Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Chrome Pop Unders & Slow and Tried Everything


  • Please log in to reply
23 replies to this topic

#16 Bernadine

Bernadine
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:35 PM

Posted 18 May 2017 - 12:48 PM

nope


Edited by Bernadine, 18 May 2017 - 01:05 PM.


BC AdBot (Login to Remove)

 


m

#17 Bernadine

Bernadine
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:35 PM

Posted 18 May 2017 - 01:07 PM

I just opened up chrome and waited about 15 minutes and another popup happened.

 

this is my history from chrome right after I ran the "qualys broswer check"

 


2:04 PM
Search By MovixHubext.movixhub.com
2:04 PM
Redirectnewstarads.com
 


#18 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,206 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:35 PM

Posted 18 May 2017 - 07:51 PM

Reset Chrome...
Click on "Customize and control Google Chrome":
p22003758.gif
Click "Settings" then "Show advanced settings" at the bottom of the screen.
Click "Reset browser settings" button.
Restart Chrome.

If the above didn't help....

Reinstall Chrome...
If you want to save your bookmarks...
How to Backup Bookmarks in Google Chrome
If you want to save your passwords as well see here: http://www.intowindows.com/how-to-backup-saved-passwords-in-google-chrome-browser/
 

  • Close all Chrome windows and tabs.
  • Go to the Start menu > Control Panel. (Windows 8 users: Learn how to access the Control Panel)
  • Click Programs and Features.
  • Double-click Google Chrome.
  • Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, by selecting the "Also delete your browsing data" checkbox.

Install fresh copy.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#19 Bernadine

Bernadine
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:35 PM

Posted 19 May 2017 - 02:19 PM

That didn't work. I got a malwarebytes popup that blocked a redirect after about an hour of being open.



#20 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,206 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:35 PM

Posted 19 May 2017 - 08:17 PM

Did you reset or reinstall Chrome?


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#21 Bernadine

Bernadine
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:35 PM

Posted 19 May 2017 - 09:30 PM

Both... I reset everything back to defaults.. then I ended up uninstalling. I ran a malwarebytes scan, reset the computer and then downloaded a new version and installed fresh.



#22 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,206 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:35 PM

Posted 19 May 2017 - 10:03 PM

Next time it happens can you get a screenshot of MBAM popup?


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#23 Bernadine

Bernadine
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:35 PM

Posted 20 May 2017 - 07:29 AM

Okay... I've solved it!!!!  After installing and uninstalling all day yesterday on 3 computers.. while I waited for another popup for you... I went around investigating... I ran across a reddit link that discussed this mobifoth/chrome thing... apparently there have been a few chrome extensions involved in this fiasco. From what I've read... users with the "Unseen"  extension and the "Smartshot" extension have been affected. I don't use "unseen" but I DO use "smartshot" and that extension is on every computer in my house that is infected. the computers that don't have it aren't infected. Here's what I found on reddit.

 

https://www.reddit.com/r/techsupport/comments/6amjo1/malware_warning_if_youve_been_getting_spam_popups/?st=j2l37ach&sh=d3d8915f 

 

Yeah. It's Smartshot. It pulls infected JS from https ://static.getsmartshot.com/ config/blacklisted_sites.js containing atob(aHR0cDovL2dvLm1vYmlmb3RoLmNvbS8..) = base64(http ://go.mobifoth.com/...) in javascripts/bg.js

 

 

So my computer IS clean... just a bad extension! Thanks for everything you did for me!! Have a wonderful weekend!!


Edited by Bernadine, 20 May 2017 - 07:30 AM.


#24 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,206 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:12:35 PM

Posted 20 May 2017 - 12:33 PM

You're very welcome p22002759.gif

 

BTW, after full uninstall you shouldn't be having any extensions but apparently you reinstalled some which caused your issue :)
 


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users