1

Topic: The virus toopix - opens a site

Three antiviruses see nothing: standard MS, Avast and malwarebytes.
Though malwarebytes nearby potentially undesirable 20 cleaned.
How to understand, what process tries to open the link?
Periodically  this window:
[img=https://image.prntscr.com/image/qqxji1kjTYKuQt99Tf1i_g.png]
Any utility from set SysInternals helps?

2

Re: The virus toopix - opens a site

Found this creature in the scheduler
[img=https://image.prntscr.com/image/89jYMamuSE_XH4BG5PzDVg.png]

3

Re: The virus toopix - opens a site

Try "adware cleaner" to use, it not a virus, it is advertizing
There on all computer now this shit is stuffed, to burn the computer sometimes easier, than to struggle with guardsmen everyone mail.ru

4

Re: The virus toopix - opens a site

Not, not on all.
In other case there was other advertizing virus, but the full reading Firefox there helped.

5

Re: The virus toopix - opens a site

in a mode, launched through PowerShell, are found out only after start when a business floor it is already made, files are downloaded, , etc. Proshmygivajut is accurate if at  adjustments "on " i.e. at least there is no habit storage to scan often.
At most powershell in the unit, I think also start generally  to cut off.

6

Re: The virus toopix - opens a site

- wrote:

Shchas  in a mode, launched through PowerShell, are found out only after start when a business floor is already made, files are downloaded, , etc. Proshmygivajut is accurate if at  adjustments "on " i.e. at least there is no habit storage to scan often.

And ExecutionPolicy - RemoteSigned any more in a mode?

7

Re: The virus toopix - opens a site

alekcvp wrote:

it is passed...
And ExecutionPolicy - RemoteSigned any more in a mode?

I do not know, the left hogwash exposes it "is possible" and launches all the same. Yes powershell only one of thousand.