Hi all, I have something that is creating pop-ups, randomly through out the day, opens chrome and directs to a money making scam site or the like. Malwarebytes blocks it, and gives the following log. I can't figure out how to stop it, remove it, etc. Any help appreciated. Thanks. Malwarebytes Anti-Malware www.malwarebytes.org Detection, 2/12/2016 1:16 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 61990, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Detection, 2/12/2016 1:16 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 61990, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Scan, 2/12/2016 2:36 AM, SYSTEM, KONSEPT-LAPTOPM, Context, Start:2/12/2016 2:17 AM, Duration:19 min 31 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, Update, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Malware Database, 2016.2.12.1, 2016.2.12.2, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 6:25 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.11.15, 2016.2.12.1, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 7:35 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.12.1, 2016.2.12.2, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 8:26 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Detection, 2/12/2016 9:16 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 49616, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Detection, 2/12/2016 9:16 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 49616, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Update, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Malware Database, 2016.2.12.2, 2016.2.12.3, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 10:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.12.2, 2016.2.12.3, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 11:34 AM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Malware Database, 2016.2.12.3, 2016.2.12.4, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 12:34 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.12.3, 2016.2.12.4, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 1:24 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.12.4, 2016.2.12.6, Update, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Malware Database, 2016.2.12.4, 2016.2.12.5, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 2:26 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Remediation Database, 2016.2.10.1, 2016.2.12.1, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 2:29 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Update, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Scheduler, Domain Database, 2016.2.12.6, 2016.2.12.7, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Starting, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopping, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Stopped, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Refresh, Success, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 4:25 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Protection, 2/12/2016 4:42 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malware Protection, Starting, Protection, 2/12/2016 4:42 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malware Protection, Started, Protection, 2/12/2016 4:42 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Starting, Protection, 2/12/2016 4:42 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Started, Detection, 2/12/2016 5:16 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 50405, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Detection, 2/12/2016 5:16 PM, SYSTEM, KONSEPT-LAPTOPM, Protection, Malicious Website Protection, Domain, 185.17.184.11, beautyfile.info, 50405, Outbound, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, (end)
