RADriskell

so, if I shut off all of them it boils down to the equalizer, which when i turn it back on alone, re-start chrome, it triggers the error message. The mistake I made earlier is not killing all tabs of chrome to reproduce the error while re-launching the browser. Right now i have all of the extensions enabled, less the equalizer, and it is clear sailing. I still find it harrowing that chrome shows 10+ iterations open in the task manager at any given time, and where all of those connections lead? Thank you for the help!

Bed time, I will be back in the morning!

Done, attached 08.05.2018_01.22.54.zip

Files are attached. Thank you for the prompt reply! Addition.txt FRST.txt

The only extensions I have active are Google Play Music, Adobe Acrobat, and Google Documents. I turned off the equalizer extension for Google Play Music but it did not stop the bad behavior.

Hello. I posted a reply on another thread, but feel it may be better to start a new thread. I am receiving continuous popups for "threats from "worldnaturenet.xyz", and "ydpi.pw" I am on a brand new machine with the most recent Chrome update. I have very few extensions, google play music, adobe acrobat, and one equalizer for play music. The threat popups state that I am being saved from fraud web sites. The logs are pasted below. Any resolution would be much appreciated. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/6/18 Protection Event Time: 9:05 PM Log File: e9b3bb9c-51ab-11e8-a466-10653021a1ca.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5012 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Fraud Domain: worldnaturenet.xyz IP Address: 104.31.66.140 Port: [63360] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) ------------------------------------------ Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/6/18 Protection Event Time: 9:05 PM Log File: e986c09c-51ab-11e8-a8f7-10653021a1ca.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5012 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Fraud Domain: ydpi.pw IP Address: 104.18.62.228 Port: [63355] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end)

and sorry that was worldnaturenet.xyz, as described in my pasted report

I too am now suffering this issue, and i really do not have much installed in the way of extensions or plugins. For that matter, this computer is brand new and I have just recently installed my applications. I am getting constant alerts for worldnet.xyz and ydpi.dw. Just registering for and getting to this page I had to dismiss maybe 30 popups. What the heck is going on? -------------------------------------------- Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/6/18 Protection Event Time: 9:05 PM Log File: e9b3bb9c-51ab-11e8-a466-10653021a1ca.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5012 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Fraud Domain: worldnaturenet.xyz IP Address: 104.31.66.140 Port: [63360] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) ------------------------------------------ Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/6/18 Protection Event Time: 9:05 PM Log File: e986c09c-51ab-11e8-a8f7-10653021a1ca.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5012 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Fraud Domain: ydpi.pw IP Address: 104.18.62.228 Port: [63355] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end)