Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Why am I getting Dropbox update pop-ups all the time?


  • Please log in to reply
23 replies to this topic

#1 zzzz

zzzz

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 08 August 2015 - 05:55 PM

Just recently I get these pop-ups sometimes every few minutes whether I click yes or no on the  'Do you want this to make changes to your computer?'

 

I've had Dropbox for years and never had this before - any explanation please?



BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 08 August 2015 - 07:14 PM

Could be something that isn't Dropbox....or if it is you may be able to stop the popups by blocking it loading at startup and loading when you use it.

You can view the Windows Startups, your Browser(s) startups and Scheduled Tasks using CCleaner's Tools. Use the other programs to find and remove

adware and more sinister malware.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Open CCleaner...post the three lists mentioned below using CCleaner:

 

Open CCleaner and click on Tools. Choose Startups. On that page you will see a list of Windows Startups and at the top tabs for each browser and Scheduled Tasks.

At the bottom right of that page you will see a button when clicked will allow you to Copy and Paste the list of Windows Startups and Scheduled Tasks into your next

post. Please do that.

 

Open CCleaner and click on Tools. Choose Uninstall. On that page you will see a list of programs installed on your computer and at the bottom right of that page you

will see a button when clicked will allow you to Copy and Paste that list in your next post. Please do that.

 

Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).

  • Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
  • Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
  • Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
  • Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
  • If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
  • The scan may take some time to finish,so please be patient.
  • If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
  • While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.

 

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the esetsmartinstaller_enu.png icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.
  • NOTE:Sometimes if ESET finds no infections it will not create a log.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 08 August 2015 - 08:58 PM

Doing a search for Dropbox update popup produced this result: Dropbox - Disable desktop notifications


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#4 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 09 August 2015 - 04:19 AM

Thanks for the responses.

 

Here is a screenshot of the pop-up - http://puu.sh/juSr6/62494cd4ea.png  which I got now when I just turned on.

 

The certificate seems OK - I don't think it is malware but as genuine why is it occurring when it never did before? Very odd.

 

I have now unchecked the 'show notifications' box - thanks for that tip buddy215 - I'll see what happens now.



#5 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 09 August 2015 - 05:28 AM

That's the Windows UAC security notification. Rather suspicious since you have not received that notice before. I think it would be wise to

run the programs I suggested in my first post and stop Dropbox from running until needed, too.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#6 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 09 August 2015 - 06:01 AM

Oh!  I put the computer on Sleep and when starting again I got the pop-up!  Needs a restart perhaps?



#7 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 09 August 2015 - 06:18 AM

Uncheck another box...Start Dropbox on System Startup


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#8 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 09 August 2015 - 06:31 AM

Just seen your latest post.

 

Previously I did say 'yes' to run it and have not noticed any problems as yet. I did think to stop it starting in preferences but did not but will do.

 

If this is malicious and Dropbox being user ubiquitous wouldn't there be many warnings on various sites, How to Geek, Bob Rankin,  Bleeping Computer etc.? There's nothing on the Dropbox bug/troubleshooting forum either.

 

I'll wait a bit before tackling your clean up chore when I have time.



#9 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 09 August 2015 - 12:45 PM

Uncheck another box...Start Dropbox on System Startup

Did that and still the pop-up - needs a restart? Will see later as I'm on another computer now on which I'm not getting that pop-up altho I have both those preference boxes checked which indicates I should do that cleanup.

 

Will update after that.



#10 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 09 August 2015 - 02:26 PM

UAC can be turned off....but I wouldn't suggest doing that until you have completed the scans and stopped Dropbox from starting a boot time.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#11 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 11 August 2015 - 05:18 AM

I have successfully got as far as the AdwCleaner but after its reboot it (or something)  has killed my Chrome browser. Thru IE I cannot even download a new one! Luckily I can use this other computer (to check if Chrome was down. 

 

I'll uninstall  it and try to download it again.  Up till then I don't think any problems were found. Will get back to you.

 

From starting this morning and an hour or so doing the analysis I didn't get a single DropBox pop-up! What is going on? Has it cured itself I wonder?


Edited by zzzz, 11 August 2015 - 05:25 AM.


#12 buddy215

buddy215

  • Moderator
  • 13,103 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:55 AM

Posted 11 August 2015 - 05:42 AM

If Chrome is still a problem, you can use Revo to uninstall it. Be sure to uninstall your Chrome profile, too.

Download Revo Uninstaller Freeware (use in Advanced Mode)

 

I would need to see the results of the scans and the three lists using CCleaner to be of further help.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#13 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 11 August 2015 - 05:57 AM

Yes I'm using revo.  Got my Chrome back so will paste in the results I have  - please indicate if I really need to do the Junkware and the ESET - I've got nervous and I have no more pop-ups.



#14 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 11 August 2015 - 06:04 AM

Yes HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
Yes HKCU:Run GoogleChromeAutoLaunch_5560E485902A34F6B1CF63ACD9274ABA Google Inc. "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
Yes HKCU:Run GoogleDriveSync Google "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
Yes HKCU:Run puush Dean Herbert C:\Program Files\puush\puush.exe
Yes HKCU:Run WinPatrol Ruiware C:\Program Files\Ruiware\WinPatrol\winpatrol.exe -expressboot
Yes HKLM:Run AvastUI.exe Avast Software s.r.o. "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
Yes HKLM:Run Dropbox Dropbox, Inc. "C:\Program Files\Dropbox\Client\Dropbox.exe" /systemstartup
Yes HKLM:Run HotKeysCmds Intel Corporation C:\Windows\system32\hkcmd.exe
Yes HKLM:Run IgfxTray Intel Corporation C:\Windows\system32\igfxtray.exe
Yes HKLM:Run Persistence Intel Corporation C:\Windows\system32\igfxpers.exe
 
 
Yes Task CCleanerSkipUAC Piriform Ltd "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Yes Task DropboxUpdateTaskMachineCore Dropbox, Inc. C:\Program Files\Dropbox\Update\DropboxUpdate.exe /c
Yes Task DropboxUpdateTaskMachineUA Dropbox, Inc. C:\Program Files\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
Yes Task GoogleUpdateTaskMachineCore Google Inc. C:\Program Files\Google\Update\GoogleUpdate.exe /c
Yes Task GoogleUpdateTaskMachineUA Google Inc. C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Yes Task {AF1EEF1E-5BC2-404D-AE91-99769143FC7A} Microsoft Corporation C:\Windows\system32\pcalua.exe -a "C:\Users\Dennis\AppData\Local\Temp\Temp1_MyStuff66Installer (1).zip\SetUp.exe"
Yes Task {D20D9839-3DC6-4CE4-B750-227BF0921763} Microsoft Corporation C:\Windows\system32\pcalua.exe -a "C:\Users\Dennis\Downloads\MyStuff66Installer (1)\SetUp.exe" -d "C:\Users\Dennis\Downloads\MyStuff66Installer (1)"
Yes Task {E3A85CFA-C3D5-4BE3-86AD-FD5784A7214F} Microsoft Corporation C:\Windows\system32\pcalua.exe -a C:\Users\Dennis\Downloads\MyStuff66Installer\SetUp.exe -d C:\Users\Dennis\Downloads\MyStuff66Installer
 
Avast Free Antivirus AVAST Software 06/07/2015 10.2.2218
CCleaner Piriform 11/08/2015 5.08
ClipMagic Lite 4.1 MJT Net Ltd 07/07/2015 4.1
Dropbox Dropbox, Inc. 14/07/2015 3.6.9
EasyBCD 2.2 NeoSmart Technologies 31/07/2015 2.2
EditPad Lite 7.3.8 Just Great Software 14/07/2015 9.49 MB 7.3.8
Google Chrome Google Inc. 06/07/2015 44.0.2403.130
Google Drive Google, Inc. 03/08/2015 30.8 MB 1.23.9648.8824
Intel® Graphics Media Accelerator Driver Intel Corporation 07/07/2015 54.2 MB 8.15.10.1930
Maintenance Samsung ML-1660 Series Samsung Electronics Co., Ltd. 07/07/2015
Malwarebytes Anti-Malware version 2.1.8.1057 Malwarebytes Corporation 07/07/2015 64.4 MB 2.1.8.1057
Microsoft .NET Framework 4.5.2 Microsoft Corporation 07/07/2015 38.8 MB 4.5.51209
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 08/07/2015 35.0 KB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 08/07/2015 1.33 MB 4.20.9876.0
puush Dean Herbert 07/07/2015 537 KB 1.0.0.0
Revo Uninstaller 1.95 VS Revo Group 12/07/2015 1.95
Soda PDF 3D Reader LULU Software Limited 11/07/2015 72.7 MB 5.0.30.11889
TopManager 5.0.0.0 17/07/2015 3.72 MB
WinPatrol Ruiware 07/07/2015 3.10 MB 33.6.2015.1
 
# AdwCleaner v4.208 - Logfile created 11/08/2015 at 10:37:36
# Updated 09/07/2015 by Xplode
# Database : 2015-08-01.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x86)
# Username : Dennis - DENNIS-PC
# Running from : C:\Users\Dennis\Downloads\AdwCleaner.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
-\\ Internet Explorer v11.0.9600.17909
 
 
-\\ Google Chrome v44.0.2403.130
 
[C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] : 
[C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : 473B8045CC4554E9F900239F741EBA905F04233FF5E1B8464D49246C20F33860"},"software_reporter":{"prompt_reason":"989ECE15D4D1DDF73FB991352E0F6C2A25E702D1B38D5B1D8AB2B8AECB3909A2","prompt_seed":"0B76A65832B1996C3B52DBEBB76686C0E9ED4546B579906BBF3565BF22B70306","prompt_version":"A1B9678F223771BBE80B623BF97AD787845EEDCC7F7B068FE89DA7F2A40FBD97"},"sync":{"remaining_rollback_tries":"554B7963AAE726CE783405525B3EC5D92CB47B72C300F0AACFDFC502559129B9"}},"super_mac":"8D03DCFE494F6B2431404F91EB3B7680C1F20B97DB394DEAF208E197BC7FFDC2"},"session":{"restore_on_startup":1,"startup_urls":["hxxp://search.conduit.com/?gd=&ctid=CT3323737&octid=EB_ORIGINAL_CTID&ISID=MD568F0FB-D1C2-4450-AC11-51476CB1E83A&SearchSource=55&CUI=&UM=5&UP=SPBA3632D4-C30E-4AA7-AC66-A4C8005B9922&SSPV=
 
*************************
 
AdwCleaner[R0].txt - [7928 bytes] - [11/08/2015 10:25:43]
AdwCleaner[R1].txt - [7987 bytes] - [11/08/2015 10:32:54]
AdwCleaner[S0].txt - [1714 bytes] - [11/08/2015 10:37:36]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1773  bytes] ##########
 
 
 
 
 


#15 zzzz

zzzz
  • Topic Starter

  • Members
  • 620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:12:55 PM

Posted 11 August 2015 - 06:30 AM

By the way the very clear instructions for this analysis you have given have seemingly changed a little due to age or my system. 

 

In MalwareBytes the 'View detailed log' is now 'Save results' which gives the option 'Text file (*.txt)

 

In adwcleaner there is no 'Clean' button but a 'Cleaning' with a large X on it (meaning?) with a message on top saying, 'Waiting for action - Please uncheck element you want to keep'.

 

I saw nothing to uncheck the lower field being blank - would this mean there was nothing found? I continued anyway to the log.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users