AdWare not cleaned (lets get something funny)

[MarcoBytes]

This was a student laptop: Win 10 (64), Vostro family 6 model 58
I gave it a good clean, with Malwarebytes 3.8.3 and ADWcleaner.

However, a small ad box, at bottom right of the screen, remains.
Titled: Let's get something funny.

It runs pictures of pretty girls in bras and knickers.
When you close it, chrome is launched and two tabs open,

I searched [Let's get something funny], but got zero results (which surprised me).

I would have thought that this would be a prime target for ADWcleaner, but it seems to not see it.
Any ideas?

Thanks

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the AdwCleaner Help forum.

Someone will reply shortly, but in the meantime here are a few resources which may help resolve your issue:

• AdwCleaner user guide
• A malicious element isn't being detected? Submit the sample here!
• Need help with another Malwarebytes product or malware removal?
  • Click here for home support
  • Click here for business support
  • Click here for malware removal help

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[exile360]

Greetings,

It sounds like it might be a push notification threat.  Please try following the instructions in this topic to see if they help.

If the problem still persists then please read and follow the instructions in this topic and then create a new topic in our malware removal area by clicking here and one of our malware removal specialists will assist you in checking and clearing the system of any remaining threats.

I hope this helps, and if there is anything else we might assist you with please let us know.

Thanks

[MarcoBytes]

Thanks exile360,

I'll study those suggested docs, and report back

[exile360]

Sounds like a plan

I hope it helps, and I look forward to hearing back from you, hopefully with good news.

[MarcoBytes]

exile360 ... here's the good news  ✌️

 

[exile360]

Excellent, I'm glad you were finally able to get rid of that nasty adware.  It looks like some kind of DNS hijack combined with a push notification pop-up attack pushing tech support scams judging by the info in your malware removal topic.  Unfortunately such blended attacks are quite common these days, but I'm glad you were able to find the culprit and get it shut down.

I will also be sure to bring your malware removal thread to the attention of the Product team so that they can hopefully work with the Researchers and Developers on isolating everything involved in this blended threat that Malwarebytes missed so that the product can detect and remove all components of this threat in the future to spare others from having to deal with this threat manually.

Thanks for the update and please don't hesitate to let us know if there is anything else we might assist you with in the future