Protectconnection.icu ads (scam) - Free Instructions

What is Protectconnection.icu ads?

Protectconnection.icu can make people think that their device is infected by malware

Protectconnection.icu shows a fake message to get users to click "Install"

Protectconnection.icu is a rogue website targeting Mac and iPhone users. It uses social engineering^[1] methods to trick people into installing PUPs (potentially unwanted programs) or even malware. When the page opens up, it displays a deceptive message. It states that the user's device is infected and their battery is damaged:

(3) Viruses have been detected on your iPhone and battery has been infected and damaged.

If you do not remove this malware now, it may cause more damage to your Apple iPhone. How to fix this:

Step 1: Tap the button below & install the recommended virus protection tool for free from the AppStore.

Step 2: Run the app to remove all malware to repair your phone to 100%.

There should be no need to say that this fraudulent campaign has nothing to do with Apple Security.^[2] Crooks often use well-known brand names to make their message seem legitimate and more trustworthy. Besides the fake message, the site can also cause push notifications to show up that look like security alerts.

If you receive them, do not click. They can lead to dangerous websites that try to trick you into providing personal information or scam you. This can result in monetary losses or even identity theft. There could be a couple of reasons why this page showed up on your screen.

Fake security alerts can be caused by a PUP

You may be wondering why you are seeing Protectconnection.icu fake security message. And there can be a couple of different reasons. The first possibility is that you have a malicious browser extension installed that could have hijacked your browser.

When users are affected by a browser hijacker, they usually experience an increased amount of commercial content, like pop-ups, banners, surveys, and redirects. Sometimes, even the main settings can change, like the homepage, new tab address, and search engine.

You should install browser plugins only from official web stores and do your research. Read the reviews, look at the ratings, and the number of users. Choose plugins that have plenty of feedback and thousands of users. Fraudsters often try to make their apps look useful, so read the descriptions as well. Look for spelling and grammar mistakes – if there are any, that should raise suspicion.

To find out if a browser extension is to blame for the appearance of Protectconnection.icu, go to your browser settings and remove the plugins one by one, to see if you notice any changes. One more thing you should consider before proceeding is the safety of your data.

Protectconnection.icu may be caused by an adware infection

Websites and web-based applications can gather information about your browsing habits, like your IP address, pages you visit, links you click on, and things you purchase online. This data can be sold to advertising networks or other third parties so it is recommended to delete cookies^[3] and cache regularly. This can be done simply by using a maintenance tool like FortectIntego. Otherwise, follow the instructions provided below:

Remove unwanted extensions from Safari:

1. Click Safari > Preferences…
2. In the new window, pick Extensions.
3. Select the unwanted extension and select Uninstall.

Remove unwanted notifications:

1. Click on Safari > Preferences…
2. Go to the Websites tab and, under General, select Notifications.
3. Select the web address in question, click the drop-down menu and select Deny.

Remove unwanted notifications from MS Edge:

Clear cookies and other website data:

1. Click Safari > Clear History…
2. From the drop-down menu under Clear, pick all history.
3. Confirm with Clear History.

Reset Safari:

1. Click Safari > Preferences…
2. Go to Advanced tab.
3. Tick the Show Develop menu in menu bar.
4. From the menu bar, click Develop, and then select Empty Caches.

Delete malicious extensions from Google Chrome:

1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to the unwanted program by clicking Remove.

Remove unwanted notifications:

1. Open Google Chrome browser and go to Menu > Settings.
2. Scroll down and click on Advanced.
3. Locate Privacy and security section and pick Site Settings > Notifications.
4. Look at the Allow section and look for a suspicious URL.
5. Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Clear cache and web data:

1. Click on Menu and pick Settings.
2. Under Privacy and security, select Clear browsing data.
3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
4. Click Clear data.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

1. Click on Menu and select Settings.
2. In the Settings, scroll down and click Advanced.
3. Scroll down and locate Reset and clean up section.
4. Now click Restore settings to their original defaults.
5. Confirm with Reset settings.

Adware can work in the background without your knowledge

If the above method did not get rid of unwanted symptoms, there is a possibility that your device is infected by adware. Such programs can perform various tasks in the background, like generating pop-ups, banners, and redirects. Most often, users get infected by adware from freeware distribution platforms.

They include bundled software^[4] in the installers to make a profit. To avoid that, always choose the “Custom” or “Advanced” installation method, read the Privacy Policy and Terms of Use. The most important part is to check the file list and untick the boxes next to any unrelated files that you do not want to install.

Generally, PUAs are hard to remove because fraudsters disguise them as handy tools. We suggest using professional security software like SpyHunter 5Combo Cleaner and Malwarebytes that can scan your system and detect suspicious processes running in the machine. Besides, anti-malware tools can issue warnings if a file trying to enter your system seems suspicious. However, if you still want to do this yourself, here are the steps you need to follow:

Remove items from Applications folder:

1. From the menu bar, select Go > Applications.
2. In the Applications folder, look for all related entries.
3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

1. Select Go > Go to Folder.
2. Enter /Library/Application Support and click Go or press Enter.
3. In the Application Support folder, look for any dubious entries and then delete them.
4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.