Just two days ago I started seeing a "Click to continue" icon with various underlined words on some web-pages and Google search results. When I hover over it, I see that it's pointing to s.igmhb.com/click?vXXXXXXXXXXXXXXXXXXXXXX (with the Xs being a long string of letters and numbers).

I find nothing suspicious or recently added in Control Panel > Programs and Features.

I use Webroot SecureAnywhere and notice that it's removing 6 threats every time it scans, but clearly not this.

In searching for a fix I see many references to AdwCleaner, Bitdefender and Malwarebytes but am now overly fearful of installing something new.

How to I get rid of this garbage?

Thanks!

Grab Malwarebytes and activate the 14 day trial on premium.
This is my go to malware application..

Thanks you.

So stuff like this completely different than what Webroot can catch?

Different engines have different signature and detection algorithms.
No harm in using 2, or more, for real stubborn nasties, although only have one active scanner at a time.
Best to update and scan in safemode for fullest coverage.

I got a whole mess of adware the minute I installed Win10. Not one malware/adware program worked. I reinstalled WIN10. That took one step and all was fine.

Thank you all. I'll let you know how it turns out.

So far 70k items scanned in 10 minutes; no objects detected yet.

Also check your browser and make sure no new addons have appeared in it. Legitimate software tries to add it when doing upgrades.

Quote:

---

Also check your browser and make sure no new addons have appeared in it

---

Good point. That's something I forgot to confirm that I checked first. No new add-ons or extensions.

I had to leave the Malwarebytes scan running to take off. I'll have to report back to y'all tomorrow on the outcome.

Good luck !!!

Round 1, no luck.

Malwarebytes found 631 items but none were labeled as malware.

2 instances of ASK
17 of HomePageHelper, and the rest was MindSpark.

I removed it all, but still have the same ad links (see pic). I'll run another scan and see how it goes.

Attachment 48279

For the ad links, check recently installed program and addins.
These tend not to be picked up by scanners as they don't fall into the normal malicious categories.

Beware .locky files ransomware that encrypts data using AES encryption and then demands 0.5 bitcoins to decrypt files. Locky is currently being distributed via email that contains Word document attachments with malicious macros.