We help IT Professionals succeed at work.

Popup Malware or Virus

jskfan
jskfan asked
on
Popup Malware or Virus

I have an add that keeps popping up on the right bottom of the screen. I would like to stop it from popping up.
I installed Malwarebytes, but it still did not stop it.

Any Help ?

Thank you
v
Comment
Watch Question

Distinguished Expert 2019

Commented:

It is malware .. did you do a scan with malware bytes to try and locate it?

Most Valuable Expert 2013
Commented:
Unless you've recently installed some downloaded software that included ytmp3.cc bundled with it this is a browser infection.  Which web-browsers are you using?

Author

Commented:
I am using Chrome... I ran Malwarebytes, but still did not fix the issue
it seems like Chrome is Infected.. is there any way to fix it ?

Thank you
Most Valuable Expert 2013

Commented:
Check your installed programs for anything you don't recognise or have recently installed, certainly unistall the unrecognised stuff and make sure the recently installed things are from legitimate sites you trust as smaller software publishers often contract with software bundlers to help distribution and the budlers add potentially unwanted stuff like ytmp3.

Once you've done that you can look at cleaning up Chrome, you'll need to reset it to "out of the box" settings so any changes or add ins you need you'll need to add back once it's clean.

Open Chrome, click on the three vertical dots to get to basic settings
Choose "More Tools", then click "Extensions"

Again check this list for anything you aren't certain is needed

Be wary of anything marked installed by Enterprise or Admin

If you have anything marked up like that you'll need to go through these instructions to remove them (Method 2):
https://www.myantispyware.com/2017/09/07/remove-extensions-installed-by-enterprise-policy/

Now in Chrome go to chrome://settings
Scroll down to "Advanced" then "Reset" then "Reset settings to their original defaults"

Confirm your Reset instruction and this should clear any remaining PuP.

Malwarebytes should also clear up any debris that was hidden by either installed software or add-ons that you've now removed.

Restart computer, scan again with MBAM and see if the pop-up is still with you.

Author

Commented:
chrome cleanup done, it shows : No harmful software found
Malwarebyte also did not find any harm:
m
Most Valuable Expert 2013

Commented:
And no recent installs?

OK let's throw AdwCleaner at it and see what else we find.

https://www.bleepingcomputer.com/download/adwcleaner/

Author

Commented:
Chrome is the latest install:
c
Most Valuable Expert 2013

Commented:
Have you just started using Chrome or is this simply the latest version updated?  If you were using a different browser that would need cleaning up too.
Bill PrewTest your restores, not your backups...
Expert of the Year 2019
Top Expert 2016

Commented:
ytmp3.cc seems to be a sketchy site / utility that is know for malware like activity.  There were a number of hits in Google supporting this, and honestly I decided not to explore too many on the chance that some were not upstanding sites.

Several did indicate that removal can be a complicated process if you are infected though, so you might want to get some help on that unless you consider yourself well versed on malware removal.

That being said this reference mentioned a few things to try that may help so I'll pass it along here.



»bp

Author

Commented:
I had to uninstall Google Chrome completely..... I hope they will have a fix for their browser shortly
Most Valuable Expert 2013

Commented:
In fairness to Chrome, they can't really be accountable for what's added to their application by users after it's installed.

Author

Commented:

In fairness to Chrome, they can't really be accountable for what's added to their application by users after it's installed.

at least they should have a solution on how to clean it up instead of uninstalling it completely
Bill PrewTest your restores, not your backups...
Expert of the Year 2019
Top Expert 2016

Commented:
Agreed, in a perfect world that would be the case.  But the "dark forces" that lurk on the interwebs are constantly looking for the smallest of loopholes to exploit to allow their malware and nefarious missions to succeed, so it's a relentless pursuit for software vendors.  That's why we have to take a layered approach to defense, and have multiple tools and places to try and catch these things.  Even then some get through, until fixes can be added to trap new exploits.  It's a never ending challenge...


»bp

Author

Commented:
Thank you for your inputs Guys!