Name that adware! And tell me how I can get rid of it, please.

September 8, 2013 9:47 AM

This image has been appearing all over Chrome lately, regardless of the page that's actually open. The images changes, but the functionality is the same. It always closes when click on the X; it's just very annoying having to do that over and over. Neither MS Security Essentials nor Adaware find anything (and christ, what a bloated thing that has become). I can nuke Chrome from orbit, but I'd prefer not to if this can be removed easily.

Here's the image link again if it was too subtle inline: http://imgur.com/UMnzTmI

posted by Nelsormensch to Sports, Hobbies, & Recreation (5 answers total)

I solved a similar problem (not the same pic, though) by installing noscript and turning various things on and off until the problem went away. This was after running spybot s&d and coming up dry. It's probably not the best solution but it worked for me.
posted by phunniemee at 10:58 AM on September 8, 2013

Try disabling your Extensions a few at a time and see if it disappears. Check both your homepage and New Tab page settings. If you are logged in to Chrome, try logging out and/or disconnecting your google account temporarily.

Try Spybot: Search and Destroy. (Accept no similarly-named substitutes.)
posted by Sunburnt at 11:31 AM on September 8, 2013

Yeah, check your extensions.

Recently, Translate Selection started putting ads over all sorts of sites, which you can opt out of, but you have to know it's that extension and know that you can opt out.

Which meant a rather quick removal on my part.
posted by Katemonkey at 1:16 PM on September 8, 2013

The only way to be sure is a complete format and re-install.

That said, if you can't find the script you could run the developer network tool, or fiddler, find the ip address it is being served from and at it to your LMHOSTS file to point to nowhere.
posted by jeffamaphone at 8:09 PM on September 8, 2013

Response by poster: Seems like it was a Chrome extension (fingers crossed). Either a Craigslist Image Preview or Facebook Disconnect, I think.
posted by Nelsormensch at 5:39 PM on September 9, 2013