Pop up messages that my laptop is infected

tzxlyd said:

I cannot reset because when I use the F12 option and select the OS Recovery option nothing happens --the laptop restarts but it is not reset. When I choose the F2 option the same thing -- the laptop restarts but nothing is changed.

Click to expand...

Are you talking about computer reset, not just browser reset? Try resetting just Edge browser.

Not sure a computer reset would solve anything, anyway. If it's anything more than a browser hijack/infection, my gut feeling would be a system wipe and clean install.

Press the Windows and "R" keys simultaneously, type or paste "ms-settings:notifications" into the "Open" box and click "OK". When settings opens, turn notifications off.

Ben

Those are all fake popups, Never click on anything in those.

They usually reside in your Browser Temporary files.

Two basic actions need to be taken.

1. Delete temporary Web Browser files.
2. Review your Web Browser settings as regards Security and Cookies.

1. In Edge Browser > 3 dots settings > Privacy, search, and services > Clear browsing data > All time > at least tick the first 4 boxes > Clear now.

2. 3 dots settings > Privacy, search, and services > Security >
Turn on these items, at least, possibly others:
Smartscreen.
Scareware Blocker.
Block sites detected as scams.

No need for anything drastic like factory settings, or any bloatware added apps.

tzxlyd said:

I have tried to clear the browser cache multiple times but that has not helped.

Click to expand...

You have to do more than that, maybe more than I have listed, read the descriptions of each setting, and as mentioned review notification settings

It seems like the browser reset worked. I do not understand why the browser was infected because at the time this started happening, I was opening a .pdf file that was previously downloaded. The .pdf was sent to me by a colleague, and I was not online because I was away from my home router. I did not have a Wi-Fi signal, and I was not using the browser.

I was trying to reset to factory because I hoped I could get to a earlier version of using the laptop that I have only had for a few weeks so there is not much data or many files on the laptop. Also, for some reason my Windows 11 pro updates are not working properly -- the message says I am missing important security updates on my laptop.

The preview update gets to about 7% and then stops working. When I try to reinstall the current version of Windows to repair system files and components nothing happens. I bought a used Dell Latitude 5450 that was advertised to be running Windows 11 Pro, but I am not wondering if the laptop will support windows 11. When I look it up online the information says that it does, but I am not sure that is correct.

tzxlyd said:

It seems like the browser reset worked. I do not understand why the browser was infected because at the time this started happening, I was opening a .pdf file that was previously downloaded. The .pdf was sent to me by a colleague, and I was not online because I was away from my home router. I did not have a Wi-Fi signal, and I was not using the browser.

I was trying to reset to factory because I hoped I could get to a earlier version of using the laptop that I have only had for a few weeks so there is not much data or many files on the laptop. Also, for some reason my Windows 11 pro updates are not working properly -- the message says I am missing important security updates on my laptop.

The preview update gets to about 7% and then stops working. When I try to reinstall the current version of Windows to repair system files and components nothing happens. I bought a used Dell Latitude 5450 that was advertised to be running Windows 11 Pro, but I am not wondering if the laptop will support windows 11. When I look it up online the information says that it does, but I am not sure that is correct.

Click to expand...

A fresh install would be your last resort. Of course this is a matter of personal preference. You could always attempt a repair first. There are tutorials for this here. Sometimes running the DISM commands and scannow will fix your PC enough to get the missing updates. Other times you may have to resort to stand alone installers.

Should you decide to do a complete repair or fresh install I would advise finding a way to clone your operating system after you do so. That way, you greatly reduce the risk of backing up with a virus or malware. Keep your clone on a shelf in a cool, dry location or whatever and mark it for emergency. Doing this will at least provide you with an exact copy of your OS before anything went side ways even if you made backups, restore points, and kept a file history. This approach is also useful for when you want to try unorthodox attempts at making repairs and you're not sure how well it will go. If your attempt to repair only results in a catastrophic failure well, at least you have a cloned copy of your OS to swap out with. In most cases the original (faulty) drive can be placed in an enclosure and all personal files can be rescued from it using the utilities that come with Windows.

Based on the information you presented there is a chance that something may have piggy-backed on that pdf file unbeknownst to your colleague. Not saying that is what happened but it is a possibility. Good to see that the issue was solved. Alas, as is often the case, solving one issue frequently exposes others. I hope this helps. :)

tzxlyd said:

cannot reset because when I use the F12 option and select the OS Recovery option nothing happens --the laptop restarts but it is not reset. When I choose the F2 option the same thing -- the laptop restarts but nothing is changed.

Click to expand...

You are doing it wrong. On a Dell device F2 gets you into bios.. F12 gets you into boot options.

You can get into recovery options by holding down the shift key during boot. Keep it held down until the recovery screen appears.
You can also get into recovery using a windows installation disk. Boot from it and select "repair your computer." Recovery options in Windows - Microsoft Support

However, know this. Depending If you have malware affecting your user account, only a "reset and remove everything" (or a clean install) will completely clean the computer. Same goes for a system restore. A system restore affects ONLY windows files, not a user profile.

Restoring an image (if you have one) is also a good option.

If you have files on your system drive, Another option would be to first boot from a live Linux distro like Mint Cinnamon or Ubuntu and copy your files to external media. Then do a reset and remove everything. However, with some malware that affects a user account, there's always a possibility that those files would still not be clean.

I hope you have at least backed up your personal files or that you are using a Microsoft account and syncing your personal files to Onedrive. That be the case, a reset and remove everything would still retain your personal files while clean installing Windows. You have to reinstall all your apps.

tzxlyd said:

Here are better screen shots of the full pop ups that are in the lower right area of my screen.

Click to expand...

@tzxlyd I recommend downloading the free Spybot Search & Destroy from Safer Networking.

Programs like this can modify the Windows 11 (or Windows 10 or Windows 7, etc) .hosts file creating a loop back on known bad /infected/malware sites.

It's very effective in insulating the PC from bad websites causing those pop-ups.

I also recommend disabling 3rd party cookies in your web browser (be sure and clear the cache).

If it's Firefox, install ADBLOCK PLUS & Ublock Origin.

I also use Privacy Badger and Facebook fence.

For the record, I never have pop-ups.

Good luck

Uninstall Norton antivirus and clear browsers cache also temporary files.

Completely Uninstall Norton software using:

• 
  http://liveupdate.symantecliveupdate.com/upgrade/RnR/NRnR.exe
  

Instructions

1. Please download and save NRnR.exeto your desktop.
2. Close all programs and double click on the tool.
3. Follow the on-screen instructions.
4. Restart the computer if asked.
5. Then delete the NRnR.exe tool from your desktop.
6. Open the Program Files folder on your local disk ( normally C: )
7. Find and delete the following folders (if present):
   • Norton AntiVirus
   • Norton Internet Security
   • Norton SystemWorks
   • Norton Personal Firewall

tzxlyd said:

I do not understand why the browser was infected because at the time this started happening, I was opening a .pdf file that was previously downloaded. The .pdf was sent to me by a colleague, and I was not online because I was away from my home router.

Click to expand...

This is because PDF files are opening in the webview process, which is part of the Edge/MS ecosystem, i.e. it essentially opens in Edge.

tzxlyd said:

It seems like the browser reset worked. I do not understand why the browser was infected because at the time this started happening, I was opening a .pdf file that was previously downloaded.

Click to expand...

The Browser reset worked because it did all that I suggested. It is more educational/informative to go thru the Edge settings yourself.

Windows defaults to using Edge Browser as the PDF Reader which accounts for still getting the fake Pop-ups.

Don't worry about the Windows Preview updates, no need to do them, the real one comes along a couple of weeks later. The updates are currently in a bit of a mess.

So all the complex suggestions are not necessary at this stage.

Each of those popups is a web notification from the same site (d43pc0h029pc73b8f9vg.visolabala.co.in) as shown in the middle of every one, which was previously allowed by clicking OK on a request pop-up.

Go to Edge, Settings, Privacy Search, and Services, Site permissions, All permissions, Notifications, Customized behaviors and delete that site from "Allowed to send notifications" with ... Remove.

Allow or Block Push Notifications for Specific Sites in Microsoft Edge for Current User in Settings

BruceR said:

Go to Edge, Settings, Privacy Search, and Services, Site permissions, All permissions, Notifications, Customized behaviors and delete that site from "Allowed to send notifications" with ... Remove.

Click to expand...

I prefer to just turn off which blocks them all.

KevTech said:

I prefer to just turn off which blocks them all.

View attachment 151670

Click to expand...

I agree that blocking notification requests for all sites by default is the best option for most people to prevent future unwanted pop-up floods:

Turn On or Off Push Notifications for All Sites in Microsoft Edge for Current User

Try using Firefox with uBlock Origin and Lock Adblock. No more ads and bogus scareware, and, as a bonus, it's one less application reporting everything you do on your computer to Microsoft

DJNelson said:

Try using Firefox with uBlock Origin and Lock Adblock. No more ads and bogus scareware,

Click to expand...

Firefox is no different in this respect:

I am getting notifications with the Mozilla logo or sometimes with McAfee logo saying "5 Viruses found, your computer is unstable" and various other warnings.

Virus pop-ups coming through notifications​

Click to expand...

Started receiving pop ups stating virus attack from Mozilla and via cq5g6mojubcc7385jauo.deviceconnectnetwork from Mozilla showing McAffee, Critical Virus Alert, Virus attack.

receiving pop ups stating virus attack from mozilla​

Click to expand...

BruceR said:

Firefox is no different in this respect

Click to expand...

They didn't use adblocker and popup blocker. So, no, it's NOT true that Firefox would be no different if someone followed my advice.

The pop-ups all show a website in India with no connection to Norton or any anti malware program. OP has no need to uninstall Norton!

DJNelson said:

They didn't use adblocker and popup blocker. So, no, it's NOT true that Firefox would be no different if someone followed my advice.

Click to expand...

Which of those do you think would block a web notification which the user had allowed?

@idgat Which anti virus / anti malware program are you using? Or are you relying on Windows Security or Windows Defender (two names for the same thing really).

kelper said:

The pop-ups all show a website in India with no connection to Norton or any anti malware program.

Click to expand...

That is the reason it is called scareware, it does literally nothing, but it scares people into doing something bad and stupid!