unknown malware / pop ups

bob_a_builder

For the 1st time in many a long year I have picked up some malware which I'm having trouble removing

Running Win 7 with Avast AV

Getting popup windows in lower right screen, which refer to 'onlinecontent.fun'

Have run MalwareBytes, AdwCleaner, Spybot and run Chrome Cleanup computer in Chrome Advanced settings but nothing has touched it yet

Searching for stuff related to 'onlinecontent.fun' not coming up with much

Any suggestions please ?

---

Examples of the popups ...

[Deleted User]

Is it an installed piece of software? Check add/remove programs and sort by date.

[Deleted User]

Actually, is it a pop up from Avast Free?

bob_a_builder

No, there is nothing showing in Control Panel : Programs which I'm not aware of and have not installed myself

Pretty sure I picked it up yesterday , was reading a thread on here in the motoring section, some parts of it were quite old and some linked documents where no longer available, deal urls , but one of them did come up with something, I don't recall what but wasn't related to the thread and I would have closed the page immediately

Actually, is it a pop up from Avast Free?

its not their normal style - they seem to prefer black windows and bigger fonts

[Deleted User]

bob_a_builder wrote: »

No, there is nothing showing in Control Panel : Programs which I'm not aware of and have not installed myself

Pretty sure I picked it up yesterday , was reading a thread on here in the motoring section, some parts of it were quite old and some linked documents where no longer available, deal urls , but one of them did come up with something, I don't recall what but wasn't related to the thread and I would have closed the page immediately


its not their normal style - they seem to prefer black windows and bigger fonts

Have you cleared all cookies and restarted your browser?

grumpycrab

bob_a_builder wrote: »

Pretty sure I picked it up yesterday

go back in time - at least 2 days - with rstrui.exe. (system restore)

bob_a_builder

Actually there WAS something installed yesterday - "Dell Support Assistant"

Although I had previously installed that software when I rebuilt this PC - 8 months ago, ( this is a Dell 7010 pc)

So I expected it to be there, not sure why its showing as installed yesterday

So have uninstalled that now !

Waiting for next/any popup .......

that

wonder if it is web browser, or web browser addon dependant?


another thing is to download process explorer and use the cross hair target function and drag it to the message box. while PROCEXP is running, turn on virus total too (Process>Check virus total)

bob_a_builder

Well its still here - Just got next popup

forgotmyname

Remove Avast..

What other non standard software do you have?

If none of them find it then its probably embedded within a legit program.

bob_a_builder

Process Explorer says its a Chrome window, but virus total is showing as 0 - I think

Screen shot
https://ibb.co/K0GyncL