Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Popups are back and with audio and a phone number this time!


  • Please log in to reply
10 replies to this topic

#1 RangerRick

RangerRick

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:06 AM

Posted 13 June 2017 - 06:32 PM

Related to my April 2017 post, "pop-ups? ext.privacyassistance, newtabtv.com, socialnewpages.com"

 

The popup issue with Firefox is back and worst than ever.  Audio describing that you need to call the toll free number and not to close the window or they will have to shut down our computer to protect their network from farther damage. 18662655220 is the number listed on the popup.

 

We did a Ctrl+Alt+Del to close down Firefox.

 

Thank you for any help you can be.


Edited by hamluis, 13 June 2017 - 08:14 PM.
Moved from MRL to Am I Infected - Hamluis.

There are no stupid questions, only stupid results from unasked questions.

BC AdBot (Login to Remove)

 


#2 jwoods301

jwoods301

  • Members
  • 1,489 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:06 AM

Posted 14 June 2017 - 12:01 AM

You might consider doing the following...

Download and run AdwCleaner -

http://www.bleepingcomputer.com/download/adwcleaner/

Download and run Malwarebytes Anti-Malware -

https://www.malwarebytes.org/antimalware/

Download and run Junkware Removal Tool -

http://www.bleepingcomputer.com/download/junkware-removal-tool/

Create a System Restore point first.



#3 RangerRick

RangerRick
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:06 AM

Posted 14 June 2017 - 11:50 AM

Thanks jwoods301. Should I not run any programs to upload logs? That normally seems to be the norm before engaging any removal tools. Sorry to question.
There are no stupid questions, only stupid results from unasked questions.

#4 sasschary

sasschary

  • Malware Study Hall Senior
  • 806 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:A galaxy far, far away...
  • Local time:10:06 AM

Posted 14 June 2017 - 08:08 PM

Hi RangerRick,
 
Those programs will all produce logs, and I can take a look at them if you want. AdwCleaner and Junkware Removal Tool will both show the logs automatically on completion. For Malwarebytes, you can follow these instructions after cleaning your system to get the log:
 
Let's export your Malwarbytes log

  • Open Malwarebytes
  • Click History, then click Application Logs.
  • Click on the most recent scan log, then double click it to open it.
  • At the bottom of the window which opens, click Export and choose to export as a Text file (.txt).
  • Save the file on your desktop with the name MBAMScan.txt. Then, copy and paste it into your next reply.

Popups are pretty annoying, but we should be able to get those fixed :)

 

sasschary



#5 RangerRick

RangerRick
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:06 AM

Posted 14 June 2017 - 08:39 PM

From what I see in the logs, no problems found.  What next?  Thanks

 

 

Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 6/14/17
Scan Time: 9:25 PM
Logfile: MBAMScan.txt
Administrator: Yes
-Software Information-
Version: 3.0.6.1469
Components Version: 1.0.103
Update Package Version: 1.0.2153
License: Free
-System Information-
OS: Windows 10
CPU: x64
File System: NTFS
User: ANNMONTGOMERY\Ann Montgomery
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 372699
Time Elapsed: 3 min, 35 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 0
(No malicious items detected)
Physical Sector: 0
(No malicious items detected)

(end)

 

--------------------------

 

 

# AdwCleaner v6.047 - Logfile created 14/06/2017 at 21:23:28
# Updated on 19/05/2017 by Malwarebytes
# Database : 2017-06-14.4 [Server]
# Operating System : Windows 10 Pro  (X64)
# Username : Ann Montgomery - ANNMONTGOMERY
# Running from : C:\Users\Ann Montgomery\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
 
***** [ Services ] *****
No malicious services found.

***** [ Folders ] *****
No malicious folders found.

***** [ Files ] *****
No malicious files found.

***** [ DLL ] *****
No malicious DLLs found.

***** [ WMI ] *****
No malicious keys found.

***** [ Shortcuts ] *****
No infected shortcut found.

***** [ Scheduled Tasks ] *****
No malicious task found.

***** [ Registry ] *****
No malicious registry entries found.

***** [ Web browsers ] *****
No malicious Firefox based browser items found.
No malicious Chromium based browser items found.
*************************
C:\AdwCleaner\AdwCleaner[S0].txt - [1008 Bytes] - [14/06/2017 21:23:28]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1081 Bytes] ##########

 

-----------------------------------

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Pro x64
Ran by Ann Montgomery (Administrator) on Wed 06/14/2017 at 21:32:02.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

File System: 0
 

Registry: 0
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 06/14/2017 at 21:34:08.37
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 


There are no stupid questions, only stupid results from unasked questions.

#6 sasschary

sasschary

  • Malware Study Hall Senior
  • 806 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:A galaxy far, far away...
  • Local time:10:06 AM

Posted 15 June 2017 - 03:01 PM

Hi RangerRick,
 
You are correct, nothing is showing in the logs. What are you generally doing when these popups show up? Do they always appear when you are using Firefox, or is it only on certain websites?

Let's clear your Mozilla Firefox cache.

  • Open Mozilla Firefox
  • Click the three lines at the top right, then History, then Clear Recent History...
  • For the Time range to clear, select Everything
  • Click the arrow next to Details
  • Check Cache and uncheck all other options.
  • Close Firefox and restart your computer. Then, try using Firefox as normal, and tell me if the popups are still appearing.

sasschary



#7 RangerRick

RangerRick
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:06 AM

Posted 15 June 2017 - 08:05 PM

Well, from what the wife tells me, it could be site(s) related.  She even got a popup while using MS Edge today as I told her not to use Firefox until we get a handle on the problem.  The issue had only been on Firefox, but I think that is due to the fact of browser preference.

 

The websites in question show broadcast TV from South Korea the following it is shown on TV.  There seem to be no way to check how safe the websites are, as they are not commonly used here and hence not scanned by websites like safeweb.norton.

 

 

What to do?  The wife will be very unhappy if she cannot watch her shows.

 


 


There are no stupid questions, only stupid results from unasked questions.

#8 sasschary

sasschary

  • Malware Study Hall Senior
  • 806 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:A galaxy far, far away...
  • Local time:10:06 AM

Posted 16 June 2017 - 09:41 AM

Hi RangerRick,

 

I believe this could possibly be a site-specific issue. Did you try clearing the Firefox cache as I explained in my last post? If not, please try doing that and then tell me if the popups still appear.

 

Are you also able to give me the URL (It looks something like www.bleepingcomputer.com/forums/) for the website giving you issues? Please put a space between the www and the right half of the URL so that the URL does not turn into a link when posted. I would like to see if the popups appear on a computer other than yours.

 

Sasschary



#9 RangerRick

RangerRick
  • Topic Starter

  • Members
  • 57 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:06 AM

Posted 17 June 2017 - 09:25 AM

Cleared the cache and she has the okay to give it a spin.  Results to follow.

 

This is one of the sites, http:// tubebox1.cafe24. com/dm.html?dm=k2CWEjpeUZgm6inuIWn.  As is links to www. dailymotion. com, I have included a search from that site.  http: //www.dailymotion. com/video/x8p1q0_grandmother-s-flower-korean-documen_shortfilms.  The source code from the first website show some java scripts.  I do not see java installed on the computer.  Seems like it is not installed with Windows 10.  If it is not installed, but still functioning how do I control it?

 

Thanks


There are no stupid questions, only stupid results from unasked questions.

#10 jwoods301

jwoods301

  • Members
  • 1,489 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:06 AM

Posted 17 June 2017 - 01:13 PM

Java and JavaScript are not the same thing.

 

From the Java website -

 

Key differences between Java and JavaScript:

  • Java is an OOP programming language while Java Script is an OOP scripting language.
  • Java creates applications that run in a virtual machine or browser while JavaScript code is run on a browser only.
  • Java code needs to be compiled while JavaScript code are all in text.
  • They require different plug-ins.


#11 sasschary

sasschary

  • Malware Study Hall Senior
  • 806 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:A galaxy far, far away...
  • Local time:10:06 AM

Posted 17 June 2017 - 07:49 PM

Hello again,

 

jwoods301 is correct. JavaScript is not the same thing as Java, and without JavaScript, there's a good chance that your wife would not be able to watch her shows at all. JavaScript isn't really anything you have to worry about.

 

Once you hear back from your wife on how the computer is doing, I'll be able to help a bit more.

 

Sasschary






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users