1 2 Previous Next 12 Replies Latest reply on Mar 15, 2013 12:15 PM by sol

    Popup malware- Mcafee can't find it in any scan

      Hello,

       

      I have popups that infect EVERY site I go to by "InstantSavings", even secure websites get flooded with these popups.

      I tried a popup blocker, but it only stops the images, you can tell by the page load up time and the logo that is still there.

       

      I have no idea what this is or how to get rid of it?

        • 1. Re: Popup malware- Mcafee can't find it in any scan
          Peter M

          Scan your computer with Stinger and Malwarebytes Free, both listed in the last link in my signature below.

           

          Make sure your system is totally up to date and that you use browser protection such as SiteAdvisor and/or WoT (Web Of Trust).

           

          Moved this to a better section for this kind of thing by the way.

          1 of 1 people found this helpful
          • 2. Re: Popup malware- Mcafee can't find it in any scan

            Ok, I tried both. Stinger detected nothing, Malwarebytes detected some stuff but not the problem I originally wrote about. I also updated and

            turned siteadvisor back on. Are there any other options?

            • 3. Re: Popup malware- Mcafee can't find it in any scan
              Peter M

              Look further down that last link in my signature and follow the suggestions on Hijackthis.  Those specialist forums will locate anything untoward on your machine, it's free.

              • 4. Re: Popup malware- Mcafee can't find it in any scan
                Hayton

                One of the Google Groups started getting complaints about this on February 5th. No-one's come up with any information on the cause of it or posted any way to stop it. Trouble is, "Instant Savings" is one of those phrases that crops up all over the place so Googling the phrase isn't much help.

                 

                @gwerty12, you could try adding something like AdBlock to your browser; possibly Abine's DoNotTrackMe would help.

                • 5. Re: Popup malware- Mcafee can't find it in any scan
                  Hayton

                  Some follow-up thoughts :

                  • Something may have intruded an Add-On, Extension or Plug-In into your browser(s). Check for anything there that you don't recognise.
                  • And here, perhaps, is where McAfee's much-derided Security Scan Plus might actually be useful. It does a lightning scan of memory, browser history and cookies looking for (presumably) a subset of malware. If there's something running when a browser is open that falls within the set of malware that it's looking for, that might be detected. And at least it's quick.
                  • And you should probably run CCleaner or a similar program to clear out all temp files, browser history, cookies and so on.
                  • 6. Re: Popup malware- Mcafee can't find it in any scan

                    I've just had this. I got it after running PC SpeedUp from one of those "test your broadband speed" sites.

                     

                    I had a look in Control Panel under Add/Remove programs and uninstalled something called PC SpeedUp extension.

                     

                    I wouldn't be surprised if this is added to a few programs. What have you run recently on your PC? Have a look through newly installed programs within control panel and see if there's anything that is new that you didn't install.

                     

                    It would seem that it is simply a type of affiliate scheme to try to advertise things. I hope that there isn't amything more sinister installed. Doing a deep scan at the moment. Did a quick scan and that found nothing.

                    • 7. Re: Popup malware- Mcafee can't find it in any scan
                      Hayton

                      Yes, "PC SpeedUp" is a dud (check WOT for the bad reviews). But no-one else anywhere has associated it with a plague of "Instant Savings" pop-ups. Nor with "Instant Savings" of any kind. No, the cause probably lies elsewhere.

                       

                      I seem to recall a post about coupons, here or elsewhere, in which something like this was described.

                      • 8. Re: Popup malware- Mcafee can't find it in any scan

                        Must just be a coincidence then.

                         

                        I ran PC Speedup yesteday. Noticed today these pop-ups. Mainly the ones where a word in a forum post has a highlight and when you hover over it - a pop-up is displayed. Now these were also displayed on a forum where I am a moderator and that forum doesn't use that type of advertising.

                         

                        Also noticed some actual pop-ups that weren't associated with a word on a forum. These were produced by a company called DEALPLY.com Googled that and it advised to remove DEALPLY from installed programs. Unfortunately DEALPLY wasn't there but there was a program called PC SPEEDUP EXTENSION. However, I had already removed PC SPEEDUP via the unintall program on the start menu - so this was left behind. As soon as I removed this extension, the pop-ups and hover over words went.

                         

                        Now if you do a Bing search of instantsavings and malware then plenty of foreign hits come up. Looks like other software is adding something that uses instantsavings. As mentioned, in my case it seems likely that it was PC Speedup - could it have been amended to operate in a different way?

                         

                        EDIT

                         

                        Ad Block Plus didn't block the pop ups or the text from being displayed when a word was hovered over

                         

                        Message was edited by: quick_reply on 13/02/13 14:35:25 CST
                        • 9. Re: Popup malware- Mcafee can't find it in any scan

                           

                          Mainly the ones where a word in a forum post has a highlight and when you hover over it - a pop-up is displayed. Now these were also displayed on a forum where I am a moderator and that forum doesn't use that type of advertising.

                           

                          This sounds like exactly what I have, in private forums where words can't pop up, random words are highlighted.

                           

                          I also have Internet Explorer 64 and that is unaffected, only through Firefox do I have this problem, so those who say it is a browser problem are probably right.

                           

                          The address for this place is www. instantsaving   sapp.com   I'm leaving a gap between the g and s just in case, I don't want to link anything bad here. They have instructions for removing the app, but I never

                          installed it in the first place!, or perhaps it is a nasty scheme to lure people to buy the app?. I searched for the app on my computer and it is nowhere to be found.

                           

                          Do you think I should contact these people? They have a contact link on their page, but I wonder if doing so would invite more trouble. A legitimate company doesn't need to resort to things like this anyhow.

                          1 2 Previous Next