Solved

mp3juices.cc

  • 12 February 2019
  • 13 replies
  • 2877 views

Userlevel 1
Badge +3
I have suspicious notifications popping up from "www.mp3juices.cc" I think this began when I was hunting some sound clips for a film project and must have downloaded something sketchy unawares. OOPS. Now I'm getting notifications with scantily clad women and also notes that say "System infected! Click here to clean up!" in various versions.

Webroot has done its scan and finds nothing. However, it's obvious there is malware. What can I do? Do I need a different software to find this?
icon

Best answer by TripleHelix 13 February 2019, 05:23

View original

This topic has been closed for comments

13 replies

Userlevel 7
Badge +62
Hello amys,

Welcome to the Webroot Community,

What you are describing sounds like PUAs. Please have a look HERE and follow those instructions . If you still have issues then you can Submit a Support Ticket and they will help you free of charge with a active Webroot Subscription.

Hope this helps?

EDITED
Userlevel 7
Badge +62
Hi @amys

I am sorry I guess that was a bad link. Please follow this link here to the Knowledge Base information...Article.

Notice these add blockers will help with popups. And try to clean your history from your browsers.

Also add a good free Ad Blocker like the ones suggested below:
For Internet Explorer Ad Block Plus: https://adblockplus.org/
For Firefox uBlock Origin: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ssor Privacy Badger: https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/

Google Chrome uBlock Origin: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en or Privacy Badger: https://chrome.google.com/webstore/detail/privacy-badger/pkehgijcmpdhfbdbbnkijodmdjhbjlgp


uBlock Origin For Microsoft Edge Browser on Windows 10: https://www.microsoft.com/en-us/store/p/app/9nblggh444l4
Userlevel 1
Badge +3
Thanks so much for replying Ssherjj. I am not having luck finding anything at the link you posted. Check the link? I did open a support ticket and got a reply. Webroot support suggested harmless pop-ups, assuming I don't do anything the popups say to do!, or they could be adware. I could not get a good response from them on how to determine if they are installed adware or not...
Userlevel 7
Badge +62
@amys,

I failed to mention that we apologize that the Webroot Support Team treated you that way. This isn't the norm of Webroot's Support Team. They should of helped you figure it out or at least point you in the right direction. Very surprised over their comment. Webroot usually has excellent support.

We are sorry for all the frustrations. Please let us know if you still need help and we will provide with more information or at least we can ping the Administrator of this Forum.
Userlevel 1
Badge +3
Ssherjj,

Thanks for the help again! No need to apologize for anyone! I didn't mean to imply I was treated badly, just didn't seem to answer my question...maybe I was just thick-headed and didn't get it. Quite possible, ha! The first response was very helpful in general, I just didn't understand how to test for adware as mentioned. I'll post the webroot support response below in case someone else finds this thread with the same problem.

In my case, I *think* I may have stopped the problem...fingers crossed...at least haven't seen it in the last 24 hrs. The notifications that were popping up said www.mp3juices.cc on the bottom. I googled 'stop mp3juices.cc notifications' and actually found an instructional video from from the troublesome website itself (https://www.mp3juices.cc/videos/desktop/chrome.mp4) showing me that I could turn off notifications. I went to mp3juices.cc and clicked the little padlock icon immediately to the left of the web address bar and selected 'block' or something of that nature. I hope that's really stopping everything if it's something malicious and not just annoying. I find it odd that the website, if they give instructions for how to stop their notifications, is allowing popups advertising scammy virus alerts to go out. Like I said, I accidentally must have interacted with this site not realizing it's pretty sketchy in general (illegal free music or something) when I was hunting an audio clip. Lesson learned!
_________________________________________________________________________________________
For info's sake, here's the first reply I got from Webroot:

Thank you for contacting Webroot support.

Occasionally, a browser window may pop up with a "virus" message instructing to call a phone number for support or press a button to update your computer. These popups are usually caused by clicking on an advertisement, clicking on a third party link in Facebook, or clicking on a spam email. In rare circumstances the popup can be caused by unwanted software installed on your computer called "adware" (please see below to determine if adware is present). These messages are only an advertisement to a third party and do not harm your computer. Please do not call the phone number listed or press the button to update your computer!

Unfortunately Webroot does not block harmless pop ups. Webroot SecureAnywhere only blocks malicious pop-ups. It will block and remove any pop-ups that attempt to infect your computer or are caused by an infection.

However, many sites do have their own pop-ups which are not threats. Some pop-ups can be forms of advertisement, like commercials on the TV. Others can be more useful, providing additional information or features. If you do not want to see these, you can change the settings in your browser to block them.

To read more about this, please click the link below:
http://www.webroot.com/blog/2015/04/27/fake-security-scams-2015-edition/

If you are using Microsoft Edge, the Webroot Filtering Extension will not protect you from these kinds of popups. You must use a compatible browser such as Google Chrome, Firefox, or Internet Explorer and make sure the filtering extension is enabled within the settings of the browser.

If you ever encounter a popup page in the future, you can close it with the steps below:

1) Hold Ctrl+Alt+Esc on your keyboard and release.
2) Click the internet browser you use, such as "Google Chrome" or "Internet Explorer" or "Firefox" and click "End task".

Note: You may also restart your computer as well.
Userlevel 7
Badge +62
Aww wonderful news. I'm thrilled that Support gave you great information concerning these pop-ups.

The Support Team is really the best by far of any I have ever known. So thank you for explaining that to us.

If you need anymore help, just come on back here or/and you can at anytime contact the Support Team again if needed.

Have a great week.
Sherry 🤗
Userlevel 1
Badge +3
TripleHelix,

No idea how I got nudes and scam infection ads with their name on it, then! Ah well.


Ssherjj,

When I asked for more detail from support on how to determine if adware is present (since the first link they sent didn't seem to explain that as they indicated), this was the response that didn't seem to answer my question. I still have no idea how to check for adware, but I'll hope I don't need to 🙂 Just posting for info's sake.
_____________________________________________________________
Dear Webroot,

Thank you so much for the response! I understand more now, though I am still unclear on a couple of things:

1. I could not discern from the response how to check if the problem I am having is adware on the computer vs. just non-malicious popup. The linked article did not give me a clear sense of how to tell the difference.

2. If I see these problematic notifications when I start up the computer and a browser window is not open, does that suggest it's something installed vs. browser-based popup? (I have a general memory of this being the case, though I'm not absolutely sure, and am going to wait and see next time it happens.)


Thanks again,
Amy
__________________________________________________________________

Hello,

Thank you for your update and question.

This has been in the news and article as well.

Here is the link below:

https://www.bleepingcomputer.com/news/security/new-extortion-email-threatens-to-send-a-hitman-unless-you-pay-4k/
Userlevel 7
Badge +62
Hi Amy

Well that's understandable that you wouldn't understand how these pop-ups got on your computer. Or if it's malicious Adware. It's scary when you have bad pop-ups hitting you from out of nowhere.

Otherwise most PUAs get in your Browser when downloading a program. Webroot does & will stop any malicious activities in its tracks. Sometimes when clicking on a Web page or clicking from one site to the next it's easy to get pop-ups added to your browser. That's why it's important to clean your cache/browser history and to delete cookies. Some of us here use CCleaner. There is a free version available from Pirform. But if you use that make sure you create a restore point on your computer just encase.

The Webroot Webfilter does protect you from malicious sites though. Most of the time pop-ups sneak into your downloads. So make sure you uncheck any add-ons.

Sherry
Userlevel 7
Badge +63
Hi @amys

I am sorry I guess that was a bad link. Please follow this link here to the Knowledge Base information...Article.

Notice these add blockers will help with popups. And try to clean your history from your browsers.

Also add a good free Ad Blocker like the ones suggested below:
For Internet Explorer Ad Block Plus: https://adblockplus.org/For Firefox uBlock Origin: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ssor Privacy Badger: https://addons.mozilla.org/en-us/firefox/addon/privacy-badger-firefox/
Google Chrome uBlock Origin: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en or Privacy Badger: https://chrome.google.com/webstore/detail/privacy-badger/pkehgijcmpdhfbdbbnkijodmdjhbjlgp

uBlock Origin For Microsoft Edge Browser on Windows 10: https://www.microsoft.com/en-us/store/p/app/9nblggh444l4

@amys It's best to install a good ad blocker an I personally use uBlock Origin and I'm sure the pop-ups will disappear!
Userlevel 7
Badge +62
Thank you Daniel for your assistance..always much appreciated. 😊
Userlevel 7
Badge +63
@amys that site is very safe on BrightCloud! https://www.brightcloud.com/tools/url-ip-lookup.php

@amys that site is very safe on BrightCloud! https://www.brightcloud.com/tools/url-ip-lookup.php


My experience has been that BrightCloud can often correctly say that a website is safe because it does not carry and/or deliver malicious payloads, while at the same time it is undesirable for other reasons such as the OP is posting.
...