Do more on the web, with a fast and secure browser!

Download Opera browser with:

  • built-in ad blocker
  • battery saver
  • free VPN
Download Opera

[Solved]Unknown extension keeps being downloaded onto Opera.

  • @ihsanrocks Then there is a program doing it.
    Check the startup tab in Windows task manager. Anything suspicious?

  • @leocg Yea I just saw one, its called Node.js: Server-side JavaScript

  • @leocg After deleting temps, nothing happened, I restricted access to that specific folder to everyone after I deleted the contents and now its in the Public Users folder. It just keeps popping up somewhere new each time I block access to a folder.

  • @ihsanrocks It sounds like you have a system-level malware infection that is self-replicating... in such cases, simply trying to delete the current manifestation of it is like the whack-a-mole game - each time you hit it, it pops up somewhere else. You might try going to a reputable malware-removal "helps" site (like Malwarebytes Windows forum, etc) to get some detailed removal assistance. You're probably going to have to install some specialized removal tools under expert guidance to beat down whatever hooks have been placed into your system that keep re-activating the malware.

  • @blackbird71 Ok Ill go to their forums now and ask the same question. Thank you.

  • If I were in your situation and the laptop was new I would revert it back to how it was when you got it . Did you make any backups over the period that you could go back too ?
    I personally only instal programs that are essential to my use of the computer. I also only instal full installers after running them through Virustotal first.
    I don't know how many programs you have installed but the more you have the more likely possibility of malware, which is why you should have done a backup before you added Any programs etc.
    You may want to consider a standalone installation of Opera at some point. Use add/remove to remove opera and then delete your Opera profile directory in its entirety. Then do a search on your system for Opera and hopefully you won't find it showing. Then reinstal Opera from an offline installer and select the stand alone option. Then change path to C/program Files/Test leaving out the word Opera. All operas files including your new profile will then end up in that or its sub directorys. Then place a shortcut to the .exe file on desktop. Should anything strange then happen with Opera you can delete the above folder. I don't know what other programs you installed but are they well known and did you run the installers through Virustotal ? IMO as you havn't had the laptop very long I would go back to the beginning and start reinstalling programs one by one always remembering to backup,backup etc. Also nearly forgot to add you may need to check any USB sticks you have used for infection. This is only my point of view but go to the malware forums like "bleeping computer" etc and get instructions from them.

  • You know, you might try the reverse. Rather than removing the extension just disable it.

    But you will need to go into the Windows task manager and disable whatever is installing it if you can guess what that is. Until then removing it is pointless.

  • @sgunhouse Thank you all for your help, and I was able to get some help in the Malweabytes forums from other people who are experts in this stuff. If anyone experiences this same problem, here is the link to the other forum which gave the solution.

    So far the extension hasn't redownloaded itself, and for anyone who does experience this problem, don't just disable it, or just remove it every time it can still get your saved google passwords. Anyone experiencing such a problem with an extension, weather it be wOptRank or anything else, please follow the steps given by the guy in the above forums. Only follow his first step as the second post he uploaded was after he saw my reports and was designed for my computer, so doing so could destroy your PC.

  • @ihsanrocks Thank you for following up here after getting your solution. It may help others in the future find a pathway out if they should run into something similar.

  • @blackbird71 Yea no problem, because a few weeks ago I also tried searching for stuff like this and nothing appeared. But there is one thing which I must mention, the step which all people can do only removes the malware program, but there will still be a few files from the extension that remains in your computer. To fix that, I recommend anyone facing this issue to also ask in the Malwarebytes forums, and they will be able to help you with the small details that helps remove this virus completely. But the first thing I recommend is enable 2FA in your email. The extension was taking all my passwords and emails and stuff, and even added filter to block all emails from google and such. So to help things to not go that far, enable 2FA, as they cant get your brain or your mobile, check your trash mail regularly, as they will delete a lot of stuff, and finally, dont be hasty in anything. Be careful, and dont try to be an expert if your not.