logo elektroda
logo elektroda
X
logo elektroda
Advanced Search
logo elektroda

[Solved] Ads in Bottom Right Corner & Wireless Headphones Connection Issue on Computer - Help Needed

mrrobson111 23217 12
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
Report a violation of the law
| New topic
  • #1 17569420
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    Hello
    I am asking for support in my computer there are advertisements in the lower right corner and wireless headphones do not connect with my computer.
    greetings
    robert

    Added after 13 [minutes]:

    attached frsty
    Attachments:
    • FRST.txt (65.94 KB) You must be logged in to download this attachment.
    • Addition.txt (36.14 KB) You must be logged in to download this attachment.
  • ADVERTISEMENT
  • #2 17569480
    Grzegorz740
    Level 37  
    Posts: 4135
    Help: 313
    Rate: 551
    Does the antivirus program have an up-to-date virus database? You scanned the computer with it. He detected some viruses etc. garbage.

    You can still try to scan your computer with an antivirus program launched from a Live CD, DVD.
  • ADVERTISEMENT
  • #3 17569481
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    I went adwcleanerem and malwerbyt and I do not have anti-viruses on my CDs
  • #4 17569519
    krzychupar
    Level 43  
    Posts: 6807
    Help: 1490
    Rate: 633
    Open the system notebook and paste:

    CloseProcesses:
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ database.accdb: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ desktop.ini: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [194]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ Downloads: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [194]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ IMG_20180629_0003.pdf: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ IMG_20180701_0001.pdf: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ IMG_20180708_0001.pdf: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ IMG_20180710_0001.pdf: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ Drivers.accdb: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [66]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ Custom Office templates: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [194]
    AlternateDataStreams: C: \ Users \ jaros \ OneDrive \ Documents \ Zoom: $ {3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0} .Metadata [194]
    hosts:
    CHR HKLM-x32 \ ... \ Chrome \ Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps: //clients2.google.com/service/update2/crx
    S2 MBAMScheduler; "C: \ Program Files (x86) \ Malwarebytes Anti-Malware \ mbamscheduler.exe" [X]
    S2 MBAMService; "C: \ Program Files (x86) \ Malwarebytes Anti-Malware \ mbamservice.exe" [X]
    S3 MBAMProtector; \ ?? \ C: \ WINDOWS \ system32 \ drivers \ mbam.sys [X]
    S3 MBAMWebAccessControl; \ ?? \ C: \ WINDOWS \ system32 \ drivers \ mwac.sys [X]
    EmptyTemp:

    Save the file under the name fixlist.txt and place it in the folder where you have FRST.exe.
    Start FRST and click on Fix / Repair.
  • #5 17569562
    Kolobos
    IT specialist  
    Posts: 85152
    Help: 17159
    Rate: 10419
    Wykonaj taki Fixlist.txt dla FRST:
    Task: {15DCD592-0AD4-43F7-ACB4-53F0B4D894F9} - System32\Tasks\CryptoTabUpdateTaskUserS-1-5-21-3451780722-1727213981-1364317048-1001Core => C:\Users\jaros\AppData\Local\CRYPTOCOMPANY\Update\CryptoTabUpdate.exe [2018-09-22] (CRYPTOCOMPANY OU)
    Task: {D5B91467-8D44-4C9D-BA4D-B8C5451248D8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
    Task: {F2F85B91-3310-4F88-9D7E-A25DC9DE7ADF} - System32\Tasks\CryptoTabUpdateTaskUserS-1-5-21-3451780722-1727213981-1364317048-1001UA => C:\Users\jaros\AppData\Local\CRYPTOCOMPANY\Update\CryptoTabUpdate.exe [2018-09-22] (CRYPTOCOMPANY OU)
    Hosts:
    HKU\S-1-5-21-3451780722-1727213981-1364317048-1001\...\Run: [CryptoTab Update] => C:\Users\jaros\AppData\Local\CRYPTOCOMPANY\Update\1.3.99.0\CryptoTabUpdateCore.exe [609320 2018-09-22] (CRYPTOCOMPANY OU)
    HKU\S-1-5-21-3451780722-1727213981-1364317048-1001\...\Run: [CryptoTab Browser] => C:\Users\jaros\AppData\Local\CryptoTab Browser\Application\browser.exe [1551400 2018-09-27] (The Chromium and CryptoTab Browser Authors)
    CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
    S3 MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [X]
    S3 MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [X]
  • #6 17570121
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    repair done, ads continue to show
  • ADVERTISEMENT
  • #7 17570246
    krzychupar
    Level 43  
    Posts: 6807
    Help: 1490
    Rate: 633
    On what browser do these ads show up? A photo would be useful as it looks.
  • ADVERTISEMENT
  • #8 17570286
    g107r
    Level 41  
    Posts: 5240
    Help: 807
    Rate: 977
    Similar ? https://www.google.com/search?q=a433.com&clie...AgCEAE&biw=1440&bih=746#imgrc=x7oTTqyrhLD97M:

    Quote:
    (Using the Hosts directive: in the fixlist, the Hosts file will be reset.)

    2018-08-28 16:47 - 2018-09-21 08:52 - 000001336 _____ C: \ WINDOWS \ system32 \ Drivers \ etc \ hosts

    127.0.0.2 www.mefeedia.com
    127.0.0.1 delivery.anchorfree.us/land.php
    127.0.0.1 anchorfree.net
    127.0.0.1 rss2search.com
    127.0.0.1 techbrowsing.com
    127.0.0.1 box.anchorfree.net
    127.0.0.1 a433.com
    127.0.0.3 www.anchorfree.net
    127.0.0.1 rpt.anchorfree.net
    127.0.0.1 hsselite.com
    127.0.0.1 www.hsselite.com


    Insert the results of the re-scan, this marked entry, Google quite directly identifies with the ads.
    Torrents, hamsters ... Since when does it pop up?
    Did he do something, install something at the time?
  • #9 17570350
    Kolobos
    IT specialist  
    Posts: 85152
    Help: 17159
    Rate: 10419
    @ g107r so much that the entry 127.0.0.1 means localhost, so the page is blocked.

    @ mrrobson111 What are the ads?

    After closing:
    (BitTorrent Inc.) C: \ Users \ jaros \ AppData \ Roaming \ uTorrent \ uTorrent.exe
    (Valve Corporation) C: \ Program Files (x86) \ Steam \ Steam.exe
    (CANON INC.) C: \ Program Files (x86) \ Canon \ IJ Network Scanner Selector EX \ CNMNSST.exe
    (CANON INC.) C: \ Program Files (x86) \ Canon \ Quick Menu \ CNQMMAIN.EXE
    (CANON INC.) C: \ Program Files (x86) \ Canon \ Quick Menu \ CNQMUPDT.EXE

    Are you still displaying?
  • #10 17570681
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    I have to wait to take a shot because they appear every now and then
    yesterday I wrote out the desktop and I do not remember what I installed

    Added after 37 [minutes]:

    attached advertisement
    Attachments:
    • Ads in Bottom Right Corner & Wireless Headphones Connection Issue on Computer - Help Needed Przechwytywanie.PNG (189.94 KB) You must be logged in to download this attachment.
  • #11 17570793
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    And here is one more
    Attachments:
    • Ads in Bottom Right Corner & Wireless Headphones Connection Issue on Computer - Help Needed Przechwytywanie 1.PNG (140.38 KB) You must be logged in to download this attachment.
  • #13 17571010
    mrrobson111
    Level 8  
    Posts: 192
    Rate: 16
    I disconnected something and it probably helped, because it is not present.
    Many thanks, best regards.
| New topic
Report a violation of the law

Topic summary

✨ The discussion revolves around a user experiencing persistent advertisements in the bottom right corner of their computer screen and issues connecting wireless headphones. Initial suggestions included ensuring the antivirus software is up-to-date and scanning the system for malware using tools like AdwCleaner and Malwarebytes. The user reported that despite running these scans, the ads continued to appear. Further troubleshooting involved examining browser settings and potential unwanted software installations. Eventually, the user found a solution by disconnecting a certain setting, which seemed to resolve the advertisement issue.
Generated by the language model.

FAQ

TL;DR: “99% of notification prompts were dismissed or denied,” so disable or revoke site notifications to stop bottom-right desktop ads; then re‑pair Bluetooth headphones if they won’t connect. This FAQ is for Windows users fixing Chrome pop-ups and wireless audio pairing. [“Reducing Notification Permission Prompt Spam in Firefox”]

Why it matters: It’s fast to fix without wiping your PC, and you’ll restore quiet and connectivity.

Quick Facts

  • Chrome’s bottom-right desktop ads are usually site notifications you allowed; revoke them in Settings > Privacy and security > Site settings > Notifications. [“Change site permissions in Chrome”]
  • AdwCleaner/Malwarebytes won’t undo Chrome notification permissions; remove allowed sites in Chrome’s Notifications list. [Elektroda, Kolobos, post #17570868]
  • FRST fixlist can remove unwanted entries and reset HOSTS; save fixlist.txt beside FRST.exe and press Fix. [Elektroda, krzychupar, post #17569519]
  • CryptoTab added startup tasks in this case; disable its tasks or uninstall if you don’t use it. [Elektroda, Kolobos, post #17569562]
  • Typical Bluetooth headset range (Class 2) is about 10 meters; keep devices close while pairing. [“Bluetooth”]

Why are ads popping up in the bottom-right corner on Windows?

They are browser push notifications, most often from Chrome. You clicked “Allow” on a website. Open Chrome settings and revoke the site’s permission. This is not malware by itself. It’s a browser feature that sites can abuse for spammy alerts. Clearing those permissions stops the pop-ups instantly. [“Change site permissions in Chrome”]

How do I quickly turn off these Chrome notifications?

Open Chrome. Go to Settings > Privacy and security > Site settings > Notifications. Remove suspicious sites from Allowed or switch the global toggle to block prompts. How-To: 1. Menu > Settings. 2. Privacy and security > Site settings > Notifications. 3. Remove sites under Allowed, or block prompts. [“Change site permissions in Chrome”]

My scanners found nothing, but ads remain. Why?

Notification spam persists because it’s a permission, not a virus. “It looks like notifications from the site, which you agreed to in Chrome.” Remove the site in Chrome’s Notifications list and the pop-ups stop. Security tools don’t reset these permissions. [Elektroda, Kolobos, post #17570868]

I saw a433.com in HOSTS. Is that causing ads?

No. The entry 127.0.0.1 a433.com points to localhost, which blocks that domain. It doesn’t generate notifications or ads. The HOSTS file may be reset during cleanup to remove custom entries. That helps ensure clean DNS behavior. [Elektroda, Kolobos, post #17570350]

How do I use FRST fixlist safely to clean leftovers?

Create fixlist.txt with helper-provided lines, save it next to FRST.exe, then click Fix. FRST will process items, reset HOSTS if instructed, and remove scheduled tasks or extensions listed. Do not run random scripts; use trusted guidance only. 1. Paste rules into fixlist.txt. 2. Place with FRST.exe. 3. Run FRST > Fix. [Elektroda, krzychupar, post #17569519]

What is CryptoTab and should I remove it?

CryptoTab Browser/Update can add startup tasks and run in the background. If you didn’t intend to use it, remove the tasks from Task Scheduler and uninstall the app. Also clear its autostarts in your user Run entries. [Elektroda, Kolobos, post #17569562]

The pop-ups stopped after I disabled notifications—am I done?

Yes. Clearing the Allowed list removes the spam source. The original poster confirmed the ads disappeared after disabling those permissions. Also check other browsers for similar permissions, then restart the PC to confirm. [Elektroda, mrrobson111, post #17571010]

How can I confirm it’s browser notifications and not malware?

Close Chrome and see if pop-ups stop. Check Chrome’s Notifications Allowed list for odd domains. Disable them and test again. If only Chrome shows them and removing permissions fixes it, it’s notifications, not malware. Capture a screenshot of the site name if unsure. [Elektroda, Kolobos, post #17570868]

What if ads still appear after turning off Chrome notifications?

Check other browsers for allowed notifications and remove them. Scan with an up-to-date antivirus. If needed, boot a Live CD/USB antivirus and scan offline for deeper cleaning. This verifies no system-level adware remains. [Elektroda, Grzegorz740, post #17569480]

My wireless Bluetooth headphones won’t connect—what should I try first?

Turn Bluetooth on, charge both devices, and keep them close. Put headphones in pairing mode, then Windows: Settings > Bluetooth & devices > Add device. Remove old pairings before re-adding. Update Bluetooth drivers in Device Manager. Run the Windows Bluetooth troubleshooter if pairing fails. [“Fix Bluetooth problems in Windows”]

Could range or interference be blocking pairing?

Yes. Typical Class 2 Bluetooth headsets work to about 10 meters. Walls, USB 3.0 noise, and Wi‑Fi congestion reduce range. Move devices together, avoid metal obstructions, and use front-panel or a cabled USB Bluetooth adapter to reduce interference. [“Bluetooth”]

Will resetting HOSTS via FRST remove my custom blocks?

Yes. FRST’s Hosts directive resets HOSTS to default, removing custom entries. Back up your HOSTS file first if you rely on manual blocks. You can restore safe custom entries after cleanup. [Elektroda, g107r, post #17570286]

Should I share a screenshot of the pop-up when asking for help?

Yes. A screenshot shows the domain sending notifications and UI context, speeding diagnosis. Helpers explicitly asked for a photo in the thread. Include the browser icon or site name visible in the toast. [Elektroda, krzychupar, post #17570246]
Generated by the language model.
ADVERTISEMENT