Japanese **** pop-up ad

I have recently been attacked by Japanese pop-up ad. About two weeks ago, none of the popular spyware killers worked. Finally, a full scan with Norton Security (trial version) seemed to contained it. Then, about 10 days later, the spyware returned. Nothing seemed to be able to contain it, including Norton and Malwarebytes. I followed suggestions I found on the Internet, and included the URL in "C:\Windows\System32\drivers\etc\hosts" The pop-up still comes up, but with an open (blank) window. If I close the window, then it keeps coming up. Finally, I minimize the blank window, then it comes up only twice, with two button taking up space in my task bar. I checked the task manager, and there are two jobs labeled "Microsoft (R) html Application host". Disconnecting network, the application still runs. Does this give enough hint as to how this particular pop-up works, and how to kill it once and for all?

I called help line of my security program, and they liked to talk you into a three-year maintenance program for hundreds. No thanks.

Please help. Thank you!

 

Question Info


Last updated September 28, 2018 Views 1,552 Applies to:
Have you tried this?
 
 
And this?
 
 
 
 


 
 
===== ===== ===== ===== ===== ===== ===== ===== ===== =====
☞ Avoid a post. Backup your data. ☜

Bruce Hagen
MVP: 2004 ~ 2010
2014 ~ Present
Imperial Beach, CA

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Thanks Bruce. I tried SuperAntiSpyware earlier and AdwCleaner today. Neither worked.

Additional ideas from folks in the community would be appreciated. Keep in mind that the ad ware continues to operate, by running Microsoft (R) HTML Application host, even without network connection.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

http://malwaretips.com/blogs/remove-adware-popup-ads/

Try Malwarebytes Antimalware (free version, do not install the trial or Pro version) - http://www.malwarebytes.org/products/malwarebytes_free/

Try Junkware Removal Tool - http://www.bleepingcomputer.com/download/junkware-removal-tool/

Try Hitman Pro Trial Version: http://www.surfright.nl/en/hitmanpro This program may be run from a flash drive.

You can start here:  https://consumersecuritysupport.microsoft.com/  (which will lead to the paid support options of http://www.answerdesk.com if you are in the US)

In other regions not served by the link above, go here:   http://Support.microsoft.com/security and go to the “assisted support” or contact us menu.

This web site - http://www.bleepingcomputer.com -  contains details for many of the common infections, often immediately after they began to appear in the wild, and instructions are provided for how to remove the infections using their malware removal guides. They also have forums where you can seek help from people who specialize in malware removal.

This may also be helpful - How to get rid of malware:

http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/how-to-get-rid-of-malware/ba80504b-61f1-4d71-960f-b561798b7b42

-steve

^_^
Windows Insider MVP (Security), Moderator Microsoft Community

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I have tried all options suggested to me except to buy the premium version (no reason to pay when the trial version did not work). As of today, I am still not able to remove the spyware. As I noted earlier, I included the nuisance web site in C:\Windows\System32\drivers\etc\hosts and was able to prevent it from popping up every few second. But I have to live with the pop up twice and live with the icon in my task bar, taking up space.

So, help is still needed. Thank you all.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I suggest if I anti malware can't do it then you have to manually their's some guides on google that are helpful pretty much what you have to do if figure out where the exact file(s) are and delete them permanently 

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Hey Steven, 

             I also tried different malware removal junk removal virus removal but it wouldn't work. What you have to do if the pop-up is still there. Go to task manager in the processes tab you will definitely be able to see it. Now find the file location, it is usually inside your system 32 it tricks you into thinking that it is an important part of the file system 32 I think the name that you will see most common is mshta.exe. What you gotta do is delete it. If it tells you that you do not have access and that trusted installer has access go to this and watch the video on how to delete it. https://www.youtube.com/watch?v=el0gaP8K4qY after you delete it at start up it would still continue to find the mshta.exe a taskbar would tell you they cannot find it, that is because you already deleted it. Now go to taskbar once again then go to the startup tab. Obviously you will find whichever does not belong there again find the file then delete the entire folder of that file. If you do have anymore questions please feel free to email me at *** Email address is removed for privacy *** I'm not really a computer tech though but this happened to me so I would like to help you too.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.