputer.com/download/adwcleaner/
Have you just started using Chrome or is this simply the latest version updated? If you were using a different browser that would need cleaning up too.
ytmp3.cc seems to be a sketchy site / utility that is know for malware like activity. There were a number of hits in Google supporting this, and honestly I decided not to explore too many on the chance that some were not upstanding sites.
Several did indicate that removal can be a complicated process if you are infected though, so you might want to get some help on that unless you consider yourself well versed on malware removal.
That being said this reference mentioned a few things to try that may help so I'll pass it along here.
»bp
Several did indicate that removal can be a complicated process if you are infected though, so you might want to get some help on that unless you consider yourself well versed on malware removal.
That being said this reference mentioned a few things to try that may help so I'll pass it along here.
»bp
ASKER
I had to uninstall Google Chrome completely..... I hope they will have a fix for their browser shortly
In fairness to Chrome, they can't really be accountable for what's added to their application by users after it's installed.
ASKER
In fairness to Chrome, they can't really be accountable for what's added to their application by users after it's installed.
at least they should have a solution on how to clean it up instead of uninstalling it completely
Agreed, in a perfect world that would be the case. But the "dark forces" that lurk on the interwebs are constantly looking for the smallest of loopholes to exploit to allow their malware and nefarious missions to succeed, so it's a relentless pursuit for software vendors. That's why we have to take a layered approach to defense, and have multiple tools and places to try and catch these things. Even then some get through, until fixes can be added to trap new exploits. It's a never ending challenge...
»bp
»bp
ASKER
Thank you for your inputs Guys!
It is malware .. did you do a scan with malware bytes to try and locate it?