Kb-ribaki.org ads: what it is and how to stop the pop-ups

No, the address is a website and not a virus. In our test on 6 October 2026 it forwarded to a news page on simcast.com and installed nothing.

What people mean is the pop-ups our 2016 report linked to it: new tabs and windows that opened zodiac-game.info sponsor pages, which the report blamed on an ad-supported program installed with free software. A page cannot infect your PC just by being open, but a program you installed earlier can keep opening ads.

If pop-ups keep coming, uninstall what you added the day they began, remove unknown extensions, reset the browser and run a Microsoft Defender full scan and offline scan, as the steps on this page show.

We do not recommend it. On 6 October 2026 the address sent us to a news page with a consent box and advertising-style requests, and we saw no pop-up, notification request or sponsor page on that one visit.

One quiet visit proves little: adware pages often show their offer only to some countries, devices or visitors who arrive from an ad. In 2016 the address was tied to sponsor pages with casino, weight-loss and get-rich offers.

If you land on it, close the tab, do not click anything on a sponsor page, and do not type personal or card details.

Zodiac-game.info is the address the pop-ups opened in our 2016 report. Our picture shows three Chrome windows on zodiac-game.info/pager.html with the tab title Website sponsors, Russian-language ads, slot-machine pictures, red Play buttons and the footer line 2016 No rights reserved.

The report said the page listed article shortcuts that promised a better sex life, weight loss, cures and quick money, and that clicking them could lead on to scam sites. We did not test zodiac-game.info in 2026, so we cannot say what it shows now.

Because something on your side is opening them. In 2016 the cause was described as an ad-supported program that arrived with free software, and the ads appeared at random times and could return after every click.

The address kb-ribaki.org cannot open windows on a PC by itself once you close it, so a recurring pop-up points to a program, a browser extension or a changed browser setting. Open Settings, Apps, Installed apps, sort by date and uninstall what you added when the pop-ups began, then check your extensions and reset the browser.

There is no program called Kb-ribaki.org to uninstall, so removal means finding what opens the ads. In Windows 11 open Settings, Apps, Installed apps, sort by install date and uninstall programs you added on the day the pop-ups began.

Then open your browser's extension list and remove anything you did not choose, clear cookies and cached files for all time, and reset the browser if the start page or search keeps changing. Finish with a Microsoft Defender full scan and the offline scan. The tabs on this page give the steps for Chrome, Edge, Firefox and Safari.

We saw no notification request on 6 October 2026, and no service worker was registered. The 2016 report described pop-ups and new tabs, not notifications, so notifications are not part of its known behaviour. If you ever clicked Allow on a page like this, the permission stays in your browser until you remove it.

In Chrome open chrome://settings/content/notifications, in Edge edge://settings/content/notifications, and remove or block any address you do not recognise. In Firefox use Settings, Privacy & Security, Permissions, Notifications, Settings. A quiet test on one visit does not rule out that a different visit or country is asked for permission.

Act on what you entered. If you typed a card number, tell your bank about the card now and ask about blocking or replacing it. If you typed a password, change it on every site where you use it, and turn on two-factor authentication where it is offered.

If you downloaded or installed something from the page, uninstall it from Settings, Apps, Installed apps, remove unknown browser extensions and run a Microsoft Defender full scan and the offline scan. Do not enter more details to cancel an offer: report it at ReportFraud.ftc.gov if you are in the United States.

The 2016 report said they came with a potentially unwanted program that spreads alongside free software such as games, download managers and search tools, and installs without the user noticing. It said many people skip through the installer and end up with extras they never chose.

The way to avoid this is to pick Custom or Advanced setup, read each screen, and refuse offers to change your home page or add apps you do not know. We could not identify the program behind the 2016 pop-ups, so we cannot name it.

On 6 October 2026 it ended on simcast.com, a news page titled HeadlineLogic News Portal with a consent box that mentions 1214 partners and requests to advertising and consent services. The registry shows the name registered on 11 April 2016 through NameCheap and last changed on 21 September 2026.

We saw no sponsor page, pop-up or notification request on that one visit, but we tested one browser from one country, and we do not know what the owner will point it at next.

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For Kb-ribaki.org, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.