Skip to main content
Solved

is this a virus, how do i remove?

  • July 11, 2015
  • 4 replies
  • 42 views

when my place my mouse over a highlighted link, an (unrelated) coupon appears.
I often get redireted when i click on a link as well.
I also i got a message today, saying someone triedto hack into my fire wall,and told me to call 1 855 584 1733 asap to resolve a seurity issue, and to not pay by credit card.  it woud not let me close the window- i suspect its a virus, it did not have webroot information on it. i did not call.

Best answer by cdavid1848

I had this happen to me. press ctrl shift esc at the same time. this opens the task manager click on open process and and at the bottom of the task manager a button will open press end task that should close it.if more than one thing is open there will be a description of what is open and you be able to tell which is the problem. I have windows 7 on one computer and 8 on the other if you can't tell what to close, close the open browser (internet explorer / chrome /opera. when you reopen do not press restore session or you will be back where you started.  

4 replies

Baldrick
Gold VIP
  • Gold VIP
  • July 11, 2015
Hi trout4brkfst
 
Welcome to the Community Forums.
 
Well, first off...a big well done for not falling for the scam call re. support....you most likely correctly deduced that there is no way that someone external to your machine that can tell whether you ahve an infection or not.
 
In terms of the (i) "when my place my mouse over a highlighted link, an (unrelated) coupon appears" & (ii) "I often get redireted when i click on a link as well", I suspect that it is nlot virus-related but rather due to a non-malware program we commonly refer to as a PUA or Potentially Unwanted Application.
 
It would be helpful if you could advise as to from whom these popups/ads are coming from...oftern the perpetrator is detailed in the popup or the like.
 
Anyway, these PUAs are very annoying at best in that they cause pop-ups, redirect your browser home page, and other behaviour that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information.
 
Interestingly, enough they are often installed intentionally by the user as browser add-ons for various tasks such as quick search tools. But they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
 
The key to avoiding them is to make sure that when downloading apps one does so from the author's own website or one that they have recommended, and not 3rd party downloading site.
 
No whilst WSA does detect and remove many PUA's, and more are being added, it does not detect all of them. A simple browser add-on with PUA behaviour that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see this link for more information regarding Webroot's stance on these annoying programs.
 
If you feel or consider yourself technically proficient then you can try these steps to remove it from your system.
 
However, if that does not work or you do not feel technically capable then the best thing to do is to Open a Support Ticket & ask Webroot Support to take a look and remove these for you.  There is NO CHARGE for this for valid WSA license holders.
 
If you can provide some more information about the popups then we may be able to confirm the above but if you have any hesitation about invetsigting yourself then my advice is open the support ticket ASAP.
 
Hope that helps?
 
Regards, Baldrick

  • Answer
  • July 11, 2015
I had this happen to me. press ctrl shift esc at the same time. this opens the task manager click on open process and and at the bottom of the task manager a button will open press end task that should close it.if more than one thing is open there will be a description of what is open and you be able to tell which is the problem. I have windows 7 on one computer and 8 on the other if you can't tell what to close, close the open browser (internet explorer / chrome /opera. when you reopen do not press restore session or you will be back where you started.  

  • July 21, 2015
Had this one, too- when they post the phone number and say it's "tool free" (as opposed to toll free), it makes me laugh. 🙂 The company name was given as 'Systeye Support'. Hope this is helpful.

RetiredTripleHelix
Gold VIP
Forum|alt.badge.img+56
It happens so much as I get phone calls from scammers all the time and I use I emergency Boat Horn and blow it in the receiver. :@
 
Daniel