OperaGX Setup Downloading Via Pop-ups – Virus Removal Guide

By Andy Mulholland - Malware Researcher 4 Min Read

If you are just casually browsing on the internet, you may suddenly get redirected to an unknown new tab drive-by download that may download the OperaGX setup file on your computer.

This is not an entirely new issue; users have reported that the OperaGX setup file is suddenly downloaded via their browser as a result of clicking unsafe advertisements.

We should make it clear that OperaGX is not malware. It's just that cybercriminals frequently use this deceptive marketing to force malicious software onto users' computers.

Not to mention, this type of drive-by download only occur when you visit a malicious website and are caught in a redirect chain, as well as when adware is present on the computer or browser.

Redirects and malicious domains in general

These are extremely common, particularly on sites that use deceptive and unsafe advertisements, such as torrenting platforms, cracked software marketplaces, and other sketchy places on the internet.

When a user clicks on these ads, they will be redirected to a new tab in their browser and directed to unsafe promoted content.

These actions may include redirecting the web browser to malicious websites, initiating drive-by downloads, or causing the infected browser to display specific sites selected by the cybercriminals running the rogue domain.

A redirect could also be used to display phishing pages. In addition, they are used to trick users into agreeing to display advertisements via web browser notifications.

Why OperaGX download via such sites?

Software companies using sketchy marketing tactics to force users into using their programs are not new. We've seen cases where they forcefully install apps to the computer via bundled software via installers that are meant for the installation of other programs.

These are simply marketing techniques however these are often seen negatively from a user's perspective.

As one user who encountered the problem stated:

“It appears that they paid a third party to promote OperaGX, and the third party has resorted to using annoying popups. The popups are legitimate download links, but having to keep downloading them has put me off trying the browser.”

It is uncommon for a redirect to download something immediately after opening a new tab. So, based on our observations, some users believe they have contracted a virus when this occurs.

Potential malware infection

Users frequently believe their device is infected when redirected to Opera GX downloads; however, while the aforementioned browser is not malware, the act of being redirected is a sign of adware and browser hijacker presence on the computer.

Not to mention the possibility that the download file will eventually contain malware disguised as a popular browser program, though we have yet to see such a Trojan masquerading as such.

If you want to ensure that your device is safe, follow the browser malware removal instructions below. Although it is entirely optional for those who want to guarantee their browser's security.

How to remove malware from browser

You're in luck if you need help getting rid of malware from your computer.

This tutorial will show you how to get rid of all malware threats that are hiding in your computer's browser.

We considered the technical skills of the people who use the internet, so we made sure the steps are simple enough that even those who aren't tech-savvy could follow them.

Before you proceed, ensure that you have a backup of your data saved somewhere. If you don't, your files could get destroyed or lost while you complete the steps below. These types of incidents are uncommon, but we recommend taking precautions just in case.

Remove Malware Instantly

Tired of battling stubborn browser threats? Let Bitdefender, the world’s leading antivirus, handle it with ease. It's time to stop worrying about malware.

Start Protecting Your Device Today

We've teamed up with Bitdefender to offer Hackerdose visitors an exclusive 50% discount on their products. Now is the time to start taking your computer security seriously with the best antivirus on the planet.

For the Overviews

To remove browser malware from your web browser, you only need to follow a simple three-step procedure:

Step 1: Remove browser threats with AdwCleaner

Step 2: Reset the browser to default settings

Step 3: Run additional malware scans


Step 1: Remove browser threats with AdwCleaner

AdwCleaner is a utility tool that is primarily used for cleaning adware and potentially unwanted applications (PUP) from the computer. This program is also primarily used to find and remove malware that is targeted at the web browser.

Here's how to install and use AdwCleaner:

1. To start, download the latest version of AdwCleaner.

AdwCleaner Step1

2. Once AdwCleaner has finished downloading (adwcleaner.exe), run the executable file.

AdwCleaner Step2

3. If the User Account Control window pops up, click Yes to proceed with running the program.

AdwCleaner Step3

4. Once the program has launched, agree to the End User License Agreement by clicking the I Agree button.

AdwCleaner Step4

5. Click on the Scan Now button to begin scanning your computer for browser threats such as adware, PUPs, and more.

AdwCleaner Step5

6. Wait for AdwCleaner to finish scanning the files on the system. This may take a while depending on how large the files on your device are, as well as your system's hardware capabilities.

AdwCleaner Step6

7. Once the scan is complete, proceed to take action by following the on-screen instructions. Otherwise, if the scan shows a clean result, click Run Basic Repair to reset Winsock and other settings before finishing the process.

AdwCleaner Step7

Step 2: Reset the browser to default settings

When it comes to browser-targeted malware, it will alter the browser settings so that the threat can persist. Therefore simply changing the search engine back to default may not work in many cases.

So we should reset the web browser to its default settings from when it was first installed. This will get rid of all the configurations the malware has set.

Note: Resetting the browser will get rid of all the data except for saved bookmarks and passwords.

  • Google Chrome
  • Mozilla Firefox
  • Microsoft Edge

1. Open the Chrome browser and click the three horizontal dots at the upper-right corner of the screen.

Chrome Step1

2. On the dropdown menu, scroll down to the bottom and click Settings.

Chrome Step2

3. In the left sidebar, scroll down and find Reset settings.

Chrome Step3

4. Click on Reset settings to their original defaults.

Chrome Step4

5. A confirmation window will appear, click Reset settings to proceed.

Chrome Step5

1. Launch the Firefox browser and click the hamburger menu on the upper-right corner of the screen.

Firefox Step1

2. From the dropdown menu, scroll down and click on Help.

Firefox Step2

3. Inside the Firefox help menu, click More troubleshooting information.

Firefox Step3

4. Under Give Firefox a tune up, select Refresh Firefox… to reset the browser.

Firefox Step4

5. A confirmation window will appear, proceed by clicking Refresh Firefox.

Firefox Step5

1. Run Microsoft Edge and click on the three horizontal dots on the upper-right side of the screen.

Edge Step1

2. From the dropdown menu, select Settings.

Edge Step2

3. Open the hamburger menu, scroll down, and select Reset settings.

Edge Step3

4. Inside Reset settings, click on Restore settings to their default values.

Edge Step4

5. A confirmation window will appear, click Reset to proceed.

Edge Step5

After the web browser has finished resetting, download the important extensions you previously used, and pin the tabs you once had. Set it the way it was previously configured before the malware infection.

Step 3: Run additional malware scans

Antivirus engines may not detect new threats in the early stages of infection. It might be discovered sooner or later, but it could be too late for the infected computers.

However, new malware threats may contain some strings and signatures from previous malware in a database of other security software. As a result, other antivirus programs may identify it while others do not.

Since some antivirus software may have difficulty detecting the malware, we'll need more than one piece of protection software to help us detect and remove the dangerous threat.

Here's some good news: The programs mentioned below are completely free, which means you do not need to spend a dime to solve your malware problem. You can always use them anytime you feel your system is infected.

Please run the software individually. You can do so in any particular order.

  • Removal Tool
  • Emergency Kit
  • ESET Scanner
  • Malwarebytes
About the software

1. To start, download the Kaspersky Virus Removal Tool.

KVRT Step1

2. Once the download of the executable file (KVRT.exe) is complete. The program doesn't need to be installed on the computer, so you may begin running it straight away.

KVRT Step2

3. After reading the KSN Statement, Privacy Policy, and End User License Agreement, check the box indicating your agreement to the terms and conditions. To continue, click Accept.

KVRT Step3

4. Please wait for the system initialization process to finish, as the program will first check if your system is compatible.

KVRT Step4

5. Before we start scanning, we will have to set the scope of the scan. Click the Change parameters option to do so.

KVRT Step5

6. Check all the boxes to allow the computer to search through all of the disks and directories for malware. After that, click OK to return to the main screen.

KVRT Step6

7. We can now begin the scan; simply click the Start scan button, and the Virus Removal Tool will begin.

KVRT Step7

8. Await the scan's completion with patience. If there are any risks within the computer system, a notification will be displayed.

KVRT Step8

9. To completely remove the risks that the program has identified, click Delete from the drop-down menu of each discovered object.

KVRT Step9

10. Click Continue to remove the identified malware threats from your computer.

KVRT Step10
About the software

1. Download the Emsisoft Emergency Kit portable software.

Emsisoft Step1

2. You can launch the executable program (EmsisoftEmergencyKit.exe) directly from your downloads folder after downloading it.

Emsisoft Step2

3. Click Yes to let the program start on the computer when the User Account Control window appears.

Emsisoft Step3

4. Choose your program's destination folder and accept the license and maintenance terms. Next, click Install to continue.

Emsisoft Step4

5. Click Malware Scan on the homepage of the Emergency Kit application to start the scanning process. The amount of time it takes for the program to scan your computer will depend on how many files you have and the hardware capabilities of your system.

Emsisoft Step5

6. Emsisoft Emergency Scanner will display a list of the files that the program has detected when the scan is complete. To get rid of threats from your computer, click on Quarantine selected.

Emsisoft Step6

7. To complete the malware removal procedure, Emsisoft Emergency Scanner may also ask you to restart your computer. Simply click Reboot your system to finish the process.

Emsisoft Step7
About the software

1. Download the most recent version of ESET Online Scanner.

ESET Step1

2. After pressing the download button, the file (Esetonlinescanner.exe) should have been downloaded to your computer. It does not require any installations so you can simply run the aforementioned file.

ESET Step2

3. Before using ESET Online Scanner, it must be initialized. Choose your preferred language and click Get started. Continue as directed by the screen until the homepage appears.

ESET Step3

4. Click Computer scan from the homepage, then select Full scan from the three options available.

ESET Step4

5. Give ESET Online Scanner the permission to detect and remove potentially unwanted apps by ticking the Enable option. After that, click Start scan to begin the scanning process.

ESET Step5

6. Await the completion of the malware scan for your machine by the ESET Online Scanner. ESET Online Scanner would have automatically removed the threats it found after the scan. To complete the malware cleanup process, click Proceed.

ESET Step6
About the software

Note: We will only use the free version of Malwarebytes because it includes all of the capabilities we require.

1. Download the latest version of Malwarebytes Anti-malware.

Malwarebytes Step1

2. Malwarebytes will start downloading (MBSetup.exe) the installation file. Run the executable after the download is complete.

Malwarebytes Step2

3. To allow the program to execute, simply click Yes in the User Account Control window that may appear.

Malwarebytes Step3

4. The Malwarebytes setup wizard will now open; select Install to continue.

Malwarebytes Step4

5. You will be prompted by Malwarebytes to install the Browser Guard extension. Depending on whether you want it on your browser or not, you can choose to download it (the extension is completely free).

Malwarebytes Step5

6. Please wait as the Malwarebytes Setup installs itself. Follow the on-screen instructions until you have successfully installed Malwarebytes.

Malwarebytes Step6

7. Start by launching Malwarebytes Anti-malware for the first time after it has been installed. If you're installing Malwarebytes for the first time, you'll get a 14-day free trial of the premium version.

Malwarebytes Step7

8. After the program takes you to the main dashboard, click the Scanner box in the middle to start scanning the computer.

Malwarebytes Step8

9. You won't click Scan just yet when you get to the Scanner page. Rather, select Advanced scans as shown below.

Malwarebytes Step9

10. In the Custom scan section, click Configure scan. We will be able to alter the way the software scans the computer as a result.

Malwarebytes Step10

11. To detect hidden malware, click the box next to Scan for rootkits on the Configure Custom Scan screen. Additionally, to enable Malwarebytes to scan every drive on your computer, check the boxes next to each one.

Malwarebytes Step11

12. Once the Custom Scan options have been adjusted, click the Start Custom Scan button to get started.

Malwarebytes Step12

13. A side window displaying the computer scan's progress will appear. Please wait until Malwarebytes has completed its malware scan of the entire system.

Malwarebytes Step13

14. Following the completion of the scan, a list of threats found will appear. Check the boxes near all the malicious files and get rid of them from the computer by clicking the Quarantine button.

Malwarebytes Step14

If prompted, please restart your computer since Malwarebytes may require it.

Protect your browser against malware

As the saying goes:The biggest vulnerability is the person behind the screen

So, here are some tips and what you need to know in order to keep your device safe and malware-free in the long run.

Keep every software installed up to date

Make sure that all of the programs in your computer is up-to-date with the latest version released by the developer. The reason behind this is that these updates frequently tackle bugs and issues that malware actors often exploit.

The same goes for your computer's operating system, make sure Windows is up-to-date with the latest software update to prevent malware from exploiting a hidden vulnerability.

Avoid downloading files from unknown sources

One of the biggest sources of malware infection in a computer system is third-party installations. This happens when a user downloads a certain program from sources that are not the official download links. Some of the common types of sources where malware is present are torrent files, cracked software, and games.

Be careful with opening email attachments

Malware often disguises itself as resumes and quotations and threat actors often send thousands of these infected emails to company employees around the world in order to infiltrate their network.

Always check where your emails are coming from as there may be a chance that the project attachment you received via email did not actually come from a co-worker.

Do not visit unreputable websites

Avoid visiting websites that contain unfiltered advertisements such as illegal streaming websites, cracked software platforms, and links sent out to you by somebody you do not trust.

These sites are often linked to redirect chains that load once you click on an ad element on the page. Following this chain often leads to drive-by malware and phishing pages that an average user may eventually fail to notice.

Leave a comment