How to get rid of pop-ups?
Every time I start the PC, an incomprehensible window pops up in the browser:Spoiler
How to get rid of it without reinstalling Win?
Go to the browser settings and see what the start page is, in most cases it is written there, or delete unknown tasks in autoload
Denis Kyokushin
Congratulations on the virus, though almost harmless, except that he prescribes such sites and then launches tabs with them (either porn or advertising of some kind of dregs). You can go through some kind of anti-virus scanner to remove the "tails", and then remove everything superfluous from autoload and browser settings.
barabear
It's not because of the browser. It's in the system.
kurskiy kurskiy
wrote:
Congratulations on the virus, thank
you. I know it's a virus. It's somewhere in the Win32 folder. I can't
find it
from startup and browser settings.
This crap climbs into the browser itself and launches it. Antivirus from Win after starting the system swears several times in a row and every time you start Chrome
, BDmitriy
Spider downloaded it. But this crap was before him. Until the porn got out, I was calm. I have children, they can turn on the PC and stumble upon this guano.
Denis Kyokushin
That's why I say, you need to download some kind of anti-virus scanner (once Cezurity was not bad, now I don't know) and go through it, the Windows anti-virus is a weak helper here.
As an alternative, download Kaspersky Rescue Disk or Dr.Web LiveDisk, burn it to a USB flash drive, boot from it, update the databases and run a scan, it will be even more reliable.
Denis Kyokushin About DIsm ++, he talks complete nonsense, cleaning the system with an anti-virus scan has nothing to do. This is the first time I hear about Malwarebytes, so I can only say that it is not included in the list of popular antivirus software. He also mentioned Dr.Web CureIt!, in principle, the utility is good, the difference from Dr.Web LiveDisk is that it does not need to be written to a USB flash drive and rebooted, it works under Windows, but this is a minus, sometimes not all infected files can delete. And so you can try to clean it, but it's still better than Kaspersky Rescue Disk or Dr.Web LiveDisk.
Regarding ESET NOD32 - yes, the antivirus is not bad, but you need to bother with the license, if you don’t plan to keep a third-party antivirus from Windows on an ongoing basis, then you don’t need to.
kurskiy
kurskiy wrote:
Skimmed through. About DIsm ++, he talks complete nonsense, cleaning the system with an anti-virus scan has nothing to do.
DIsm++ cleans temporary files. The author of the video claims that temporary files can also contain viruses
kurskiy wrote:
I hear about Malwarebytes for the first time I
found this antivirus in safe mode about 320
Denis Kyokushin
There may or may not be. This is nonsense. It is more reliable to go through an antivirus or a scanner, they also check temporary files. So I don't know why he even talked about "cleaners" in the video.
I found this antivirus in safe mode about 320 pieces
. The window is gone, but the antivirus from Win swears three times at startup)
But, since Windows antivirus still reacts to something (by the way, to what? You can look at what files and where they are located), I did not find everything and did not clean it out.
Denis Kyokushin
if it is in the system, look at autoload, if there is nothing there, run adwcleaner, in most cases it cleans ads
Denis Kyokushin
If immediately at system startup, then it is worth checking the registry along this path:
HKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion Run
And also it will not be superfluous to look into the task scheduler.
And the Autoruns utility was never recommended. It generally shows all startup items, as well as what, how and where it starts.
It's even better to take Procmon and throw it into autorun, set the event filter there as "Path - is - C:Program FilesChromeChrome.exe" - well, that is, specify the path to the Chrome executable. Thus, it will be possible to see which processes are accessing the executable directly.
Autoruns: https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
ProcMon: https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
kurskiy
kurskiy wrote:
But, since the Windows antivirus is still reacting to something (by the way, to what? You can look at what files and where they are located), I didn’t find everything and didn’t clean it up.
Reacted to Chrome when it was launched. Now
Evil in the flash does not respond
Thanks for the tip. Now the Run folder is missing:
Spoiler 
in the future, your hint may come in handy
Sanchez Ramirez
Both utilities downloaded. Thanks
Denis Kyokushin
Your path is a bit wrong, Microsoft missed
HKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion Run
:)