Continually being hit with Popups

James1093 said:

Many thanks for the replies, esp Christophe, very detailed an really good advice.

You're most welcome

James1093 said:

Are the popups the virus, or are genuine warnings? I looked at task manager but there was nothing foreign showing.

No, not genuine. They are spoofs. Do not click on them. Add that second domain to your blocked sites. Go to Chrome Settings>>Privacy and Security>>Pop-ups and redirects>>Customised behaviours>>Not allowed to use pop-ups or redirects and add both scallactic.com and 2ntrfi.waystriling.com

James1093 said:

I've since found something in Windows Notifications setting and unchecked 'From Chrome"

Excellent.

James1093 said:

I assume Windows updates itself. Setting says it's version 21H1 OS 19043.1348

Only if your Windows Update settings options are configured for that mode. Check in settings to be sure. The version you quote is the latest, so good.

James1093 said:

The advice to not click the popup is thwarted as the last one doesn't go away, even if you close every program. Later I found something in the Tray area allowed me to close and remove all 25.

Please post a screenshot of the icon that you clicked. Hover mouse over it to get the name and print that here. When you get that name, check in Windows settings>>Apps to see if it is there. If it is, uninstall it unless it is one of your recognised security apps.

James1093 said:

The attached pic shows 5 Virus's found, more popups appeared after I took the picture and they ended up showing 3 found. Is this just a scam or trick? If they exist wouldn't Malwarebytes find them?

Assume it's a scam. MalwareBytes (nor any other malware identifier and removal tool) is 100% successful. It certainly looks like a scam to me. It seems to be a simple pop-up and redirect on steroids so MalwareBytes might not see it as a threat.

James1093 said:

pop-up and redirect on steroids - I like it!
So it may not be a Virus but a flood of popups to annoy. They really succeeded.

He he Well, not to annoy but to get you to click on their links and redirect. It looks plausible on first impressions as it seems like a legitimate security notification visually. Desperate or what! Cunning scallywags. Lol

James1093 said:

I've added the 2 sites to the Not allowed to use pop-up list. (There was nothing there before).
While doing that I found Windows Security - App and Browser control was turned Off. This wasn't done on purpose... and is now on. Maybe this was the initial cause?

Good. Let's see if that stops it. Please post back later if it does. There's always hope!

James1093 said:

I haven't clicked any popups today.. only yesterday and whatever that was is lost. So sorry, can't do a screenshot or get the name. If any appear from now on I'll get whatever details it lets me.

Just hover your mouse over the icon to get the name, but be sure not to click.

James1093 said:

I've a much better feeling about this now, and some computer usage this afternoon should show any change. I really didn't want to reinstall Windows, for fear of losing stuff.

We'll get there eventually. Hang in there and never give up.

James1093 said:

And come to think of it, I don't know where the install files might be (there's no actual disk except Win7 which it upgraded from ages ago)

Windows will download these during the routine or automatically use the ones already on your disc when you upgraded. You won't need to do anything except start the reinstall.

James1093 said:

My thanks to you and the others. I'm still reviewing your first message and working out any next steps. Cheers :)

You're very welcome. This is a great community. Always someone to help fix anything. Cheers buddy.

Christophe.

Bobby Phoenix said:

This is Chrome's notifications at work. Go to Chrome's notification settings, and I bet you'll find "Allow" for the sites you see in the popup. There's nothing on the computer. They are all coming from the website itself. The bottom one for SW is from their site I have allowed. Find the website(s) there, and block it/them.

Great post Bobby. I think you're right. With luck this'll get fixed.

Christophe.

@James1093, once you've sorted these site notification popups you might consider this extension for Chrome. I use it on Edge.

James1093 said:

Thanks Fabler2, that sound a great idea and I'll definitely look into it. Still Working though Christophe and Bobby's suggestions (Thank you)
A quick report on today usage is very positive. None of the offending popups, only one different sort that looked like it may be from an anti virus programme. I didn't actually see it... and it was gone immediately. The only puzzling bit is no internet activity was going on at the time. Just file copying.
But things looking so much better... will advise more in a day or so.

You're getting there Just for info this is what MBAM Browser Guard showed when checking scallactic site,