Outbound connection blocked when visiting AT&T website

[Erinh]

The exact same thing has been happening to me the last couple days. First I get a notification from malwarebytes that it is blocked due to fraud then another one saying that it is blocked due to trojan. I only use chrome. I have not tried this on edge. And no other sites that I visit frequently are giving a problem. I have malwarebytes premium. I ran a full scan nothing came up. I downloaded the malwarebytes adware cleaner 7.2.7 ran it and only got one hit for slimware utilities inc, and a registry key for slimware utilities. Which I don't know if that has anything to do with this but I never downloaded this as far as I know. Anyway, I would like some help with this too. Seems odd that we both have the exact same problem at the same time. 

[Destry]

I am getting both the fraud and trojan popups as well. My friend called me because he was getting them and we went through all the steps we could find online to remove it, but nothing worked. So I installed malwarebytes to see if I would get the same thing, and I do. I've looked at both the browser developer tools Network Tab, and ran Fiddle to see what was accessing those domains, and nothing is showing up as sending traffic to either of them. I'm wondering if this is a false positive and something benign is tripping up Malwarebytes.

[LDTate]

Hello  Erinh and

Destry

You need to start your own topic. Pleased don't reply in other's topics.

Please follow the instructions here:

Erinh:

Please take your time.

 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

Download Malwarebytes Support Tool
https://downloads.malwarebytes.com/file/mbst?src=Forums-Reply

    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-X.X.X.XXXX.exe to run the program
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"
    Click the Advanced tab

Click the Gather Logs button

A progress bar will appear and the program will proceed with getting logs from your computer

Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK

Please attach the file in your next reply.

 

[Erinh]

I hope this is what you need. I also included the text files from when I ran adware cleaner. Removing that did not help with the problem I am having with the AT&T site. 

FRST.txt

Addition.txt

mbst-grab-results.zip

AdwCleaner[C00].txt

AdwCleaner[S00].txt

[LDTate]

Please take your time.

 

The issues appear to be only happening with Chrome.
We will need to create new profile.

If you have Chrome Bookmarks that you want to save, you want to do that first.
Export / Import Bookmarks.

https://support.google.com/chrome/answer/96816?hl=en

Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in.

• Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup)

• On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing.

Please make sure Chrome is closed before running the fix

Keep in mind the fix requires a restart of the computer

 

Next:
I have attached A file I need you to download and save it to the same place that you saved the FRST program

This fix will include removing temp files and emptying the Recycle Bin.

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

[Erinh]

That did not work🙁. I can't even access the site now at all. I provided a pic below to show you what happens when i do go on the AT&T site. Provided the two reports from MB showing first fraud then Trojan. This doesn't happen when I use edge. I notice if i go directly to the login page for AT&T https://www.att.com/. I get the notifications of fraud first, then Trojan. But If i go directly to the login page https://www.att.com/my/#/login, or any other page on the site it does not happen. Is there something else I should try before finally giving up on chrome?

Fixlog.txt

trojan mb.txt

fraud mb.txt

[LDTate]

Can you try running the fix I gave you again as it didn't work

[Erinh]

Tried again and that page is still giving me the issues. Also now when I even put AT&T in the search it gives me those warnings. 

Fixlog.txt

[LDTate]

Did you disable Chrome Sync before running the fixlist.txt

 

Open your Chrome on all devices using Chrome as we need to make sure Chrome sync doesn't allow it back in.

• Go to Settings > People > Sync (or alternatively, enter the following in the address bar: chrome://settings/syncSetup)

• On the page, you'll see what synced data is enabled. Move all sliders to the left in order to disable all the syncing.

[LDTate]

Try following the instructions here:

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks