Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Got and Closed Pop-up Worried about Infection


  • Please log in to reply
5 replies to this topic

#1 Lxno78

Lxno78

  •  Avatar image
  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:03 AM

Posted 05 June 2018 - 01:15 PM

I was on a blogspot website that had a link to a reddit post. Usually, I'm careful but I wasn't in this case. I clicked the link and got a pop-up . It was in it's own browser window. I panicked and closed out of it by using the red "x" in the upper right corner instead of killing the browser process.

 

I was browsing in chrome, incognito, with images set not too load. (Does that make anything safer?)

 

I've run 3 scans, Avast, Malwarebytes, and emsissoft all came up clean. I've also fully deleted my browser files and history on both chrome and firefox. My computer seems to be running fine, nothing strange that I am aware of.

 

However, I still don't feel reassured. Any other steps I can take? Also, if I take the route of a wipe/reinstall of OS, I have two drives (ssd and normal hard drive) do is there a recommended software for wiping those?



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  •  Avatar image
  • Moderator
  • 20,598 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:03 AM

Posted 05 June 2018 - 02:58 PM

I think you are good to go..no reason to think you are infected. Reinstalling would be a drastic unnecessary step.

 

The safest browser is Firefox with the NoScript extension. It takes some time to learn to use it properly but it

would of blocked that popup...actually it may have even not allowed the link you clicked on to be active.

NoScript Security Suite :: Add-ons for Firefox

 

Another program you can use to scan for crapware/ adware that infects browsers is Adblock Plus.

If it finds anything and you want me to take a look at it...post the results.

 

Download AdwCleaner by Xplode onto your desktop. (compatible with Windows 7, 8 and 10)

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
If we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

 

 


#3 Lxno78

Lxno78
  • Topic Starter

  •  Avatar image
  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:03 AM

Posted 05 June 2018 - 03:26 PM

There are 2 detected pups on there. I AdwCleaner removed them both. I did a second scan and it came up clean. However, I'd like to know more about those detected pups. There are PUP.Optional.Legacy Ask and PUP.Optional.Legacy AOL. Is it possible those are some sort of legacy thing for support in chrome, or it's just definitely adware?
 
 
 
 
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-06-05.1
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    06-05-2018
# Duration: 00:00:36
# OS:       Windows 8.1
# Scanned:  41014
# Detected: 2
 
 
***** [ Services ] *****
 
No malicious services found.
 
***** [ Folders ] *****
 
No malicious folders found.
 
***** [ Files ] *****
 
No malicious files found.
 
***** [ DLL ] *****
 
No malicious DLLs found.
 
***** [ WMI ] *****
 
No malicious WMI found.
 
***** [ Shortcuts ] *****
 
No malicious shortcuts found.
 
***** [ Tasks ] *****
 
No malicious tasks found.
 
***** [ Registry ] *****
 
No malicious registry entries found.
 
***** [ Chromium (and derivatives) ] *****
 
No malicious Chromium entries found.
 
***** [ Chromium URLs ] *****
 
PUP.Optional.Legacy             Ask
PUP.Optional.Legacy             AOL
 
***** [ Firefox (and derivatives) ] *****
 
No malicious Firefox entries found.
 
***** [ Firefox URLs ] *****
 
No malicious Firefox URLs found.
 
 
 
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########


#4 buddy215

buddy215

  •  Avatar image
  • Moderator
  • 20,598 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:03 AM

Posted 05 June 2018 - 06:53 PM

Ask is included as optional search engines on browsers. It will produce ads in search results when active.

AOL does the same thing. No biggees...

Ask is often seen bundled with free programs including free security programs such as Avast.

 

If you are not seeing excessive CPU usage, popup ads, search misdirects, etc. you are good to go.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
If we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

 

 


#5 Lxno78

Lxno78
  • Topic Starter

  •  Avatar image
  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:05:03 AM

Posted 05 June 2018 - 08:52 PM

All right! Thank you for the help!



#6 buddy215

buddy215

  •  Avatar image
  • Moderator
  • 20,598 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:03 AM

Posted 06 June 2018 - 06:01 AM

You're welcome ...happy surfin'


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
If we are to have another contest in the near future of our national existence, I predict that the dividing line will not be Mason and Dixon’s, but between patriotism and intelligence on the one side, and superstition, ambition, and ignorance on the other. Ulysses S. Grant...Republican president who correctly predicted the cause of Trump's attempted coup.

 

 





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users