malware that opens new tabs?

[kryptoniitti]

i've been struggling with this problem for about two days now, and i can't seem to find the cause. at totally random times, chrome opens a tab or two and tries to take me to some address that starts with 'b.yu0123456'. for once it managed to load, and redirect to a site called 'additionalsearch.com'.

i've run scans with programs like malwarebytes, hitmanpro and adwcleaner but they don't detect anything. what can i do? i'm getting hopeless.

 

[010010]

i've been struggling with this problem for about two days now, and i can't seem to find the cause. at totally random times, chrome opens a tab or two and tries to take me to some address that starts with 'b.yu0123456'. for once it managed to load, and redirect to a site called 'additionalsearch.com'.

i've run scans with programs like malwarebytes, hitmanpro and adwcleaner but they don't detect anything. what can i do? i'm getting hopeless.

Look at what programs are installed on Control panel,if there is something similar to the "Additionasearch.com" or a program you are not aware you need, remove it. it probably came bundled with some other software you downloaded.

 

[why_wolf]

in Chrome go to settings > extensions. See if there is anything installed that shouldn't be.

 

[010010]

in Chrome go to settings > extensions. See if there is anything installed that shouldn't be.

While this may remove it from chrome, they're normally crafty buggers. So to actually remove the dubios "additionalsearch.com" i highly recommend you remove as much of it's data as you can through control panel/other software.

 

[kryptoniitti]

i rechecked both of those places and found nothing suspicious...

 

[010010]

i rechecked both of those places and found nothing suspicious...

Look in task manager for aything out of the ordinary while running Chrome.

 

[kryptoniitti]

i rechecked both of those places and found nothing suspicious...

Look in task manager for aything out of the ordinary while running Chrome.

nothing weird, except youcam mirage which i recall disabling from startup... when i check the properties, it says it was created back in 2012 and it is located in lenovo's own folder in program files, however when i went to check this folder, inside it nothing was edited after 2012, but outside it claimed to be edited in 1.9.2016... does this only sound odd to me?

 

[010010]

i rechecked both of those places and found nothing suspicious...

Look in task manager for aything out of the ordinary while running Chrome.

nothing weird, except youcam mirage which i recall disabling from startup... when i check the properties, it says it was created back in 2012 and it is located in lenovo's own folder in program files, however when i went to check this folder, inside it nothing was edited after 2012, but outside it claimed to be edited in 1.9.2016... does this only sound odd to me?

You don't need youcam so you can remove it, but at the same time you won't gain much by removing it. Also this isn't anything to do with that other issue (AFAIK).

EDIT: i also found that lenovo are very sneaky with this Youcam Mirage program; it has its own scheduled task which runs it (You can disable this).

 

[kryptoniitti]

i rechecked both of those places and found nothing suspicious...

Look in task manager for aything out of the ordinary while running Chrome.

nothing weird, except youcam mirage which i recall disabling from startup... when i check the properties, it says it was created back in 2012 and it is located in lenovo's own folder in program files, however when i went to check this folder, inside it nothing was edited after 2012, but outside it claimed to be edited in 1.9.2016... does this only sound odd to me?

You don't need youcam so you can remove it, but at the same time you won't gain much by removing it. Also this isn't anything to do with that other issue (AFAIK).

alright then it's back to square one...

 

[kryptoniitti]

oh! now adwcleaner found a bunch of things associated with internet explorer, called "searchscopes". is this a thing?

 

[odebals]

I started having this problem as well, since this morning. I found this solution/explanation however [1].
And what seems in my situation: I started using the desktop Spotify program again this morning since a long time.
I closed it now, and do not come across any new tabs anymore since. No idea on how to still keep on using Spotify without coming across the problem again though ...

[1] https://community.spotify.com/t5/Ongoing-Issues/Weird-Pop-Under-Advertisements/idi-p/1455117

 

[RARRAF]

adblock plus is all you should need

 

[MightyMarethyu]

Okay, so I got the same issue...
So what I've done is just uninstall Spotify and so far haven't had a popup...

I'll update this if something changes or if I find solution

5 days in
Okay so I haven't had a single popup since I've deleted Spotify so I guess that's the answer...

 

[kryptoniitti]

okay so for me the situation has been like this now: i'd tried finding suspicious stuff with the programs i listed in the first post, not finding a thing. then in one "removal guide" i found suggested ccleaner and i tried it and the problem was gone for three days. but just an hour ago it started again. really hit me in the face.

i've used desktop spotify for years, i've got w8.1 as my os. could that really be causing the problem? sounds weird.

and i do have adblock plus but it doesn't seem to work on these fellas.

 

[RARRAF]

well I did have a simular problem about 3-4 months back I do not know what it was I tried malewarebytes and my own bitdefender and could not come up with a solution myself and was very anoying. The ownly answer I came up with was delete google chrome and re-install it all my stuff is setup to my account and its worked fine ever since its a pain but worth it.

 

[ac13044]

backup your important stuff and just do a fresh install

 

[kryptoniitti]

you mean you just completely re-installed google chrome? yeah, i've tried that too. no positive results. just an angry little me.

i actually experimented this spotify thing. i let my computer be on for about 2 hours without launching absolutely anything. no popups. then i opened spotify and whaddya know, i turned my back for a bit and got three popups. i cannot confirm this theory though, because i used spotify on all of those three days and got nothing.

 

[truejazz]

i've been struggling with this problem for about two days now, and i can't seem to find the cause. at totally random times, chrome opens a tab or two and tries to take me to some address that starts with 'b.yu0123456'. for once it managed to load, and redirect to a site called 'additionalsearch.com'.

i've run scans with programs like malwarebytes, hitmanpro and adwcleaner but they don't detect anything. what can i do? i'm getting hopeless.

Look at what programs are installed on Control panel,if there is something similar to the "Additionasearch.com" or a program you are not aware you need, remove it. it probably came bundled with some other software you downloaded.

 

[truejazz]

Look for a tab limiter extension. This is not the solve all but it will keep your computer from freezing due to to many windows open

 

[stan.e.johnson]

The problem is chrome.exe and the way this works if you are running chrome there is nothing you can do to permanently stop this. The easiest way to stop this is uninstall everything associated with chrome. Download and install Firefox or if you are on a Windows 10 machine edge browser is also not affected. Get the premium version of Malwarebytes which blocks the malicious URL and tab launch attack. In order for chrome to be a viable browser this defect must be corrected. Until this is fixed do not run chrome. It is not worth the risk. Many times in chrome this issue opens tabs with false websites that look real designed to trick you into stealing personal information or worse. You must tear down the entire house to be safe. You must uninstall chrome. Sorry about the bad news.

 

[kasiourasg]

I'm pretty sure that you're infected with an adware or a browser hijacker. It's weird that your Anti-Malware programs didn't detect anything. Do also give a try with MalwareFox, it might detect something.

Other than that, do try to reboot into safe mode without networking and perform a scan again from there.

If nothing ever works, then you might just need to manually find and remove everything that causes this or maybe even reinstall your OS.

 

[anesvlad]

Use Avast Or Kaspersky But Premium Version. That could work easily because it has real time protection

 

[truejazz]

Problem with uninstalling chrome is the loss of casting, Yes, uninstall chrome but install chrome canary, In addition install a tab limiter extension.

 

[richard.steidl]

Ive had the same problem. Also the adware closed chrome every time i tried to Google "adware opening tabs"
Avast did not find any thing as well.
In AppData (C:/Users/**username**/App Data) I have found folder from "Mail.ru". After its deletion it lets me Google again, and probably will stop opening the tabs as well (will have to wait for a while to be sure)

Try check the AppData folder and delete suspicious folders that were created on the day the problem started. (if you are unsure with any folder, you can Google it - for all "good" folders you should be able to find their purpose)

 

[cr.zero.reanimated.net]

Well I have the same problem, but I did not installed spotify. I just clicked on the desktop free spotify installation popup. So what should I do?
I can't find anything new installed.