Jump to content

Dashke

Staff
  • Posts

    5,829
  • Joined

Posts posted by Dashke

  1. 3 minutes ago, pmneve said:

    Malwarebytes
    www.malwarebytes.com

    -Log Details-
    Protection Event Date: 10/17/20
    Protection Event Time: 2:52 PM
    Log File: 17cb0246-10c3-11eb-950e-5404a6b207c3.json

    -Software Information-
    Version: 4.2.1.89
    Components Version: 1.0.1045
    Update Package Version: 1.0.31518
    License: Premium

    -System Information-
    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: System

    -Blocked Website Details-
    Malicious Website: 1
    , C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe, Blocked, -1, -1, 0.0.0, , 

    -Website Data-
    Category: Trojan
    Domain: cdn-edge-dynamic-5-bhs-ca-ovh.gogcdn.net
    IP Address: 54.39.180.109
    Port: 443
    Type: Outbound
    File: C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe

    (end)

    Hello,

    Since the IP seems clean now, the block will be removed.

    If you need additional help, please let us know. Thanks!

  2. 16 minutes ago, siverus said:

    Hi.

    Can you explain, please, why i.ijjiii.is domain was marked as Trojan? What should I do to change this mark?

    Your website is redirecting users to malicious extensions.

    If you remove the redirect, we can disable the block.

  3. Please contact Weebly support and ask them for an assistance in removing the infected pdf which is hosted here -

    http://files.ryancamarda.com/uploads/1/3/0/7/130775921/7e8eca1ae9f530d.pdf

    You should inspect your 'uploads' folder and remove all files that are not known to you. Also I would recommend you to change your account password.

    The PDF file is redirecting users to malvertising networks and PUPs.

  4. This is a webskimmer - 

    it is usually a piece of malicious JavaScript (JS) code embedded in web payment pages to perform skimming. Such malware arrives on target pages via a compromised third-party script service. Web skimmers were designed to retrieve customer payment information.

    Magecart is a group known to use web skimmers. For more information, see this blog post on how you can protect yourself from Magecart and other e-commerce attacks -

    https://blog.malwarebytes.com/cybercrime/2018/09/how-to-protect-your-data-from-magecart-and-other-e-commerce-attacks/

    Your system should be fine as it usually doesn't infect the systems. :)

    If you are suspicious that your PC might be infected, you can create a topic here -

    https://forums.malwarebytes.com/forum/7-windows-malware-removal-help-support/

    • Thanks 1
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.