Skip to main content
In Google I keep getting pop up windows such as zcrkxh.com that freezes the downloads etc. Your virus scan does not appear to catch this and your firewall does not appear to stop them.

 

Regards,

 

Harley Kelsey
Hi HEK

 

Welcome to the Community Forums.

 

From what I can see from a bit of research on the Web I find that zcrkxh.com was registered on 07/11/2014. It's main IP address is 188.226.212.242. It is located byGeoIP in Russian Federation...and without wishing to be branded racist or a bigot, this gets my antenna twitching.  Now it might be a virus or it might be a non-malware program we commonly refer to as a PUA (Potentially Unwanted Application).

 

It could also be just a browser popup which can be resolved or at least mitigated by getting a suitable adware blocking addon/extention, such as uBlock, AdBlock Edge, ADBlock Plus but to name a few.  This can be done by going the the addons/extensions manager in Chrome or the browser you are mainly using and searching for any of the above, and once found following the instructions to install them in your browser.

 

If that does not help then it is most likely a PUA, which are very annoying at best in that they cause pop-us, redirect your browser home page, and other behaviour that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools. But they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.

 

WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behaviour that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.

 

The best thing to do is to submit a Support Ticket and ask Webroot Support to take a look and remove these for you.  There is NO CHARGE for this for valid WSA license holder.

 

Also, we have had a lot of discussion regarding these recently, and one of our gurus @  has recently  posted an Idea for Webroot to consider asking them to increase PUA detection.  The more users that need help removing a particular PUA the more likely and faster that PUA will be added to detection.

 

Hope that helps you in some way, and if not then do let us know and we can think on this again re. a Plan B.

 

Regards, Baldrick

Reply