Unfortunately I can’t get a screenshot of this. But it’s basically a pale blue screen claiming to be from mozilla telling me it’s an “update” and I’m asked to submit my user name and password for authentication to wxw.lineprom.com, which when attempted goes here: htxps://cobalten.com/afu.php?zoneid=1872343
Anyone got any idea what the hell is going on with this crap?
Break these live links please.
Not anything specific for that first link on a VT scan: https://www.virustotal.com/gui/url/da822cc1760fd1cf68efffb041aa20925d12de7a61edbf37655e41a6c186b6b0/detection
but the second link you gave resulted in 4 malicious and 1 suspicious detection:
https://www.virustotal.com/gui/url/68ba95b7cf20b16959954cb3209b11ab435ce24ab9a2d1b6afa14cf00f940890/detection
Also DrWeb’s online link checker qualifies it as an unwanted and malicious website.
hXtps://cobalten.com/afu.php?zoneid=1872343 is in Dr.Web malicious sites list!
hXtps://cobalten.com/afu.php?zoneid=1872343 is present in the Dr.Web database of unwanted sites!
Wait for a qualified remover to help you cleanse your computer if need be.
In the meantime read about this legit but often unwanted adware redirector here:
https://malwaretips.com/blogs/remove-cobalten-com/
polonus