Webinar

kpwll

I run anti-virus software and malware regularly, I have pop-ups blocked but for a couple of weeks every time I open a new IE page, I get a square pink pop-up stating:-
Free Webinar Cloud hosting - The Best of both worlds.
11 am 30th October 2018


Then a sort of description and at the bottom is a 'sign me up' button.


Needless to say I am just closing them down, but can anyone explain what it is please. I never click on unknown links. Thanks.

arciere

Wait until the 30th October and you will find out

It could be coming from the home page or from some toolbar running in IE.
What happens if you open IE in safe mode?

kpwll

arciere wrote: »

Wait until the 30th October and you will find out

It could be coming from the home page or from some toolbar running in IE.
What happens if you open IE in safe mode?

I don't even know how to do that

grumpycrab

kpwll wrote: »

I run malware regularly.

Out of interest which one? Guess the standard applies here
1. run malwarebytes
2. run malwarebyte adwcleaner (although surely this is included in .1 ?)
3. reset IE
https://support.microsoft.com/en-gb/help/17441/windows-internet-explorer-change-reset-settings

EDIT: IE safe mode
Open a 'Command Prompt' window.
** may need to run as administrator **
Type cd/ to get a blank C: prompt.
Type in "C:\Program Files\Internet Explorer\iexplore.exe" -extoff (where C: is your local drive)
Press ENTER.

arciere

kpwll wrote: »

I don't even know how to do that

I never use IE, but I guess you can try to open an in-private window (menu - Safety - In-Private browsing).
If I remember that should disable toolbars and addons.

If private browsing doesn't show the pop-up message, then it could be some toolbar or addon, that an anti-malware scan doesn't necessarily find.

arciere

grumpycrab wrote: »

Out of interest which one? Guess the standard applies here
1. run malwarebytes
2. run malwarebyte adwcleaner (although surely this is included in .?)
3. reset IE
https://support.microsoft.com/en-gb/help/17441/windows-internet-explorer-change-reset-settings

EDIT: IE safe mode
Open a 'Command Prompt' window.
** may need to run as administrator **
Type cd/ to get a blank C: prompt.
Type in "C:\Program Files\Internet Explorer\iexplore.exe" -extoff (where C: is your local drive)
Press ENTER.

Easier to open the Run window (Windows key + R) and run "iexplore.exe -extoff"

kpwll

Thanks for all the suggestions.

grumpycrab

kpwll wrote: »

Thanks for all the suggestions.

Have you followed any of them? What regular malware tool have you been using?

AndyPix

Just run malwearebytes and ADW cleaner and this will rid you of your problem.

kpwll wrote: »

I run anti-virus software and malware regularly,.

Remove your current AV / Malware solution as it is useless and you are just wasting computing power with it.

AndyPix

kpwll wrote: »

Right I've just run a search (should have thought of it before) and come up with the following:


C:\Users\Karen\AppData\LocalLow\Microsoft\InternetExplorer\DOMStore\IVTPKV0K
Date modified and created 10/11/2014 17.21 672 bytes


If I right click there is an option to delete, am I safe to do that ? Is it safe to leave (hoping it will disappear after October 30th)?

This is on a different page:
<?xml version="1.0"?>
@namespace html url(http://www.w3.org/1999/xhtml); :root { font:small Verdana; font-weight: bold; padding: 2em; padding-left:4em; } * { display: block; padding-left: 2em; } html|style { display: none; } html|span, html|a { display: inline; padding: 0; font-weight: normal; text-decoration: none; } html|span.block { display: block; } *[html|hidden], span.block[html|hidden] { display: none; } .expand { display: block; } .expand:before { content: '+'; color: red; position: absolute; left: -1em; } .collapse { display: block; } .collapse:before { content: '-'; color: red; position: absolute; left:-1em; } [URL="file:///C:/Users/Karen/AppData/LocalLow/Microsoft/Internet%20Explorer/DOMStore/IVTPKV0K/www.business-review-webinars[1].xml#"]<root>[/URL]<item htime="30407946" ltime="3345625984" value="{"pro":false,"config":{},"perConfig":{}}" name="__at.conf.ra-50487e276dfb597d"/><item htime="30407946" ltime="3389805984" value="{"m":600,"k":2,"l":{"0":376,"1":104},"b":{"0":0,"1":0,"2":0,"3":256,"4":0,"5":0,"6":0,"7":0,"8":0,"9":0,"10":0,"11":16777216,"12":0,"13":0,"14":0,"15":0,"16":0,"17":0,"18":0}}" name="_at.hist.1110"/></root>

Thanks for all the suggestions.

You were given the answer in post #4 - why are you messing around with this and confusing yourself ?

AndyPix

grumpycrab wrote: »

2. run malwarebyte adwcleaner (although surely this is included in .1 ?)
.

No - different tools for different jobs