Page 1 of 3 123 LastLast

  1. Joined : Jul 2015
    Posts : 52
    Windows 10 Pro
       14 Aug 2015 #1

    Chrome Messages and "Dings" virus?


    So i've been getting these popping up in chrome at random times:
    Click image for larger version. 

Name:	Capture.PNG 
Views:	152 
Size:	11.6 KB 
ID:	31329Click image for larger version. 

Name:	Capture 2.PNG 
Views:	151 
Size:	8.1 KB 
ID:	31328
    And i've also been hearing a "ding" noise that sounds sort of like the mario coin sound, but not exactly. It also seems to happen randomly. It happens sometimes with the message, and sometimes without.
    I've run MBAM, Defender, ADWCleaner, JRT, and SuperAntiSpyware.

    MBAM found nothing.

    Defender found nothing.

    ADW found: AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
    and hxxp_st.chatango.com_0.localstorage-journal

    JRT found: Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.azlyrics.com_0.localstorage

    Superantispyware found: C:\PROGRAMDATA\INSTALLMATE\{B24BDC69-3C80-4CEC-AE07-74A269A8FE9F}\CUSTOM.DLL
    and also a bunch of cookies that are potentially tracking. Suspicious ones include: popads.net, scorecardresearch.com, onclickads.net, sales.liveperson.net, serve.popads.net, Adcash.com
    All of which have been deleted.

    I don't see any odd extensions in chrome. Only the ones that I use and trust. Same for chrome plugins.
    I have tried clearing the chrome cache, cookies, etc.
    I have no bad programs installed that I can see.

    This all was done yesterday. Today I haven't experienced a popup yet, but I have heard the ding. I'm running procmon hoping to catch it in the act.
    Any advice?
      My System SpecsSystem Spec


  2. Joined : Feb 2015
    Bamberg Germany
    Posts : 12,894
    Microsoft Windows 10 Pro 64-bit 14393 Multiprocessor Free
       14 Aug 2015 #2

    You could run Ccleaner and Totally nuke everything in Chrome or use Chromes History tool. Make sure you just don't delete you saved passwords. Then download and install MBAE(Malearebytes Anti Exploit) to protect against Zero-Day Exploits. You can turn off the constant toast pop-up in settings app

    Click image for larger version. 

Name:	001.png 
Views:	24 
Size:	55.2 KB 
ID:	31333
      My System SpecsSystem Spec


  3. Joined : Jul 2015
    Posts : 52
    Windows 10 Pro
       14 Aug 2015 #3

    Cliff S said: View Post
    You could run Ccleaner and Totally nuke everything in Chrome or use Chromes History tool. Make sure you just don't delete you saved passwords. Then download and install MBAE(Malearebytes Anti Exploit) to protect against Zero-Day Exploits. You can turn off the constant toast pop-up in settings app

    Click image for larger version. 

Name:	001.png 
Views:	24 
Size:	55.2 KB 
ID:	31333
    Thanks for the quick reply

    I used ccleaner and gave chrome the nuke.
    I installed MBAE too. Does it just run in background?
      My System SpecsSystem Spec


  4. Joined : Feb 2015
    Bamberg Germany
    Posts : 12,894
    Microsoft Windows 10 Pro 64-bit 14393 Multiprocessor Free
       14 Aug 2015 #4

    ChuckWheat said: View Post
    Thanks for the quick reply

    I used ccleaner and gave chrome the nuke.
    I installed MBAE too. Does it just run in background?
    Yup with absolutely no negative effects(minimal asset usage)

    Click image for larger version. 

Name:	002.png 
Views:	13 
Size:	43.5 KB 
ID:	31350
      My System SpecsSystem Spec


  5. Joined : Jul 2015
    Posts : 52
    Windows 10 Pro
       15 Aug 2015 #5

    Cliff S said: View Post
    Yup with absolutely no negative effects(minimal asset usage)
    Alright, so I was on for a few hours today, and nothing!
    It must have been one of the many things I tried.
    Thanks for your help
      My System SpecsSystem Spec


  6. Joined : Feb 2015
    Bamberg Germany
    Posts : 12,894
    Microsoft Windows 10 Pro 64-bit 14393 Multiprocessor Free
       15 Aug 2015 #6

    You're welcome.
      My System SpecsSystem Spec


  7. Joined : Jul 2015
    Posts : 52
    Windows 10 Pro
       25 Aug 2015 #7

    Cliff S said: View Post
    You're welcome.
    it's back

    yesterday a "ding"
    and today a popup like the earlier ones in chrome. Popup Blocker Pro caught it and prevented it from being loaded.
    Superantispyware finds a ton of "adware tracking cookies". What can I do with these?
    After cleaning them, i can do the same scan a little while later and find more. Listen to these:
    scorecardresearch.com
    sellpoints.com
    skimresources.com

    these are all cookies being created, when i've never been to these sites...
      My System SpecsSystem Spec


  8. Joined : Oct 2014
    Trnava
    Posts : 1,711
    Windows Home x64
       25 Aug 2015 #8

    Going to 1lrl[dot]com and clicking on 360secure reproduces the popup as well as the sound.
    It seems like something is opening popups, check installed software, might be bundled within.
      My System SpecsSystem Spec


  9. Joined : Jul 2015
    Posts : 52
    Windows 10 Pro
       25 Aug 2015 #9

    TairikuOkami said: View Post
    Going to 1lrl[dot]com and clicking on 360secure reproduces the popup as well as the sound.
    It seems like something is opening popups, check installed software, might be bundled within.
    Around the time of the first popups (the screenshotted ones) I installed: Phoenix RC Simulator (i trust it), Auslogics Disk Defrag. I'm skeptical about the second one... Any idea about it?

    Update: clearing cookies, checking cookies, seeing that ad cookies are being created fast for sites i've not been to...
      My System SpecsSystem Spec


  10. Joined : Oct 2014
    Trnava
    Posts : 1,711
    Windows Home x64
       25 Aug 2015 #10

    ChuckWheat said: View Post
    Update: clearing cookies, checking cookies, seeing that ad cookies are being created fast for sites i've not been to...
    You can block 3rd party cookies, but that would destroy some functionaly on webpages, try this extension:

    Vanilla Cookie Manager - Chrome Web Store

    You can add an exception with 2 clicks, then set it up to remove all cookies in 5 min and protect yours.
    Attached Thumbnails Attached Thumbnails capture_08252015_103006.jpg   capture_08252015_103103.jpg  
      My System SpecsSystem Spec


 
Page 1 of 3 123 LastLast


Similar Threads
Thread Forum
Solved Unable to create or save files in "Documents" and "Pictures" folders
Hi, as with many I have upgraded to Windows 10 today and it is going well except for the fact I am unable to save any files or create new ones in the Documents and Pictures folders or any sub-folders within these folders, and I have no idea why it...
General Support
Solved Libraries "Camera Roll" and "Saved Pictures" keep resurrecting!
The library entries just wont stay the way I leave them. I have just arranged my libraries and deleted the two mentioned folders, then they appeared againd and made a mess of my tasbar... :( This is a serious problem because of how I use the library...
General Support
Notification - "Turn on virus protection" evey time Windows starts
Hi, Has anyone noticed an annoying notification bug asking for virus protection to be turned on? Every time I switch my laptop on I get the notification being displayed for a split second. It is a clean installation of Windows 10 (not...
AntiVirus, Firewalls and System Security
Remove Start Menu "New" messages?
Is there a way to prevent Windows 10 from showing the message "New" next to every single thing I install and keeping it there until I finally cave in and open it? This utterly pointless niggle is triggering my OCD like crazy!
General Support
Solved "Error (0x800F081F) - DISM Unable to find source" & "sfc /scannow"
I have upgraded 5 machines and clean installed 3 machines. Experienced an issue with one machine with continuous corruption problems After the 3rd attempt I discovered that even with a Clean Install of Win 10 I get unrepairable errors - Sorry...
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 07:07.
Find Us
Twitter Facebook Google+



Windows 10 Forums