Notatious Posted October 19, 2017 ID:1174032 Share Posted October 19, 2017 (edited) This problem started yesterday and I'm confused as to what is causing it. At random times malwarebytes will give me 12 notifications that it blocked various malicious websites(outbound connection). For example, I will be watching a youtube video and half way through I will get the notifications, it doesn't happen consistently or when I open a new tab. I have literally not downloaded anything in the past week and scans from multiple antivirus programs have found nothing. https://gyazo.com/51eb36b6bb20fb533c154af4cfc4226c Here is an example of said reports, all are the same, except domain/IP/Port Help is appreciated, thanks. Edited October 19, 2017 by Notatious Link to post Share on other sites More sharing options...
kevinf80 Posted October 19, 2017 ID:1174041 Share Posted October 19, 2017 Hello Notatious and welcome to Malwarebytes, Follow the instructions at this link and post the requested logs: https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Thank you, Kevin Link to post Share on other sites More sharing options...
Notatious Posted October 19, 2017 Author ID:1174042 Share Posted October 19, 2017 FRST.txt Addition.txt Link to post Share on other sites More sharing options...
kevinf80 Posted October 19, 2017 ID:1174080 Share Posted October 19, 2017 Thanks for those logs, do not see any obvious malware, infection or any direct reason for the blocks. The outbound call is attributed to Chrome, the ip address and domain do flag as suspicious.... Continue as follows: Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Download AdwCleaner by Malwarebytes onto your Desktop. Or from this Mirror Right-click on AdwCleaner.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Accept the EULA (I accept), then click on Scan Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Clean button. This will kill all the active processes Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply Next, If the blocks continue lets go for a clean install of Chrome... If your Chrome Bookmarks are important do this first: Go to this link: http://www.wikihow.com/Export-Bookmarks-from-Chrome follow the instructions and Export your Bookmarks from Chrome, save to your Desktop or similar. Note the instructions can also be used to Import the bookmarks..... Continue for a clean install: Download Chrome installer and save to install later: https://www.google.com/intl/en_uk/chrome/browser/desktop/index.html https://www.google.com/intl/en_usa/chrome/browser/desktop/index.html Remove all synced data from Chrome go here: https://support.google.com/chrome/answer/6386691?hl=en-GB follow those instructions... It is essntial that any/all synced data is removed when the browser is hijacked or exploited in anyway... Uninstall Chrome: https://support.google.com/chrome/answer/95319?hl=en-GB follow those instructions, ensure the option to "Also delete your browsing data" is selected. <<--- Very important!! Navigate to C:\Users\Your user name\Appdata\Local from that folder delete the folder named Google (you will need to show hidden files/folders to see the folder Appdata) For XP that will be My Computer > C:\ Documents and Settings\Your User Name\Application Data\Roaming How to show hidden files and folders for windows: http://www.howtogeek.com/howto/windows-vista/show-hidden-files-and-folders-in-windows-vista/ Install Google Chrome : Install Adblock Plus to Chrome: https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb Install DrWeb Link Ant-virus Link Checker: https://chrome.google.com/webstore/detail/drweb-anti-virus-link-che/aleggpabliehgbeagmfhnodcijcmbonb?hl=en Does that help...? Thanks, Kevin... fixlist.txt Link to post Share on other sites More sharing options...
Notatious Posted October 19, 2017 Author ID:1174083 Share Posted October 19, 2017 Thanks for the help, I will let you know if the blocks continue to happen. Fixlog.txt AdwCleaner[C0].txt Link to post Share on other sites More sharing options...
kevinf80 Posted October 19, 2017 ID:1174086 Share Posted October 19, 2017 Thanks for the logs and update, yes keep me informed on any progress. Did you complete clean install of Chrome... Thank you, Kevin... Link to post Share on other sites More sharing options...
Notatious Posted October 19, 2017 Author ID:1174087 Share Posted October 19, 2017 I haven't uninstalled chrome yet, as I haven't had the blocks show up again so far. If they do though, I will. Link to post Share on other sites More sharing options...
kevinf80 Posted October 19, 2017 ID:1174105 Share Posted October 19, 2017 Ok thanks for the update, let me know what happens either way.... Link to post Share on other sites More sharing options...
kevinf80 Posted October 21, 2017 ID:1174810 Share Posted October 21, 2017 Any progress...? Link to post Share on other sites More sharing options...
kevinf80 Posted October 30, 2017 ID:1177264 Share Posted October 30, 2017 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts