Ditch67

Please close the topic. Thank you and the people who helped.

I reinstalled Chrome, and then installed Ad Block on both that and Edge. CPU use went from 100% down to 2% with Edge and as low as 0.2% with Chrome. It blocks 8 ads on Words With Friends (Facebook). So far haven't had any pop-ups or hijack attempts. It may happen, but at the least I can play the bloody game! Wish I'd known about this a year ago. Prolly wouldn't have sold my old computer. Thanks, Jonny Q for the suggestion. PS It's INSANE that Facebook still allows malvertising, given its billions $$$. Too bad Senator McCain never passed a law cove

This article https://www.theregister.co.uk/2015/08/27/malvertising_feature/ contains a graphic of it from Malwarebytes.org.

"Poisoned Ads"... This what we're getting? http://www.archersecuritygroup.com/did-you-see-a-poisoned-ad-on-tmz-or-other-big-sites/

Okay. For fun I tried using Firefox. (It had run even slower when I tested it so I'd only been using Edge.) Got same fake McAfee attempt as on Edge, but Firefox itself stopped it. Was playing Words With Friends on Facebook.

Got the Fake McAfee Warning a few minutes after reset and reboot. Was on the Weather Channel site, so... not likely their fault.

1) I don't own any other devices at all, and we turned off and cleared Sync awhile back. Sync was in Off position. I ran the tenforum's regedit to be sure to shut off Reading Lists and Favorites. I did not use their Option 2: "To Turn On or Off Sync Content in Microsoft Edge using a REG file" portion. Not familiar with that, and the other two things I mentioned should've covered that. 2) No extensions are listed. It only offers suggestions on what to add. I've never added any to Edge. (I don't much trust extensions to begin with.) The one thing that nev

Playing Words With Friends still goes up to 100% CPU and then either quickly crashes and reloads, or is taken over by virus. This one just now on Edge. (Am I the only one with this malware? I'd hoped MWB heuristics would've reported the pattern, or enough people would get it that it'd be a priority fix.) WWF.txt Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 6/26/18 Protection Event Time: 4:49 PM Log File: 62273998-7982-11e8-91cb-509a4cc94828.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Comp

Command was accepted. Rebooted. Side note, I haven't seen/reported as many errors over the last week as Words With Friends was broken for web-users (it still is, but the progs gave me a work-around link yesterday).

Also, this is todays hijack attempt log: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 6/23/18 Protection Event Time: 2:52 PM Log File: 8a32107a-7716-11e8-aa07-509a4cc94828.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.374 Update Package Version: 1.0.5599 License: Premium -System Information- OS: Windows 10 (Build 17134.112) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category:

Here's Unhackme. Just came up with 12 'unknown'.

'Unhack me' pointed to 2 other antimalware programs... not very helpful. Two other hits looked questionable. I chose to ignore its removal hints, so there's no log. Zemana found one thing which I allowed to have quarantined. (text attached) "Hosts file - 0.0.0.0 - ft.com" That site appears to be the legitimate Financial Times... Not sure why that would be there, but I've never seen it as a pop-up. And I doubt it leads me to fake Mcafee sites, etc. Odd. 2018.06.23-16.01.41-i0-t92-d1.txt

Shortcut text attached. Shortcut.txt

I reset the router. But got this today while at my local news page using Edge [Malwarebytes didn't prevent it] It showed up while I was in the middle of reading the article, changing to the page shown below. (http://upnorthlive.com/news/local/3-democrats-running-for-michigan-governor-have-1st-debate) Malware address: http://mcafeesecurity.application-center.me/4/?utm_source=dhara1&utm_pubid=d4908ba5-c683-48e4-9324-4a755d8a986c&x-context=wBFHLMDILJIDFDQE1JC7API0&xm=lm.vxilehikc0dxq.stream

Thank you. I will do that next.