foxydeal.com malware

[nosunkcosts]

I'm running the latest Malwarebytes and unfortunately it's not catching this pesky malware that causes Chrome to throw up this error message when I visit certain sites.

How can I investigate this further and fix it?

Thank you all very much.

[jasco215]

I am having the same problem. Started a day or two ago after uninstalling some free software.

[alvarnell]

I don't know enough about that particular infection to tell you whether it is being caused by something on your Mac or just a javascript on the site that's redirecting you to that site.

The red box appears to be a legitimate warning from Google's Safe Browsing system that protects you from visiting known malicious sites.

VirusTotal also tells me that Fortinet and Google SafeBrowsing believes it to be malicious, but no others.

I'm confused by the url shown "https://support.malwarebytes.com". Was that the site you were visiting when the warning showed up. If not, where were you trying to go when you were redirected to client.foxydeal.com?

At the far right end of chromes address bar click on the three vertical dots then "More Tools->Extensions" and tell us what extensions you have installed.

You may end up needing a good Ad Blocker extension to prevent malvertising on some sites from causing this.

[nosunkcosts]

Thanks for your suggestions, @alvarnell. On @treed's advise (DM), I tried disabling each of my extensions one by one and it turned out the culprit was "Adblock for Youtube™". It would throw that message when I visited seemingly random sites (eg. nytimes.com, forums.malwarebytes.com), and started happening only a few days ago. I've reported it on the "Adblock for Youtube™" support service: https://chrome.google.com/webstore/detail/adblock-for-youtube/cmedhionkhpnakcndndgjdbohmhepckk/support?hl=en-US

I just hope the extension was trying to generate benign advertising popups.. rather than anything more malicious like steal information.

Edited September 23, 2017 by nosunkcosts