Popup issue Solved

Question

Hello everyone! I'm writing this message because I've had a little issue for a while now...

Having a computer with Windows 7, for the past few days, a little window has been popping up regularly in the middle of the screen. It states that it comes from Internet Explorer and displays:

Do you really want to leave this page?
Message from the web page:
false

...followed by two options: "Leave this page" and "Stay on this page".

Let me clarify that not only is Internet Explorer not active at these times, but I also NEVER use it (well, to be honest, I used it once... to download Firefox, that’s all).

After some research on the internet, I've concluded that it probably comes from a malicious program caught on some random site. I ran a full system scan with my Avast antivirus: no results. A scan with Malwarebytes Anti-Malware: it found a few small nuisances that weren't very harmful, but unfortunately, the problem persists even after their removal. Following some advice found online, I also reset Internet Explorer: again, no results.

I admit I'm a bit stumped now, and it really bothers me because I'm working a lot on my computer at the moment, and there’s nothing more annoying than being interrupted in the middle of work by this kind of thing, as you can imagine!

So, if there happens to be a kind soul passing by here ready to enlighten me on the method to adopt to fix this situation, I’d be grateful. Thanks in advance!

Oldi · Accepted Answer

Solution found! So, for those who might have the same problem, here’s how to fix it...

It seems that the issue comes from an advertisement on Skype that goes through Internet Explorer. To get rid of this pop-up window, you need to:

1) Delete the temporary files from Internet Explorer.
To do this, in the latest version of IE, open the settings (the little gear icon at the top right), then go to Internet Options.
In the window that appears, in the General tab, under Browsing history, click the Delete button. In the window that appears, check Temporary Internet files and website files if it’s not already checked, then Delete.

2) Disable Skype ads.
To do this, still in the Internet Options window, go to the Security tab this time. You will see a series of icons, including a red one shaped like a prohibition sign labeled Sensitive Sites. Click on it, then click the Sites button.
In the window that appears, you will see a text box preceded by the label Add this website to the zone. In this box, type the text:

https://apps.skype.com

...then click Add. If it worked, the text should be included in the Websites text box.

You can now exit Internet Explorer. To validate all of this, all you have to do is launch Skype or restart it if it was already open.

There you go, I hope this helped! And big thanks to Malekal_morte- for his help.
To thank you, here’s a photo of adorable red pandas.
http://diversitudes.fr/img/2012/05/26rrbijj.jpg

Have a great day everyone!

Malekal_morte- · Answer

Hello

Start with an Adwcleaner cleanup by following the instructions in the Adwcleaner tutorial https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start=
Provide the cleanup report in response.

Then

Follow the FRST tutorial https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(make sure to take the time to read it thoroughly to apply it correctly - everything is explained there).
Download and run the FRST scan, which will generate three FRST reports:

FRST.txt
Shortcut.txt
Additionnal.txt

Send these three reports to the website http://pjjoint.malekal.com as explained, and in return, provide the three pjjoint links that lead to these reports here in a new response so that we can review them.

--

Malekal_morte- · Answer

Here's the correction to be made with FRST. You can refer to this explanatory note with screenshots.

Open Notepad: Windows key + R,
In the "Run" field, type notepad and hit OK.
Copy/Paste the following into it:


 Winsock: Catalog9 01 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9 02 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9 03 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9 04 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9 15 C:\Windows\SysWOW64\LavasoftTcpService.dll [345360 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-09-12] (Lavasoft Limited) 
 Winsock: Catalog9-x64 15 C:\Windows\system32\LavasoftTcpService64.dll [425744 2015-09-12] (Lavasoft Limited) 
cmd: netsh winsock reset

Once the text is pasted into Notepad,
Go to the "File" menu and then "Save As",
On the left, navigate to the Desktop,
In the field at the bottom, file name enter: fixlist.txt
Click "Save", this will create fixlist.txt on the Desktop.

Restart FRST and click on the "Fix" button
A reboot may be necessary (not mandatory)
A text file will appear, copy/paste the content here in a new message.

Then:

Manually reset your browsers and/or manually reconfigure your WEB browsers (homepage, search engine, etc.) and also remove/disable unnecessary/parasite extensions.
To help you with this cleanup, click below on the name of the WEB browser you are using:

--
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

Malekal_morte- · Answer

We should see if you still have the warning, but it doesn’t seem to originate from an infection.
Could you provide a screenshot of the message to see if it comes back?

--
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

Popup issue

4 réponses

End of Fixlog 19:03:19

Alexandra ledermann pirouette

Texture issues in enshrouded

Pixma mx495 printer error code b204 and still under warranty

Canon mb5350 - cartridge replacement impossible

Have you ever been scammed by justlo?

Nexplay reviews

How to cancel adopte un maturé subscription

Non-functioning rj45 sockets

Sbc ru 252 universal remote code

Chicsoso reviews - is the site reliable?