Jump to content
fruitflavoured

Outbound connections to sketchy sites when chrome starts, scans find zilch

Recommended Posts

As the title suggests, when I start Chrome I get sketchy outbound connection attempts to brighton.com, venturead.com and a bunch of other sites.  This is not tied to a specific page.

Malwarebytes finds nothing.  Hitman Pro finds nothing.  Windows Defender finds nothing.  I have reset my browser.  I have dumped my cache.  I have checked out my browser extensions.  I have gone through my running processes.  I'm finding nothing.  And yet the problem persists.  

I have attached my Malwarebytes Threat report, which finds nothing.  I have attached FRST's report and additions.txt, nothing in which seems particularly interesting.  The Deluge torrent program is the only really questionable item I am running and I haven't heard anyone complain about it yet.  It is only launched on demand and is not running all the time.  I have also attached a Malwarebytes blocked outbound connection attempt example.  

Any thoughts?

Addition.txt

FRST.txt

malwarebytesReport.txt

malwarebytesReport-example.txt

Share this post


Link to post
Share on other sites

Sorry, this didn't work for me.  Most of the instructions didn't apply or were already done.  

Malwarebytes scan and Hitman Pro scans do not detect this threat.  

Sync is disabled in Chrome, so nothing is being synched.

Google is my default search engine, all others are gone.

New tab is a blank page.  

AdwCleaner does not find anything wrong.

The only place I could see this happening was with the Premium Trial version of Malwarebytes (now expired sadly) showing me a popup that it blocked an attempt to access a bad site - as per the attached files above.  

Share this post


Link to post
Share on other sites

Well without our Protection Module running it would be very difficult to locate. It is a bad entry in your Chrome browser though pretty sure. Thousands of reports on the Web of very similar issues and cleaning Chrome or full uninstall and removing all folders and reinstall will fix it for 99% of users with this issue.

You can do the following as well which is another level of clearing Chrome and other browsers without actually removing Chrome.

 

Please visit each of the following sites and let's reset all of your browsers back to defaults to prevent unexpected issues.
If you are not using one of the browsers but it is installed then you may want to consider uninstalling it as older versions of some software can pose an increase in the potential for an infection to get in.

Internet Explorer
How to reset Internet Explorer settings

Microsoft Edge
How to Reset Microsoft Edge in Windows 10

Firefox
Click on Help / Troubleshooting Information then click on the Refresh Firefox button.

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

  • First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
  • Scroll down until you see the  reset_chrome_sync.png "reset sync" button to clear your data from the server and remove your passphrase.
  • Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
  • Press the Windows key + R at the same time, to bring up the run dialog box.
    • run_command.png
  • Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\
  1. Press Ctrl + A to select all the files and folders.
  2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
  3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
  4. Example of all files and folders selected, except Bookmarks

chrome_files_folders.png

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.