Still getting popups for Chromium malware


  1. Posts : 22
    Windows 10 64 bit
       #1

    Still getting popups for Chromium malware


    If you look at my previous threads I started, I'm still getting malware about installing Chromium browser. It's not a legitimate popup. I thought I deleted the software and I ran all my antiviruses. Here are some screenshots. The one is a screenshot of the popup. The other is a screenshot of the process in task manager, and the third is what pops up when I click OK on the popup. Any help? UPDATE: I know mshta.exe is a legitimate process because I Googled it. But I don't know why it is popping up. Do I need to delete it? Still getting popups for Chromium malware-capture.jpgStill getting popups for Chromium malware-capture2.jpgStill getting popups for Chromium malware-capture3.jpg
      My Computer

  2. FreeBooter's Avatar
    Posts : 4,028
    Windows 10 Pro 64-bit
       #2

    From your Firewall block mshta.exe file from inbound and outbound internet connections.
      My Computer

  3. swarfega's Avatar
    Posts : 7,148
    Windows 10 Pro 64-bit
       #3

    Where did you download Chromium from? Why are you using Chromium rather than Chrome stable?

    What other anti virus are you using other than MBM?
      My Computers


  4. Posts : 22
    Windows 10 64 bit
    Thread Starter
       #4

    swarfega said:
    Where did you download Chromium from? Why are you using Chromium rather than Chrome stable?

    What other anti virus are you using other than MBM?

    I don't use Chromium. This popped up after my nephew downloaded some teamspeak thing called discord. He's 10 and he downloads things. I use Avast free and the paid version of MBM
      My Computer


  5. Posts : 22
    Windows 10 64 bit
    Thread Starter
       #5

    FreeBooter said:
    From your Firewall block mshta.exe file from inbound and outbound internet connections.
    I just did that and I'm going to delete mshta
      My Computer


  6. Posts : 766
    Win10 Version 20H2 19042.928
       #6

    https://www.malwarebytes.com/adwcleaner/

    Did not see your other threads. Did you run AdwCleaner ?
      My Computer

  7. TairikuOkami's Avatar
    Posts : 4,777
    Windows Home Dev 21xxx x64
       #7

    Windows Script Host (WSH) is usually responsible for executing random stuff, you can block it like this:
    Code:
    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
    I have actually that executable blocked, because it is commonly used by scripting malware.
    Note, this only blocks it for the current user, if it is run by system, it will still be executed.
    Code:
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "mshta.exe" /f
    There is also this multipurpose beauty, since the default popup blocker sucks these days anyway.

    Pop up blocker for Chrome™ - Poper Blocker - Chrome Web Store
      My Computer


  8. Posts : 22
    Windows 10 64 bit
    Thread Starter
       #8

    TairikuOkami said:
    Windows Script Host (WSH) is usually responsible for executing random stuff, you can block it like this:
    Code:
    reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
    I have actually that executable blocked, because it is commonly used by scripting malware.
    Note, this only blocks it for the current user, if it is run by system, it will still be executed.
    Code:
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "mshta.exe" /f
    There is also this multipurpose beauty, since the default popup blocker sucks these days anyway.

    Pop up blocker for Chrome™ - Poper Blocker - Chrome Web Store
    I just ran these command lines and let's see what happens.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 21:35.
Find Us




Windows 10 Forums