Malware blocked notifications in Chrome

[captainmazda]

For the past month, Avast has been blocking threats in Chrome, usually with the same log description as the screenshot I've attached. I did a scan with Malwarebytes and it couldn't find any threats so I decided to start a free trial to activate real-time protection. Now Malwarebytes constantly gives me notifications that it has blocked redirects/pop-ups from www.tradeadexchange.com and popcash.net. I reinstalled Firefox and immediately upon opening it, Malwarebytes blocked the redirect so I don't believe this a Chrome issue. I have tried disabling Adblock/Ublock from Chrome but it has not made a difference.

Avast, AdwCleaner, Windows Defender, and Spybot have not found any real threats beyond browser cookies. I even purchased Hitman Pro but it too has not turned up anything concerning. I don't have any unknown programs or processes and according to Avast's logs, this issue began around August 4th, 2017. No significant changes were made to the system at this time and I did not install any unknown programs.

Today's Malwarebytes log shows two new domains blocked: www.liveadexchanger.com and www.1-1ads.com. the 8/31 log shows a threat from preview.ibb.co.

I also added the following to my hosts file but it hasn't made a difference:

127.0.0.1    www.tradeadexchange.com
127.0.0.1    popcash.net

Any help in getting rid of this annoying issue would be welcome. I'm tired of seeing threat notifications. I am currently scanning with Sophos Virus Removal Tool and will post the log here when it's finished.

Cheers

 

AdwCleaner[S3].txt

HitmanPro_20170901_1356.log

malwarebytes8-30.txt

malware9-1.txt

malwarebytes8-31.txt

Edited September 1, 2017 by captainmazda

[captainmazda]

Sophos found nothing either, other than a false-positive keygen that I've had for years without issues. I deleted it regardless.

SophosVirusRemovalTool.log

[AdvancedSetup]

Hello @captainmazda and

Let's try cleaning the browser first and see if that works.

 

Please visit each of the following sites and let's reset all of your browsers back to defaults to prevent unexpected issues.
If you are not using one of the browsers but it is installed then you may want to consider uninstalling it as older versions of some software can pose an increase in the potential for an infection to get in.

Internet Explorer
How to reset Internet Explorer settings

Microsoft Edge
How to Reset Microsoft Edge in Windows 10

Firefox
Click on Help / Troubleshooting Information then click on the Refresh Firefox button.

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

• First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
  • 
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

[captainmazda]

Hey Ron, thanks for the reply. Been a few hours since the cleaning and still no malware notifications. Having to log back into all my accounts but so far so good.

[AdvancedSetup]

Great, sounds good. I'll go ahead then and close your topic now, but if you do need further assistance please let me know.

Take care

Ron

 

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!