Hey everyone! I'm dealing with a tricky situation. A client reached out saying they're getting persistent desktop notifications about having a ton of viruses. I've handled these annoying adware pop-ups before, usually just disabling the browser notifications, but this one has me stumped.
The user had a browser called OneStart.Ai, which I learned is some kind of junkware. The uninstaller was useless, so I used Revo to remove it completely. That seemed to solve the problem for a bit, but now the notifications are back.
I've checked the notification settings in Chrome, Edge, and Firefox—everything is disabled, and there are no other browsers on their PC. The pop-ups disappear quickly, so when I try to respond, they're already gone, and I've got no clues from Event Viewer or Windows Defender.
Has anyone else experienced this? Any tips or similar stories would be awesome, as I'm seriously starting to lose my mind over this!
3 Answers
It sounds like there might still be some junkware lurking on the system. I'd start by checking the programs listed in appwiz.cpl for anything suspicious. Sometimes these pesky PUPs hide in the %AppData% folder too, so you might need to do a deep dive there. If it's tough to isolate the source, consider wiping the profile and starting fresh. A full PC rebuild might be the best bet, especially if the client's business is at stake—better safe than sorry!
It might also help to ask your client when they first noticed these scammy pop-ups. If possible, consider restoring the system to a time before the notifications started. This could roll back any changes that are causing the issue without going through the entire hassle of reinstallation.
Don’t forget to check the browser extensions! Sometimes these annoying notifications come from malicious extensions that were installed without realizing it. Or if you're desperate, use tools like procexp to hunt down whatever process is spamming the notifications. If it's really bad, wiping the PC clean may be the easiest route. Who has time to deal with ghost issues like this?
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures