Jump to content
BlackEdition

I keep getting notifications about [not-a-virus:HEUR:AdWare.Script.Agent.gen]

Recommended Posts

Hi,

I've been getting continuous notifications from KIS19 in the last couple of days when visiting some websites (one of them being my own private website for my online invoicing that i've been using for years and nothing has changed in my website since).

This is starting to affect my work as it blocks some features on my own website such as the search box, and I can't create a new invoices or search for my customers until I refresh the page a couple of times. I even re-installed KIS19 thinking it could solve the problem, but it didn't.

This started happening right after the last Windows 10 v1809 update that I installed about 3 days ago.

Any help please? How do I stop this? And is it something dangerous or what's going on here? I attached a screenshot below but I blurred the IP part as it could be my own.

2019-02-20_11-16-42.png

Edited by BlackEdition

Share this post


Link to post
1 hour ago, The Shield said:

Welcome BlackEdition.

It's not dangerous because Kaspersky blocks it.

Please try to clean the Temp Directory (https://support.kaspersky.com/1161) and clear all your browsing data (https://support.google.com/chrome/answer/2392709?co=GENIE.Platform%3DDesktop).

Restart your PC, any better?

Problem solved, thanks!

I didn't want to clear my browsing data and lose my all history and logins, so I only cleared my Windows temp folder and restarted my PC.

So far seems to work ok and no new notifications. Will update if it happens again.

Share this post


Link to post

did not work for me 

20.02.2019 18.59.52;Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data;https://onlinekey.biz/1f9f5ee62aefca3cb1.js;https://onlinekey.biz/1f9f5ee62aefca3cb1.js;URL;Google Chrome;02/20/2019 18:59:52
 

Capture.JPG

Share this post


Link to post

 Kaspersky Settings > Additional > Threats and exclusions > Detection types > enable Detect Other Software.
and do a databases update > reboot, then do a scan.  

Clear the contents of your Temp folder, instructions: http://support.kaspersky.com/1161 and then reboot.

After that, uninstall any recently installed junk > reboot. 

After that, uninstall any and all junk toolbars > reboot.

Uninstall/disable any and all junk browser add-ons and extensions and plugins in all of your browsers. 

Remove the junk argument from the target field of the browser shortcut properties. 

Remove any and all junk search providers in all of your browsers.

Then if need be, change your home page, in all of your browsers. 

How to clean up your browsers: http://support.kaspersky.com/us/viruses/solutions/10319

If you are using a router, reset the router, change the router password to a strong password, enter the correct information according to your internet providers instructions, then clear browser cache and cookies, reboot. 

Any better after that? 

If still no go, Please post your GetSystemInfo report link, instructions are located in the third (3rd) pinned topic. 

Please see the small print that is located at the bottom of this message. 

Share this post


Link to post

It's back again :(

 

The first thing I did was clearing my Temp folder and restart my PC after that. Things seemed to look good for me.

 

A day later, it started happening again, so I took the following steps:

- I followed everything mentioned in this article: https://support.kaspersky.com/us/10319

- I cleared my Temp folder again.

- I disabled all unneeded programs that start up with my PC.

- I double checked my extensions for Edge, Chrome and Firefox to see whether there was any suspicious thing going on without my knowledge, but everything looks ok because I only have like 3 add-ons such as Ad-Block Plus and Kaspersky's own plugin that I had for years. I also checked my search engines but there was only Google.

- I opened up Internet Explorer (even though I never used it after upgrading to Windows 10) and I disabled all the extensions there and remove everything that has the "Remove" option.

- I looked for installed applications that were mentioned in Kaspersky's article (Qvo6.com, Delta Toolbar, Conduit, Do-searches) but I didn't find any of those.

- I updated my Java and Adobe Flash Player to latest updates.

After all of that, I did a full scan and it found adware with the name "lobby.dat" in my roaming folder. I removed that then I let it continue scanning and restarted my PC after it was done.

Things seemed to work great after that and I thought I completely got rid of the root problem. Before heading to bed for the night, I let it scan again just to make sure. I woke up thinking everything is fixed and I can move on with my life. I open some of my work websites, and boom there it goes again with the same notification as my OP.

 

The only thing that I haven't done so far is clearing my browsing data.

I don't want to risk losing some important stuff such as logins, so I need some help from you guys about which option that's related to my issue and needs to be cleared? I posted 2 screenshot of the clearing settings for Edge & Chrome. I think the only options that needs to be cleared are:

Edge: Cached data and files.

Chrome: Content settings & Hosted app data.

 

I'll wait for your guidance before I attempt to clear anything.

2019-02-22_12-00-06.png

2019-02-22_12-04-23.png

Edited by BlackEdition

Share this post


Link to post

Im doing my GSI report right now, but looks like it's going to take a couple of hours to finish scanning or whatever it's doing.

Share this post


Link to post

The Shield richbuff  Thankfully my problem has been fully solved. It's been almost 3 days and I haven't seen that notification since :)

What I did now was clear all my browser data for Chrome & Edge (everything, even my logins) and cleared my temp folder, restarted my PC, scanned my PC.

Thank you everyone that tried to help me. Hopefully I don't get that problem ever again. I just wish if I there was a way to know which website I visited that planted this adware in my computer...

Share this post


Link to post
Posted (edited)
On 2/26/2019 at 9:04 PM, brianzion said:

my issue has stopped I am sure it was a chrome issue causing it as I reset my browser

I think it was something related to cookies or some kind of file that got downloaded automatically by your browser when you visited a website. Maybe we've been visiting the same website? :D

That's why it went away after we cleared our browser data. It's not just related to Chrome because it also happened to me with Edge.

UPDATE: According to the image that you uploaded before, your issue is different than mine. But I guess they were all related to files being downloaded by your browser without your knowledge. Anyway glad we've found a solution!

Edited by BlackEdition

Share this post


Link to post
On 2/26/2019 at 7:51 AM, BlackEdition said:

Thankfully my problem has been fully solved

You're welcome! :)

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.