abox Posted July 19, 2018 ID:1257495 Share Posted July 19, 2018 Hi, my malwarebytes blocks something called "clearload.bid" when i go to adf.ly. it also blocks the same thing when opening Google Chrome. i have ran multiple scans with malwarebytes but it doesn't find anything. I have no idea what is going on or what I should do. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 19, 2018 Root Admin ID:1257548 Share Posted July 19, 2018 Hello @abox and Please follow the directions from the following topic. Then let me know if that resolves the issue or not. Thanks Ron Link to post Share on other sites More sharing options...
abox Posted July 20, 2018 Author ID:1257642 Share Posted July 20, 2018 Hi AdvancedSetup, I just tried that but it didn't work. Malwarebytes still blocks it on adf.ly and when opening Chrome. Thanks for the quick reply. -abox Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 20, 2018 Root Admin ID:1257671 Share Posted July 20, 2018 Are you specifically going to adf.ly on purpose? Please run the following steps and post back the logs as an attachment when ready.STEP 01 If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. If you don't have Malwarebytes 3 installed yet please download it from here and install it. Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply. If Malwarebytes won't run then please skip to the next step and let me know on your next reply. STEP 02 Please download AdwCleaner by Malwarebytes and save the file to your Desktop. Right-click on the program and select Run as Administrator to start the tool. Accept the Terms of use. Wait until the database is updated. Click Scan. When finished, please click Clean. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Copy its content into your next reply. RESTART THE COMPUTER Before running Step 3 STEP 03 Please download the Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens, click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here. Please attach the Additions.txt log to your reply as well. Thanks Ron Link to post Share on other sites More sharing options...
abox Posted July 20, 2018 Author ID:1257673 Share Posted July 20, 2018 Yes, I am going to the adf.ly site on purpose. If i try to click an adf.ly link Malwarebytes blocks the site due to riskware. FRST.txt Malwarebyteslog.txt Addition.txt AdwCleaner[S00].txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 20, 2018 Root Admin ID:1257674 Share Posted July 20, 2018 Must be a specific link within that site. I visited it with no issue and I've checked our rules and they're not blocking that site either. Let me review your logs. Please go grab the Protection log from Malwarebytes under REPORTS and post back the most recent one that shows a block. Link to post Share on other sites More sharing options...
abox Posted July 20, 2018 Author ID:1257675 Share Posted July 20, 2018 Do you mean this? Report.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 20, 2018 Root Admin ID:1257680 Share Posted July 20, 2018 Yes, that has to be due to an extension or change in Google Chrome. Please ensure you disable and remove all of your Sync data from Chrome. Repeat my post #2 to reset Chrome. It's quite late for me so I'm leaving, but will check back on you again sometime tomorrow Thanks Ron Link to post Share on other sites More sharing options...
abox Posted July 20, 2018 Author ID:1257690 Share Posted July 20, 2018 I have no extensions in google chrome, sync data is removed, sync is off. But malwarebytes blocks the same thing on every browser i have, so it might not be only chrome that has something. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 20, 2018 Root Admin ID:1257696 Share Posted July 20, 2018 Please runt the following. I'll check back on you again sometime tomorrow Thanks Ron Link to post Share on other sites More sharing options...
abox Posted July 20, 2018 Author ID:1257717 Share Posted July 20, 2018 No malwares detected. Should i send the mbar-log.txt and system-log.txt? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 20, 2018 Root Admin ID:1257815 Share Posted July 20, 2018 No, if it was clean that's good. This site is blocked for a Trojan: clearload.bid This site is not blocked: adf.ly The log you sent also shows clearload.bid as being blocked not adf.ly It's possible that one of the scripts for the file you're trying to access is either directly or cross-site linked to clearload.bid and why it's blocked. Can you try another link? Link to post Share on other sites More sharing options...
abox Posted July 21, 2018 Author ID:1257861 Share Posted July 21, 2018 I tried another link. Still blocks the "clearload.bid". Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 21, 2018 Root Admin ID:1257871 Share Posted July 21, 2018 (edited) Please send me a private message with a link to what you're trying to download and I'll check it. My guess though is that it is part of the marketing and money making schemes these sites use. If that's the case and you want to use it then you'll need to add an exclusion to that site in order to use the link. We won't remove the block for that site as it can potentially be harmful to users. Edited July 21, 2018 by AdvancedSetup Link to post Share on other sites More sharing options...
abox Posted July 21, 2018 Author ID:1257925 Share Posted July 21, 2018 Do i send the adf.ly link? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 21, 2018 Root Admin ID:1257927 Share Posted July 21, 2018 Yes, send to me in a private message what it is you're trying to get to and what you're trying to download. Thanks Link to post Share on other sites More sharing options...
abox Posted July 21, 2018 Author ID:1257931 Share Posted July 21, 2018 Did you get the message? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 21, 2018 Root Admin ID:1257937 Share Posted July 21, 2018 I got your message and replied. The resulting link is to a website that is blocked for Trojan activity and trying to infect your computer. Please do not click that link anymore. The main site adf.ly is okay, but the created link it links to is the bad site. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 21, 2018 Root Admin ID:1257940 Share Posted July 21, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts