Severity scale:  

Pop up virus. Latest types and a full removal guide for 2019

removal by Olivia Morelli - - | Type: Adware

Pop up virus is a term used to describe malware helping advertisers generate income from numerous ads

Pop up virus

Pop up virus is the term used to describe a pop-up window that displays advertisements on websites that users visit. Their primary purpose is to persuade users into visiting specific sites or purchasing particular goods. While it can be an excellent method for website authors to monetize on their website content, it is a nuisance for the end-users.

Questions about Pop-up ads

Pop-up virus might also be hiding on sites that usually do not prompt such behavior – and this is when adware is involved. Ad-supported programs are typically downloaded unintentionally while installing freeware/shareware or when users are lured by app's certain functionalities, for example, driver updating. Some of such apps, especially the latter type, might be difficult to associate with the intrusive pop up ads that are showing up on all the sites, so users often struggle to find the source and stop these activities. 

Name Pop up virus
Source Embedded into sites or can be initiated by adware
Infection means While installing bundled software or questionable apps from third-party sites
Risk factors
  • Pop ups might be bought by cybercriminals who can insert malicious links and infect thousands of users with malware
  • Unintended money loss
  • Disclosure of personal information
  • Money loss due to scam sites that promote bogus software
Symptoms If you see a pop up ad on a website that you visit, it does not mean you are infected with any type of computer threat, and it just means that the ad is embedded in the site. However, if you see intrusive ads an most of the websites you visit, along with redirects and browser changes, you should check your computer for adware
Termination To check your computer for adware, check our instructions below. Alternatively, you can use a security application that can remove pop up virus automatically
Recovery Some adware might damage system files and corrupt the Windows registry. Scan your device with antispyware program to get rid of the unwanted program. Additionally, think about Reimage Reimage Cleaner Intego which might fix virus damage

Pop-up ad advertising form was invented in the 1990s by Ethan Zuckerman[1], who later apologized for laying the ground for one of today's biggest Internet's nuisances.

Some pop up ads can seem to be exciting and useful; however, they can also be highly dangerous and infect the computer system with malware[2] as soon as the victim clicks on the ad. In the majority of cases, annoying popups bother computer users that unwillingly install adware programs. One of the most efficient ways to cease the emergence of such commercial offers is to scan the PC with Reimage Reimage Cleaner Intego or other pop up virus remover.

The alerts containing some promotional content are typically opened in individual browser windows that appear on top of the active browser window or under it (these are called pop-under ads). The described advertising form was eventually adapted and used across various platforms, including Windows, Mac OS, and Android[3]. Nowadays, these adverts can appear not only on computer screens but on smartphones as well, so make sure you remove pop up virus from every device you use.

Pop-up virusPop-up virus is malware that users encounter on a variety of websites and are usually caused by adware, tech support scam malware or even ransomware. If bothersome advertisements keep appearing on your screen, you need to use a powerful anti-malware scanner to identify the infection and remove it from your PC.

Recurrent appearance of pop up ads indicates an infection of the so-called pop up virus

If you have been bothered by unwanted pop-up ads, you should know that your computer is infected. Typically, reappearing popups appear due to adware, browser hijackers and similar PUPs, for example:

As soon as such a program enters your computer, it hijacks every web browser (Internet Explorer, Google Chrome, Mozilla Firefox, Safari, Opera, etc.). After doing so, it starts tracking you to get more information about your browsing habits.

To do so, programs that hide behind unwanted pop up ads employ tracking technologies, including cookies and web beacons. They store information about the victim's browsing history, the list of search queries, frequently visited websites, ads and URLs clicked, time spent on particular sites, products viewed, and even IP address.

The majority of ad-supported programs promise to collect only personally non-identifiable data, although some pieces of data they collect (such as search queries) can contain personally identifiable information (PII). Some adware programs clearly disclose such fact in their Privacy Policy documents. For example, a popular browser hijacker, states the following:[4]

QxSearch may collect two types of information: 1) Personal Information, and 2(Anonymous Information. Personal Information means information that may directly or indirectly identify you, such as your name, address, email address, and telephone number. <…>

These potentially unwanted programs also claim to be collecting PII, but only “in case the user willingly provides it.” Such information is valuable and can be easily misused. The main reason to collect such data is to use it for market research and customization of ads.

You need to remove this related software to get rid of fake pop up ads on your web browser. However, sometimes it takes more than that because some of the PUP variants tend to change proxy settings and add wpad.dat files to keep serving sponsored content on the victim's computer.

Pop up adsSome of the dangerous pop up ads might be initiated by browser hijackers. These potentially unwanted programs take over the installed browsers and collect a variety of information, as stated in a Privacy Policy

Types of the pop up virus spreading in the wild

Pop ups caused by adware 

Annoying commercial offers appearing in new browser windows are most frequently sent by ad-supported programs that usually get into the computer system alongside other free software that the user willingly installs. However, such software bundles tend not to disclose the presence of additional software in a direct way and can install pop up virus.

Agreements to install such programs typically hide in Default/Standard settings which look trustworthy for many people. Once installed, ad-supported parasites add specific browser extensions to all web browsers or even modify browser shortcuts to serve ads via them. Some adware programs are easy to remove, and other pop up viruses tend to root deeply in the system. Currently, the most prevalent adware programs that keep bothering computer users are:

Recently, many users started complaining about annoying Russian ads appearing on websites that target the English-speaking audience. In such a case, it is obvious that such ads are bad and they do not originate from websites that the user visits, however, it can be harder to understand when ads caused by adware are provided in victim's native language or English.

To block annoying advertisements, usually, it is enough to run a system scan with anti-malware software like Reimage Reimage Cleaner Intego. Most of the ad-supported programs can be deleted manually quite easily as well. However, some adware programs come in a bundle with browser hijackers, and in such situations, we usually advise choosing an automatic spyware removal option to save time.

Pop ups related to tech support scam viruses

Tech support scammers have also adopted a new technique to swindle money from unsuspecting victims by using pop up virus. Although earlier they used to call victims themselves, now they decided to upgrade their tricks and use malware to convince computer users to call them. On top of that, scammers continuously create new phishing websites[5] and make them look like Microsoft's support page just to trick the victim into calling them.

Tech support scams aim to convey a sense of urgency by opening new browser windows and displaying ads that suggest calling “certified Microsoft technicians” as soon as possible due to bogus reasons such as “suspicious activity on the computer was detected” or “Windows detected ZEUS virus” and similar. An example of such a scam usually contains the following text:

RDN/YahLover.worm!055BCCAC9FEC infection
Windows Defender Alert: Zeus Virus Detected In Your Computer !!
Please Do Not Shut Down or Reset Your Computer.

The following data will be compromised if you continue:
1. Passwords
2. Browser History
3. Credit Card Information
4. Local Hard Disk Files.

The victim can receive these pop ups if associated adware is installed on the system, or simply after clicking on a fraudulent link while scrolling through insecure web pages. The described malware can infect both Windows, Mac and Android OS.

Zeus virus pop upZeus virus pop up - malicious ad appearing in browser to scare the victim that the PC is infected with a dangerous virus, for example, Zeus banking malware

Pop up virus caused by ransomware

Some ransomware viruses (especially in the past) display a full-screen program window that blocks access to the computer. Additionally, there are ransomware viruses that employ victim's web browsers to display numerous notifications asking to pay a ransom to regain access to the PC.

One of the most prevalent examples of such pop up virus is FBI ransomware, which primarily targets Mac OS, while there are versions for Windows and Android users as well. Such viruses typically prevent the user from closing annoying alerts that appear via a web browser.

Such ransomware viruses hardly ever encrypt files; therefore they are not as dangerous. However, described malware often accuses the victim of violating certain laws, for example:

  • Neglectful use of personal computer;
  • Attempts to access prohibited pornographic content;
  • Downloading and watching movies illegally, or similar.

The alleged copyright infringements allow crooks to ask for a “fine,” which, if paid on time, allegedly drops the charges. Described viruses usually demand a ransom paid via pre-paid cards such as MoneyPak or Ukash. In case your computer displays such notifications, use anti-malware for pop-up ads removal.

Different pop up ads can also threaten your privacy

No matter how harmless different pop ups seem, they can also threaten your privacy. This is done by asking people to provide their email address and similar information in exchange for discounts. Here we have to warn you that such pop up ads seem to be very useful and can be filled with huge discounts and price comparisons.

Probably the most dangerous pop up virus suggests installing fake Java or Flash updates.[6] Such ads are usually filled with stolen logos (for example, Adobe or others), convincing pictures and similar things. If you have any doubts, go to the official website of the program to see what updates you need. NEVER trust ads that came out of nowhere because the most of them are used to infect people with malware or redirect them to malicious websites. Fake Flash Player updates are known to distribute the following malware:

Fake update pop up virusFake Flash player updates might install the most dangerous infections on the computer, such as banking trojan or file-locking ransomware

Finally, the PUP which launches pop-up ads can easily slow down the work of your computer and can also make each of your web browsers run slower than ever. If you have already noticed pop up virus on each of your web browsers without a break, you should waste no more time and scan your computer with a reputable anti-spyware, such as Reimage Reimage Cleaner Intego.

Ways to prevent pop-up ads from appearing

If you want to avoid pop-up ads, you need to stay away from adware triggering these ads. Typically, it infiltrates the system via the technique called “bundling.” This method facilitates developers of various freeware (download managers, PDF creators, video streaming software, video recording software, etc.) to earn money by promoting questionable browser add-ons, extensions, plugins, toolbars, and similar applications.

Some users believe that all ads can be blocked with programs like AdBlocker. However, in most cases, these annoying virtual parasites are sneaky enough to bypass AdBlocker restrictions. If you want to avoid pop ups, here is what you have to remember:

  • Before installing a program, read what is said in its Privacy Policy and End User's License Agreement. If there is something about third party content, advertising, collecting your browsing information, etc., you should cancel the installation.
  • Opt for Custom or Advanced installation option to get ability to see optional components. Here, you should uncheck all pre-checked check marks that allow the installation of questionable browser add-ons, extensions, plugins and toolbars.
  • After selecting Custom or Advanced installation, you should also stay away from offers to change your start page or the default search engine.

Pop-up ads examplesPop-up ads may appear on any website that you visit

How to remove pop up virus completely?

Once you notice pop-up ads, look for the responsible application. Check the system for some sponsored application that you installed for trying to save some dollars while shopping online. Hardly ever such apps are useful. Despite their claims to improve your searches, they almost never deliver useful or money-saving deals. 

Bear in mind modern programs are actively promoted on the Internet with the help of suspicious distribution techniques, so there is no surprise that your computer has been hijacked by one of them. Fortunately, it's not hard to get rid of annoying ads and related adware, especially if you have the effective pop up virus remover on your computer.

Next, you should check your Internet Explorer, Firefox, Internet Explorer, Safari, or Chrome. For that, you just need to scan your computer with one of a malware elimination utility. You can also combine it manual pop up virus removal instructions. They will help you eliminate web scripts associated with the adware. 

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove Pop-up ads, follow these steps:

Get rid of Pop-up from Windows systems

Carefully study the instructions provided below as they are designed to help you to delete pop up virus manually. Uninstall every program that was added to your currently installed programs' list without your consent. Then, fix affected browser shortcuts according to the provided example.

To remove Pop-up from Windows 10/8  machines, please follow these steps:

  1. Enter Control Panel into Windows search box and hit Enter or click on the search result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 1
  3. From the list, find entries related to Pop-up (or any other recently installed suspicious program).
  4. Right-click on the application and select Uninstall.
  5. If User Account Control shows up, click Yes.
  6. Wait till uninstallation process is complete and click OK.Uninstall from Windows 2

If you are Windows 7/XP user, proceed with the following instructions:

  1. Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP
  3. Pick the unwanted application by clicking on it once.
  4. At the top, click Uninstall/Change.
  5. In the confirmation prompt, pick Yes.
  6. Click OK once the removal process is finished.

Erase Pop-up from Mac OS X system

Delete every suspicious Mac application using instructions we provided.

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove Pop-up from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for Pop-up-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove Pop-up, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to Pop-up and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the Pop-up-related entries.Uninstall from Mac 2

Eliminate Pop-up from Internet Explorer (IE)

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for Pop-up and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example,
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete Pop-up removal.Reset Internet Explorer

Uninstall Pop-up ads from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the Pop-up-related extension and click on the Gear icon.
  3. Click on Uninstall at the bottom.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Reset MS Edge if that above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

If this solution failed to help you, you need to use an advanced Edge reset method. Note that you need to backup your data before proceeding.

  1. Find the following folder on your computer: C:\\Users\\%username%\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  2. Press Ctrl + A on your keyboard to select all folders.
  3. Right-click on them and pick DeleteAdvanced MS Edge reset 1
  4. Now right-click on the Start button and pick Windows PowerShell (Admin).
  5. When the new window opens, copy and paste the following command, and then press Enter:

    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml” -VerboseAdvanced MS Edge reset 2

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.Reset Chromium Edge

Delete Pop-up from Mozilla Firefox (FF)

To complete the removal of annoying adware program or another pest that hijacked Firefox without your permission, carry out instructions given below.

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select plugins that are related to Pop-up and click Remove.Remove extensions from Firefox

Clear cookies and site data:

  1. Click Menu and pick Options.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data…
  5. Select Cookies and Site Data, as well as Cached Web Content and press Clear.Clear cookies and site data from Firefox

In case Pop-up did not get removed after following the instructions above, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox…
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox – this should complete Pop-up removal.Reset Firefox 2

Remove Pop-up from Google Chrome

Access Chrome Extensions panel to delete suspicious components added by adware or other dangerous programs. You might need to reset Chrome browser to finish the removal.

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to Pop-up by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

If the above-methods did not help you, reset Google Chrome to eliminate all the Pop-up-components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings to complete Pop-up removal.Reset Chrome 2

Get rid of Pop-up from Safari

Clean Safari by deleting extensions that are not supposed to be in it.

Remove unwanted extensions from Safari:

  1. Click Safari > Preferences…
  2. In the new window, pick Extensions.
  3. Select the unwanted extension related to Pop-up and select Uninstall.Remove extensions from Safari

Clear cookies and other website data from Safari:

  1. Click Safari > Clear History…
  2. From the drop-down menu under Clear, pick all history.
  3. Confirm with Clear History.Clear cookies and website data from Safari

Reset Safari if the above-mentioned steps did not help you:

  1. Click Safari > Preferences…
  2. Go to Advanced tab.
  3. Tick the Show Develop menu in menu bar.
  4. From the menu bar, click Develop, and then select Empty Caches.Reset Safari

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices. Avoid any unwanted government tracking or spying by going totally anonymous on the internet. 

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using Private Internet Access VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings. Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact – you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use Data Recovery Pro for the data restoration process.

About the author
Olivia Morelli
Olivia Morelli - Ransomware analyst

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Olivia Morelli
About the company Esolutions

Removal guides in other languages

Your opinion regarding Pop-up ads