Possibly infected, blocked u.cubeupload.com when opening firefox

[esterme123]

As the title says, I'm not really sure why u.cubeupload.com is being blocked once in a blue moon when opening firefox.  Malwarebytes full scan doesn't come up with anything, neither does rogue killer, not windows defender.  Here's the FRST and addition logs.  Adwcleaner doesn't show anything either.

FRST.txt

Addition.txt

[kevinf80]

Hello esterme123 and welcome to Malwarebytes, Whilst i`m checking your logs can you post the last couple of blocks from Malwarebytes: Open Malwarebytes, select > Reports > then checkmark (tick) most recent "Website Block" entry > then select "View Report" > "Export" > Text File (*.txt) name and save that file to Desktop or somewhere of your choice, attach to your reply...   Just noticed your scan withFRST was not done from an account with Administrator status. Can you open FRST again from an account with the correct status and post two fresh logs...   Run FRST one more time from an account with Administrator status, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"   Thanks, Kevin..

Edited November 6, 2018 by kevinf80

[esterme123]

Here.

blocked1.txt

[kevinf80]

Hello esterme123,

Can you recheck my initial reply, i`ve just edited the instructions...

Thanks,

Kevin

[esterme123]

Here.

FRST.txt

Addition.txt

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Please download Zemana AntiMalware and save it to your Desktop.   Install the program and once the installation is complete it will start automatically. Without changing any options, press Scan to begin. After the short scan is finished, if threats are detected press Next to remove them. Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please re-boot your computer manually.   Open Zemana AntiMalware again. Click on icon and double click the latest report. Now click File > Save As and choose your Desktop before pressing Save. Attach saved report in your next message. Let me see those logs in your reply.. Thank you, Kevin...

fixlist.txt

[esterme123]

Here

Fixlog.txt

2018.11.06-01.41.17-i0-592-d0.txt

[kevinf80]

Do the blocks still happen...?

[esterme123]

Not at the moment, no, it was random prior.  Sometimes, it'd only happen once per week, other times, twice a week.

[kevinf80]

Thanks for the update, there is no real indication in the logs to give a definite reason for the blocks. If this is sporadic I guess we`ll have to wait and see, or as Firefox is showing as the route cause in the blocks we can make a clean install of Firefox..

Make a "Clean" install Firefox: Use the following link for instructions how to back up your bookmarks, same link can be used to import saved Bookmarks: https://support.mozilla.org/en-US/kb/export-firefox-bookmarks-to-backup-or-transfer Next, Remove all synced data from Firefox to stop possible re-infection or exploitation. https://support.mozilla.org/en-US/questions/1037353 Next, Go here: http://www.mozilla.org/en-US/ download save the latest version of Firefox.. We will install this later... Next, Lets totally remove Firefox and start over. Go here: https://support.mozilla.org/en-US/kb/uninstall-firefox-from-your-computer and follow those instructions... Ensure when the uninstall completes to navigate to and delete the firefox installation folder (if present): (32-bit Windows) C:\Program Files\Mozilla Firefox (64-bit Windows) C:\Program Files (x86)\Mozilla Firefox It is essential the installation folder is removed. Re-boot your system when that is completed.... Next, To remove all remaining data and profile information... Press "Windows key + R" to open the Run box In the Run box, type in or copy and paste %APPDATA% Click OK. A Windows Explorer window will appear. In this window, choose/open in succession Mozilla > Firefox > Profiles. Select Delete on each entry in reverse, eg Profiles > Delete. Firefox > Delete. Mozilla > Delete. Re-boot your system when complete! Next, Use the Mozilla Firefox installer to reinstall your Browser.... When Firefox is installed and open select these keys together :- Ctrl - Shift - A that will access Addons manger, this gives access to find addons/extensions, use, start, stop or disable those features etc.... uBlock-Origin can be installed from here: https://addons.mozilla.org/en-GB/firefox/addon/ublock-origin/ <<--- Recommended.   Thanks,   Kevin..

[esterme123]

Awesome, thank you for your time!

[kevinf80]

You`re very welcome esterme123, continue to clean up FRST and Zemana..

Uninstall Zemana http://www.askvg.com/how-to-completely-uninstall-remove-a-software-program-in-windows-without-using-3rd-party-software/ Next, Right click on FRST here: C:\Users\mango\Downloads\FRST64.exe and rename uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator" If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall That action will remove FRST and all created files and folders...   Thank you,   Kevin...

 

[kevinf80]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks