Remove Add Extension to Leave Pop-up Completely

My Firefox shows the “Add Extension to Leave” pop-up dialog box from a website called “webr.space” when I browse the web. I feel it weird so I dare not to click on the OK button within the box to leave the page. But when I click the Cancel button, another website with other texts pops up on my web browser. I try to close these two pages by clicking on the close buttons of the tabs, but there is no response. Finally, I have to close the browser. But when I restart the browser, the “Add Extension to Leave” pop-up appears from another website again. Why this happens? Has my computer been infected by malware? Please help me!

pop-ups

As a computer user who often surfs the Internet you may receive suspicious pop-ups when browsing the web. Some popups can be closed easily, but some don’t allow you to close them by simply clicking on the X button on its top right corner or the Cancel button. Seeing popups doesn’t always indicate that there is malware on your computer; sometimes, you receive popups is because that you are visiting certain websites designed to display pop-up ads.

However, in some cases, it is really a symptom of malware infection, especially when you keep receiving the some pop-up coming from various websites or different pop-ups coming from a same website. Just as the above problem describes, “Add Extension to Leave” pop-up always appears on the computer – this is a suspicious thing, and it is strongly suggested that the user run a malware scan immediately.

run-malware-scan

 


Analysis of “Add Extension to Leave” Pop-up

“Add Extension to Leave” pop-up is a dialog box that comes from various advertising domains on your web browsers, asking you to add extension in order to leave the webpage. It has an OK button and Cancel button in it (see the image below). If you click the OK button, by default you will add some unknown extension on your web browser. But if you click the Cancel button, it doesn’t necessarily mean that you can close and leave the webpage; instead, you may open a new website that contains malicious code. Even though you try to leave the webpage by clicking on the X button of the browser tab, you may fail.

pop-up

As you can see from the screenshot below, a user had to close the page by using the task manager after the “Add Extension to Leave” pop-up appeared on his Chrome browser.

problem_description

What causes “Add Extension to Leave” pop-up? Actually, this pop-up is caused by some adware which can change the settings of Internet Explorer, Chrome, Firefox and other types of web browser without any permission. The adware is created to help prompte some extensions and generate advertising revenue. When it gets installed on your PC, it can alter your browsers’ settings so as to force you to visit various advertising domains that prompt you to install certain browser extensions. It may also modify your browsers’ shortcuts so that each time you open the browsers, you will see the annoying “Add Extension to Leave” pop-up. The adware could also block your access to specific websites by modifying the HOSTS file, install unwanted extensions or toolbars on your web browsers, or redirect you to some dangerous websites from which you may directly download malware programs on your PC. Moreover, it may collect your personal information such as IP address, location, browser type, system version, and online data like search queries, most-visited sites, and clicked ads to analyze your preferences or habits so as to deliver more target advertising content when you are surfing the Internet.

data analysis

Is it dangerous to receive “Add Extension to Leave” pop-up? Receiving “Add Extension to Leave” pop-up is not the most dangerous thing. If you don’t click on any button or icon within the popup dialog box, your computer will be safe. But this doesn’t mean that you should do nothing.You need to see the essence by the phenomenon – this problem indicates that your computer has got adware infection. You know adware can do a series of bad things on your PC, so you need to take some action to remove the adware immediately. At the same time, it is a good idea that you disconnect your computer from the Internet, so as to avoid some malware being downloaded by the adware on your PC.

poppups

(Source: http://jgwre15.blogspot.jp/2015/01/day-4-gone-phishing.html)

Can “Add Extension to Leave” pop-up be removed? This pop-up is generated by JavaScript code embedded in the webpage, so if you want to remove or disable it, you have to do two things: one is to prevent the related Java Script code from running and other other is to remove the adware that modifies your browser settings. In the following, we will give more detailed guides to do these.

popup

 


How to Remove “Add Extension to Leave” Pop-up Completely

To get rid of “Add Extension to Leave” pop-up, you should, first of all, get rid of the adware hidden on your PC, and then disable the JavaScript on your web browsers. You can follow the guides given below to do that.

Part 1: Remove the hidden adware from your PC.

Below we give the manual removal guide and the automatic removal guide. You can choose to remove the adware either manually or automaitcally, just depending on your own situation. Actually, the manual removal is only for advanced users. If you are a novice user and have no experience of removing malware on your own at all, the automatic removal method should be more suitable for you.

Automatic removal guide:

Considering that there is no exact name of the adware program, it would be a difficult task for you to manually remove it. Therefore, we recommend using an auto malware removal tool called SpyHunter to run a thorough scanning of your computer system so that you can remove the detected adware as well as other exisiting malware threats easily.

SpyHunter is a powerful anti-malware program available in both the free version and registered version. The free version provides the free scan feature that can effectively detect threats like adware, PUPs, browser hijackers, Trojans, worms, and viruses; the registered version provides not only the scan feature but also many other advanced features like malware removal, daily malware definition update, free tech support, etc. 

Now you can take the steps below to detect and clean the adware that may cause “Add Extension to Leave” pop-up.

  • Locate the file you have downloaded just now, and double click it to run it.

SpyHUnter installer

  • When a window pops up, click the Run button.

click-Run

  • Select your language and then click OK.

select-language

  • Click CONTINUE button.

continue

  • Check I accept the EULA and Privacy Policy option and click INSTALL button.

SpyHunter-installation-step-3

  • SpyHunter is now being installed on your PC.

installtion process

  • When the installation is finished, click the EXIT button.

exit

  • SpyHunter will run automaically on your PC. Now you can run a full system scan by clicking on the Scan Computer Now button.

spyhunter-scan-computer-now

  • SpyHunter now is scanning your registry, files, and memory for any existing threats. This scanning process may take 30 minutes or more. Please wait with patience until the scanning is complete.

scan process

  • Once SpyHunter has finished scanning your computer, you will be shown all detected threats. To remove them all, just click the Fix Threats button.

fix threat

  • Once all threats are removed, please restart your computer.

 

Manual removal guide:

Below are the basic steps to check and remove an adware program. But please know that we cannot guarantee that you would be able to completely remove the adware after you have accomplished these steps, since this can be affected by various factors, such as the system version, infection degree, and your actual operations. Hence, if you want to achieve a satisfactory removal result, using a professional malware removal tool should be a better option.

Step 1: Press Windows key + R key together. In the box that appears, type msconfig.exe and click OK. This will open the System Configuration window.

type msconfig

Step 2: Under the Startup tab, see if there is any unknown or suspicious startup item; if there is, uncheck it, and click Apply.

startup

Step 3: Under Services tab, see if there is any suspicious service item; if there is, uncheck it, and then click Apply > OK.

service

Step 4: Open your task manager (right click task bar, and select Start Task Manager, or you can simply press the key combination: Ctrl+Alt+Delete).

start task manager

Step 5: Under Processes tab, see if there is any unknown or suspicious process (its name looks weird or it occupies larger CPU usage); if there is, right click the process and click End Process to ternimate it.

end process

Step 6: Acess Control Panel, click on Uninstall a program (for Windows 7/Vista/8/10) or double click on Add or Remove Programs (for Windows XP).

uninstall_win8_2

Step 7: In the open window, see if there is any suspicious program (you didn’t install but just appear there); if there is, right click the program, and click the Uninstall/Change (for Windows 7/Vista/8/10) or Remove (for Windows XP) button.

unintall

Step 8: Open the local disk C, and navigate to the following directories. Look for if there are any suspicious folders or files; if there are, delete them.

%Program Files\%
%AppData\%
%Program Files\%
%Documents and Settings\%

Step 9: Press Window key + R key at the same time, and a Run command box will open. Type “regedit” into the box and click OK. This will open the registry editor.

type-regedit

Step 10: When the registry editor is opened, follow these two paths to see if there is any unknown program has been set to automatically run in your system; if there is, delete the related entry.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnc

eregistry-editor

Attention: If you are not sure what files and registry entries should be deleted, please give up the deletion. NEVER delete any other files or entries recklessly. This will not help remove the adware and what’s worse, you could generate other unexpected problems, like system errors, data losses, and program failure.

 

Part 2: Disable the JavaScript on your web browsers.

JavaScript is supported by all types of web browsers like Internet Explorer, Mozilla Firefox, and Google Chrome and almost every Internet user can use it. However, JavaScript can sometimes be abused by some disreputable website owners and harm users’ computers. So, most users choose to disable it. To block the “Add Extension to Leave” pop-up, you should also disable the JavaScript on your web browsers.


For Internet Explorer: 

  1. Open the Internet Explorer browser.
  2. Click the Tools menu or the gear icon and select Internet options from the drop-down menu.
  3. Under the Security tab, click the Custom Level… button.
  4. In the “Security Settings – Internet Zone” window, look for the “Scripting” section.
  5. Under the “Active Scripting” item select “Enable“.
  6. A warning dialog box will pop up to ask if you are sure that you want to change the settings for this zone, click “Yes” to confirm your change.
  7. In the “Internet Options” window, click on the “OK” button to close it.
  8. Click on the “Refresh” button of the web browser to refresh the page.

 

For Mozilla Firefox:

  1. Open the Firefox browser.
  2. Type about:config into the address bar and press Enter.
  3. Click the I’ll be careful, I promise button .
  4. Then, type javascript.enabled into the search bar.
  5. In the search result, find the item named “javascript.enabled”, right-click on it and select Toggle.
  6. JavaScript is now disabled. You can click on the “Reload current page” button of the web browser to refresh the page.

 

For Google Chrome:

  1. Open the Chrome browser.
  2. Click Customize and control Google Chrome menu in the upper right-hand corner of the browser window, and select Settings from the drop-down menu that appears..
  3. Scroll to the bottom of the Settings page, click Show advanced settings…
  4. In the Privacy section, click the Content settings… button.
  5. In the window that appears, locate JavaScript section, select “Do not allow any site to run JavaScript”, and then click Done.

 


Conclusion:

“Add Extension to Leave” pop-up can be very annoying and even harmful. Without clicking the OK button, you may not be able to leave the webpage that display this pop-up. But if you click the OK button, by default you allow unknown extension to be installed on your web browsers. By doing this, you might bring potential risk to your PC, since you don’t know whether the extension is safe or not. This pop-up can keep appearing on your PC since some adware has modified your web browsers’ settings and injected harmful code into the webpage. If you want to remove this pop-up, you have to first remove the adware and then disable JavaScript on your web browsers. Above you have given the detailed guides on how to do so. Hope you will successfully get rid of “Add Extension to Leave” pop-up by following the guides.

Friendly reminder: The most important step of your task is to delete the adware hidden on your PC. If you fail to delete it, it will continue modifying your browsers’ settings and injecting malicious codes into web pages. As a result, you will receive the annoying pop-up again. Therefore, you should ensure a complete removal of the adware. The manual removal, to some extent, is difficult for general users to handle, so most users would fail to remove the adware with this method. What’s worse, if any wrong occurs during the manual removal, it could result in unexpected problems. If you want to safely and completely clean the hidden adware, it is highly recommended that you download and use an auto malware removal tool.

download-removal-tool

 

 

Share Button