As a computer user who often surfs the Internet you may receive suspicious pop-ups when browsing the web. Some popups can be closed easily, but some don’t allow you to close them by simply clicking on the X button on its top right corner or the Cancel button. Seeing popups doesn’t always indicate that there is malware on your computer; sometimes, you receive popups is because that you are visiting certain websites designed to display pop-up ads.
However, in some cases, it is really a symptom of malware infection, especially when you keep receiving the some pop-up coming from various websites or different pop-ups coming from a same website. Just as the above problem describes, “Add Extension to Leave” pop-up always appears on the computer – this is a suspicious thing, and it is strongly suggested that the user run a malware scan immediately.
Analysis of “Add Extension to Leave” Pop-up
“Add Extension to Leave” pop-up is a dialog box that comes from various advertising domains on your web browsers, asking you to add extension in order to leave the webpage. It has an OK button and Cancel button in it (see the image below). If you click the OK button, by default you will add some unknown extension on your web browser. But if you click the Cancel button, it doesn’t necessarily mean that you can close and leave the webpage; instead, you may open a new website that contains malicious code. Even though you try to leave the webpage by clicking on the X button of the browser tab, you may fail.
As you can see from the screenshot below, a user had to close the page by using the task manager after the “Add Extension to Leave” pop-up appeared on his Chrome browser.
What causes “Add Extension to Leave” pop-up? Actually, this pop-up is caused by some adware which can change the settings of Internet Explorer, Chrome, Firefox and other types of web browser without any permission. The adware is created to help prompte some extensions and generate advertising revenue. When it gets installed on your PC, it can alter your browsers’ settings so as to force you to visit various advertising domains that prompt you to install certain browser extensions. It may also modify your browsers’ shortcuts so that each time you open the browsers, you will see the annoying “Add Extension to Leave” pop-up. The adware could also block your access to specific websites by modifying the HOSTS file, install unwanted extensions or toolbars on your web browsers, or redirect you to some dangerous websites from which you may directly download malware programs on your PC. Moreover, it may collect your personal information such as IP address, location, browser type, system version, and online data like search queries, most-visited sites, and clicked ads to analyze your preferences or habits so as to deliver more target advertising content when you are surfing the Internet.
Is it dangerous to receive “Add Extension to Leave” pop-up? Receiving “Add Extension to Leave” pop-up is not the most dangerous thing. If you don’t click on any button or icon within the popup dialog box, your computer will be safe. But this doesn’t mean that you should do nothing.You need to see the essence by the phenomenon – this problem indicates that your computer has got adware infection. You know adware can do a series of bad things on your PC, so you need to take some action to remove the adware immediately. At the same time, it is a good idea that you disconnect your computer from the Internet, so as to avoid some malware being downloaded by the adware on your PC.
How to Remove “Add Extension to Leave” Pop-up Completely
Part 1: Remove the hidden adware from your PC.
Below we give the manual removal guide and the automatic removal guide. You can choose to remove the adware either manually or automaitcally, just depending on your own situation. Actually, the manual removal is only for advanced users. If you are a novice user and have no experience of removing malware on your own at all, the automatic removal method should be more suitable for you.
Automatic removal guide:
Considering that there is no exact name of the adware program, it would be a difficult task for you to manually remove it. Therefore, we recommend using an auto malware removal tool called SpyHunter to run a thorough scanning of your computer system so that you can remove the detected adware as well as other exisiting malware threats easily.
Now you can take the steps below to detect and clean the adware that may cause “Add Extension to Leave” pop-up.
- Download SpyHunter setup file on your PC.
- Locate the file you have downloaded just now, and double click it to run it.
- When a window pops up, click the Run button.
- Select your language and then click OK.
- Click CONTINUE button.
- SpyHunter is now being installed on your PC.
- When the installation is finished, click the EXIT button.
- SpyHunter will run automaically on your PC. Now you can run a full system scan by clicking on the Scan Computer Now button.
- SpyHunter now is scanning your registry, files, and memory for any existing threats. This scanning process may take 30 minutes or more. Please wait with patience until the scanning is complete.
- Once SpyHunter has finished scanning your computer, you will be shown all detected threats. To remove them all, just click the Fix Threats button.
- Once all threats are removed, please restart your computer.
Manual removal guide:
Step 1: Press Windows key + R key together. In the box that appears, type msconfig.exe and click OK. This will open the System Configuration window.
Step 2: Under the Startup tab, see if there is any unknown or suspicious startup item; if there is, uncheck it, and click Apply.
Step 3: Under Services tab, see if there is any suspicious service item; if there is, uncheck it, and then click Apply > OK.
Step 4: Open your task manager (right click task bar, and select Start Task Manager, or you can simply press the key combination: Ctrl+Alt+Delete).
Step 5: Under Processes tab, see if there is any unknown or suspicious process (its name looks weird or it occupies larger CPU usage); if there is, right click the process and click End Process to ternimate it.
Step 6: Acess Control Panel, click on Uninstall a program (for Windows 7/Vista/8/10) or double click on Add or Remove Programs (for Windows XP).
Step 7: In the open window, see if there is any suspicious program (you didn’t install but just appear there); if there is, right click the program, and click the Uninstall/Change (for Windows 7/Vista/8/10) or Remove (for Windows XP) button.
Step 8: Open the local disk C, and navigate to the following directories. Look for if there are any suspicious folders or files; if there are, delete them.
%Documents and Settings\%
Step 9: Press Window key + R key at the same time, and a Run command box will open. Type “regedit” into the box and click OK. This will open the registry editor.
Step 10: When the registry editor is opened, follow these two paths to see if there is any unknown program has been set to automatically run in your system; if there is, delete the related entry.
For Internet Explorer:
- Open the Internet Explorer browser.
- Click the Tools menu or the gear icon and select Internet options from the drop-down menu.
- Under the Security tab, click the Custom Level… button.
- In the “Security Settings – Internet Zone” window, look for the “Scripting” section.
- Under the “Active Scripting” item select “Enable“.
- A warning dialog box will pop up to ask if you are sure that you want to change the settings for this zone, click “Yes” to confirm your change.
- In the “Internet Options” window, click on the “OK” button to close it.
- Click on the “Refresh” button of the web browser to refresh the page.
For Mozilla Firefox:
- Open the Firefox browser.
- Type about:config into the address bar and press Enter.
- Click the I’ll be careful, I promise button .
For Google Chrome:
- Open the Chrome browser.
- Click Customize and control Google Chrome menu in the upper right-hand corner of the browser window, and select Settings from the drop-down menu that appears..
- Scroll to the bottom of the Settings page, click Show advanced settings…
- In the Privacy section, click the Content settings… button.
Friendly reminder: The most important step of your task is to delete the adware hidden on your PC. If you fail to delete it, it will continue modifying your browsers’ settings and injecting malicious codes into web pages. As a result, you will receive the annoying pop-up again. Therefore, you should ensure a complete removal of the adware. The manual removal, to some extent, is difficult for general users to handle, so most users would fail to remove the adware with this method. What’s worse, if any wrong occurs during the manual removal, it could result in unexpected problems. If you want to safely and completely clean the hidden adware, it is highly recommended that you download and use an auto malware removal tool.