Why do it show such boxes showing that my computer is infected with viruses?

Question

Why do it show such boxes showing that my computer is infected with viruses?

BenTam 1,781

Dear all,

I upgraded from Win10 to Win11. Then, it shows a set of boxes showing that my computer is infected with viruses. I have asked this question previously, but now the boxes show again. Could anybody show me how to suppress them.

Capture

2 answers

Your answer

Answer 1

S.Sengupta 24,636 MVP

These notifications are likely part of a scam or malware attempt to trick you into renewing a McAfee subscription or downloading harmful software.

I would not recommend clicking on any of the buttons or links in these notifications.

Windows 11 has Windows Defender as anti-virus by default. So, there is no need to keep Macafee along with Windows Defender. Keeping two anti-virus apps may create conflict.

After uninstallation of Macafee , scan your system with Windows Defender.

Answer 2

Michael Taylor 60,326

I bet you get these when you start up your browser don't you? Notice the title at the top. It is the URL of a site that is triggering the request and is most likely being triggered by malicious software on the site itself or via something that was dropped onto your machine when you went to a particular site. This is generally pretty easy to pick off because the popup appears only when you go to a certain site (such as a social media site).

If it pops up as soon as you start Windows then type Startup in the Windows search bar (not the browser search bar) to get to the startup apps. Then scan the list and ensure only installed applications are supposed to run at startup.

You should do a full scan for malware. I assume that you have only Windows Defender installed as it comes with Windows. Search for Virus using Windows search, again not the browser search. This will take you the Virus & threat protection app where you can do a full scan (use Scan options).

Also ensure you have no other malware products installed. If you bought this computer from an OEM then it likely ships with Norton, McAfee or other malware software. You should remove them unless you want to use them in lieu of Windows Defender.

BenTam 1,781 Reputation points

2024-12-01T05:03:47.92+00:00

Hi @Michael taylor and @S.Sengupta

No! I have never installed MacAfee and Windows Defender is up-to-date and active. Any other ideas?
Michael Taylor 60,326 Reputation points

2024-12-01T19:56:14.85+00:00

I listed several questions. Please answer the questions I asked otherwise I cannot provide any more assistance.
BenTam 1,781 Reputation points

2024-12-03T12:39:26.9966667+00:00
Hi @Michael taylor

When I open the site obotverifier.com, it shows "page not found."

Below is the contents of the Startup folder.

After a full scan, the result is as follows. Then I click on the [Don't allow] button, the Windows shows the screen capture below the former screen capture.

-

I'm sure that this is not an OEM machine.
Michael Taylor 60,326 Reputation points

2024-12-03T15:24:54.14+00:00
That means you have a potentially unwanted app (PUA) that Defender cannot identify because it is not signed by a valid signature. Go through your Apps & Features in Windows and remove any apps you aren't using. Specifically this looks like it is from Solvusoft and a google indicates it has some apps that are PUA.

Your Startup screenshot doesn't show all the running apps. Scan that list again.

Please clarify when the popup occurs:

At login of Windows before you start any applications

When you start your browser (if so then what if you use a different browser)

Some other time
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
BenTam 1,781 Reputation points

2024-12-06T04:47:23.7866667+00:00

Hi @Michael Taylor,

The popups only appear when I start Chrome, not Edge.

However, after I start Edge for testing, the popups suddenly disappear. But after several minutes, the popups reappear. Could you tell me more about this issue?
Michael Taylor 60,326 Reputation points

2024-12-06T15:38:55.12+00:00

As I suspected it is likely a browser addin or malicious script that is running. You most likely went to a site that injected it. Start an Inprivate window instead of using the regular browser window and see if the issue still occurs. If it does then it is across profiles otherwise it is isolated to your profile and simply clearing your browser cache including cookies and whatnot might wipe it out.

Ensure your home page is configured to be the page you expect. Some sites used to change the home page to themselves and this allowed for malicious code to run at startup. If the problem only occurs when going to a specific site then the issue is on the site itself and would impact all browsers.

If you are seeing this issue with multiple browsers and navigating to different sites it could be something on the machine itself. Download Process Explorer and run it. Then start your browser and wait for the popup. Once it pops up then go to Process Explorer and use the Find Window's Process option (the bullseye on the toolbar) and put it over the popup window and let go. This will show you what process is causing that window. If it is the browser then this is either the site itself or a browser extension. If it is a separate process then that tells you who the problem is.
BenTam 1,781 Reputation points

2024-12-07T05:51:01.7366667+00:00

Hi @Michael Taylor

Any follow-up?
Michael Taylor 60,326 Reputation points

2024-12-07T17:18:24.99+00:00

I already responded.
BenTam 1,781 Reputation points

2024-12-09T15:37:09.8166667+00:00
Hi @Michael taylor

Sorry for neglecting your response.

I follow your response to delete the cache of the Chrome. However, the popups still occur.

I don't have a homepage.

I don't know how to put the ProcessExplorer. It always drops to the back of the popups. I enter the title of the popups into the filter box as the following screen capture.
Michael Taylor 60,326 Reputation points

2024-12-09T16:17:32.5466667+00:00

Don't filter by the popup name. That doesn't work. Use the little bullseye icon on the toolbar just next to the start of the graphs. Drag that bullseye icon over the top of the popup window and let go. It'll jump to the process in the process list.
BenTam 1,781 Reputation points

2024-12-10T05:20:30.4366667+00:00

Hi @Michael taylor

I followed your instructions and dragged the bullseye button to the popups. The result is as follows. It shows Chrome is the process. How do you think I could solve my problem?
Michael Taylor 60,326 Reputation points

2024-12-10T14:53:50.6866667+00:00

As we suspected this is a browser popup. That means it is most likely a malicious attempt to get you to download software. Don't click on it. Web apps have no visibility into your AV settings and couldn't know what the popup is alleging to know.

Now you need to get rid of it. Start Chrome in InPrivate mode and see if the popup appears. You might also click the Profile icon and create a new profile in Chrome. Either of these should ignore any current browser settings you have and ideally prevent the popup. If they do then your profile has some stuff in it so I'd recommend you clear your browser profile. Go to Settings and then Privacy and Security and finally Delete browsing data. This is the nuclear option but generally fixes most issues. Wipe everything. You might also consider wiping the third-party cookies that might be local.

You probably want to check your popup settings in Chrome. Go to Settings and Privacy & Security and then Site Settings. Under Content is Pop-ups and Redirects. Don't allow popups. If there are a couple of sites that need popups to work then you can customize the settings for just the sites that need it.

While you're here you should probably checking your home page settings to ensure your browser is going to the home page you want and not a site that you don't recognize.

Yet another way to get things to show up in Chrome is via Extensions. Go to the Extensions settings and look at all the extensions you have installed. Remove any you don't need.
BenTam 1,781 Reputation points

2024-12-19T10:04:06.11+00:00

Hi @Michael Taylor I have just taken a trip to Thailand and returning to HK today. I'd like to tell you that my problem has been solved by running a security check of Google. Thanks a lot for your help!
Michael Taylor 60,326 Reputation points

2024-12-19T15:44:54.7533333+00:00

Glad you were able to resolve it.

Share via

Why do it show such boxes showing that my computer is infected with viruses?

2 answers

Your answer