Criden Posted July 16, 2018 ID:1256949 Share Posted July 16, 2018 Malwarebytes blocks access to worldnaturenet.xyz, but no detections made when running scan Addition_16-07-2018 19.39.43.txt FRST_16-07-2018 19.39.43.txt Link to post Share on other sites More sharing options...
Aura Posted July 16, 2018 ID:1256978 Share Posted July 16, 2018 Hi Criden My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state. As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens As long as I'm assisting you on Malwarebytes Forums, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry! If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off; Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against Malwarebytes Forums's rules In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely goneThis being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread This being said, it's time to clean-up some malware, so let's get started, shall we? Are the blocks happening only when you open a specific web browser? If so, which one? Link to post Share on other sites More sharing options...
Criden Posted July 16, 2018 Author ID:1256981 Share Posted July 16, 2018 Hi Yoan, Thanks for coming back so quickly. I only use Chrome, but will try Explorer tomorrow and let you know. Best, C Link to post Share on other sites More sharing options...
Aura Posted July 16, 2018 ID:1256984 Share Posted July 16, 2018 One of your Chrome extension is the culprit then. Let's try this. Google Chrome - Remove Extension/App In Google Chrome, enter chrome://extensions in the address bar and press on Enter In the Extensions page, uninstall these (by clicking on the little garbage can icon on their right)AdBlock Acceptable Ads Ace Script If you don't see the extension listed, it means that it's installed as an App. So enter chrome://apps in the address bar and press on Enter From the Apps page, look for the app, right-click on it and select Remove from Chrome Link to post Share on other sites More sharing options...
Criden Posted July 17, 2018 Author ID:1257028 Share Posted July 17, 2018 Hi Yoan, This is odd. The browser was not trying to connect to worldnaturenet this morning, before I even did anything. However, I've taken your advice and removed Acceptable Ads and Ace Script. I believe Acceptable Ads was the culprit - I only noticed it yesterday, no idea where it came from. Thank you for your help, and for getting back to me so quickly. Best regards - Chris Link to post Share on other sites More sharing options...
Aura Posted July 17, 2018 ID:1257042 Share Posted July 17, 2018 If you're looking for an adblocker (and general purpose blocker), I suggest you uBlock Origin. Way better than the standard Adblock (which have whitelisted ads) as well. https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en Link to post Share on other sites More sharing options...
Criden Posted July 18, 2018 Author ID:1257245 Share Posted July 18, 2018 Many thanks Aura - uBlock works very well. Thank you for all your help. Link to post Share on other sites More sharing options...
Aura Posted July 18, 2018 ID:1257276 Share Posted July 18, 2018 No problem Criden, you're welcome! Stay safe Link to post Share on other sites More sharing options...
Aura Posted July 18, 2018 ID:1257277 Share Posted July 18, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts