meimeiriver2

Well, seems the JPEG you listed seems to have been removed. :) Like you linked, the correct mail address should be no-reply@mail.malwarebytes.com, and not no-reply@store-mail.malwarebytes.com, the way I received it. The scary part is, that my info in the invoice is all accurate.

My subscription is set to Auto-Renewal, yet I received an email today, with a topic of "The next payment for your subscription is due." The invoice has my correct contact information/addrss, but the email ais wrong: Malwarebytes <no-reply@store-mail.malwarebytes.com> (instead of 'store.mail') There's a link to what appears to be store.malwarebytes.com, but A), my payment isn't due, and B) th mail 'conveniently' reads "please make sure that your payment arrives at Cleverbridge no later than 5/19/2024," wheras auto-renewal is set for 05/22/2024.. P.S. I do not appreciate thar you are forcing people to use an open forum to report possible security breaches. For a security company that you are, there should be a private way to relay these matters to you. Even my profile page just lazily says to go to the forums for support.

At this point, feel free to close this case. I'm pretty sure it was the malvertising.

You may very well be right! That ublock progam is a godsent, btw! You wouldn't believe the unsavory URL's I already see it blocking. The site where this occurs on (a game forum I frequent a lot) has many ads being shown. It probably really *is* that site! It's a legit forum; but, like you say, malvertising could still be taking place on it. I already thank you kindly for your assistence! *Keeping fingers crossed*.

P.S. I forgot to mention this, but when it happens, it's always the far-right open tab that gets its URL changed; nothing in the middle or earlier.

Installed. But I hope we can find a solution too (as in removal of the malware), as blocking the URL's is something Malwarebytes already does as well. P.S. Haven't seen these hijack URL's in 2 days, btw (or Malwarebytes reports of them being blocked). But, then again, I haven't seen Malwarebytes (or Windows Defender, for that matter) report they removed anything, either.

Exactly. They're browser hijacks/redirects of an open tab, that suddenly gets changed to a malware site URL (and, like I said, Malwarebytes blocks these URL's now, but can't find anything fishy on my system).

Yes, the issue still persists. Even though Malwarebytes now identifies and blocks the typical 'youwinner' URL's since a few days, it hasn't been able to find the malware itself, though. These 'youwinner' URL's don't pop up often, btw (mostly when I first start up my system), but even once, is once too many.

I seem to have fallen victim to a browser hijacker, one that opens new tabs to a "Congratulations, You Have Won" page, saying I have possible won an iPhone, etc. I can't get rid of it. Malwarebytes doesn't find it, nor MS Defender, nor adwcleaner. I found a few pages that want you to download a (suspicious) tool called 'Reimage', a page Malwarebytes Premium (the version I have) blocks -- and probably, rightly so. Both IE and Chrome appear to be affected. log.txt Addition.txt FRST.txt

Thanks. Yeah, reinstall did it. Strange,.

P.S. Something is very wrong. It doesn't even protect any more. I just opened a pdf (with MBAE running), and nada notification.

Suddenly my MBAE doesn't start minimized any more (despite what some ppl say). I start it up, and it's not minimized. It doesn't even have a minimize button, LOL. And if I close it, it doesn't close to tray, but just exits altogether.