i keep getting a POP UP....
- Thread starter P4Clock
- Start date
Seems to be a rash of it lately so possibly some malware has been distributed in something genuine or something maybe - dunno if it is just coincidence a lot of it seems to have popped up since the 1803 update for Windows 10 or if there is some undiscovered security issue.
Most likely explanation is some software you've installed is infected and/or you've clicked on and enabled the malware from a phishing attempt.
Most likely explanation is some software you've installed is infected and/or you've clicked on and enabled the malware from a phishing attempt.
Don
Where did it come from?
I'd try..
ESET Online Scanner
MBAM
Which version of 10 is it?
I'd try..
ESET Online Scanner
MBAM
Which version of 10 is it?
Soldato
Uniinstall Chrome and try the same steps with Edge. Have you run Malwarebytes?
Andi.
Andi.
Associate
Any addons installed in chrome (as I can see that you're logged in and google normally reinstalls and addons and restores your bookmarks and such, and one of those could be compromised)?
Also check your default homepage if this is coming up the moment chrome is started as it might have been changed before the reinstall or could have come from anything else.
Also, is that coming up at start or after you visit a site (since I see on ad blocker installed and adverts are one source for triggering these redirects to fake virus warning sites)?
Also check your default homepage if this is coming up the moment chrome is started as it might have been changed before the reinstall or could have come from anything else.
Also, is that coming up at start or after you visit a site (since I see on ad blocker installed and adverts are one source for triggering these redirects to fake virus warning sites)?
Permabanned
- Joined
- 9 Aug 2008
- Posts
- 35,707
That is a .review domain you can see by the url it's fake. Not sure where it comes from but it's 100% malware from somewhere. Give some scanners a go as already stated.
Soldato
adwcleaner,
malwarebytes,
reset browsers to defaults.
malwarebytes,
reset browsers to defaults.
Soldato
i keep getting this crap. any idea what would cause it.
the system as an 10day only windows install with drivers and a few steam game's, the system as not been use for day to day crap.
Hmmm I typed the address in Chrome and get this flagged as dangerous phishing site:
Your Chrome should get the same details as shown in image but I think you probably been downloaded fake Chrome browser from sites pretended to be genuine Google Chrome site or possible downloaded fake Chrome extensions.
https://fossbytes.com/efast-browser-deletes-your-chrome-browser-and-replaces-it-with-a-clone/
https://lifehacker.com/how-to-tell-legit-chrome-extensions-from-malware-1825423984
https://www.express.co.uk/life-styl...-update-extensions-web-store-security-warning
https://documents.trendmicro.com/assets/pdf/appendix-droidclub.pdf
Try delete all extensions then download it again from Chrome webstore.
Make sure you download genuine Chrome browser only from the site below, not the other fake sites.
https://www.google.co.uk/chrome/
If you still have same issue after ran Malwarebytes scan and your PC probably still infected with some phishing software installed then you will need to format your PC and clean install Windows 10 again.
Soldato
- Joined
- 20 Oct 2008
- Posts
- 12,096
Given that this is a "10day only windows install with drivers and a few steam game's". Why don't you reinstall Windows from Scratch?
If doesn't take long and you'll know you're starting out with a clean machine.
If doesn't take long and you'll know you're starting out with a clean machine.
Permabanned
You must have downloaded and run a program from an untrustworthy source, it's easy to do with all the scams out there.
These things can be really gritty to remove, you think you've got it but then you haven't.
Only way to be sure is a clean Windows install.
These things can be really gritty to remove, you think you've got it but then you haven't.
Only way to be sure is a clean Windows install.
Soldato
Not necessarily malware.
For example www.newsnow.co.uk a legitimate news aggregator site, quite often has dodgy pop-ups or redirects.
For example www.newsnow.co.uk a legitimate news aggregator site, quite often has dodgy pop-ups or redirects.
Permabanned
You also need to install an ad blocker so most of the "click here to get bummed" stuff doesn't even show up.
Soldato
Not got a Draytek router do you? I have no idea if a dodgy DNS could cause something like the Op has posted however.
https://forums.overclockers.co.uk/threads/draytek-router-dns-hijack.18820328/
https://forums.overclockers.co.uk/threads/draytek-router-dns-hijack.18820328/
That is the plan but I would like to know what it is from so I can avoid it in the future.