Website blocked - Spyware: u(dot)cubeupload.com

[AHA-Lambda]

Hi I just activated a Premium trial of Malwarebytes and yesterday while browsing on a forum I frequent, a number of times a MalwareBytes notification came up stating that a website had been automatically blocked by the name of cubeupload with the reason of spyware. Now, the part that has me concerned is that it listed this as originating from chrome.exe and was an outbound connection though.

Since yesterday though this hasn't happened again, and I've done a full custom scan on MalwareBytes and it's found nothing at all.

I attach the log from MalwareBytes of the first instance that this happened. If anyone can provide more info or advice to provide peace of mind or a resolution, that would be really great!!

block report.txt

[AHA-Lambda]

Sorry, forgot the FRST logs!!

Addition.txt FRST.txt

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your logs are clean.

Stay safe.

 

[AHA-Lambda]

Hi, this seems to be happening again?

I'm getting popups from MalwareBytes about blocked websites due to spyware (outbound connections), but scans are coming back clean. Any advice?

PSA updated logs.

mwb log.txt Addition.txt FRST.txt

[nasdaq]

Hi,

Your logs are still clean.

2 possible scenarios.

Reset Chrome...
Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset and clean up" > "Restore settings to their original defaults"
 
Restart Chrome.
<<<>>>

If the problem persists and you Sync Chrome with other devices reset the Sync.

Read this article and proceed.

Chrome Secure Preferences detection always comes back
https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

===

Let me know if the problem persists.

[AHA-Lambda]

Thank you, hopefully that helps.

I think I may have discovered the reason for the pop ups also; think it's coming from certain images that may be hosted on pages of forums that I frequent. So seems that Malware Bytes is doing it's job well!

[nasdaq]

Good catch.

Stay clean.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks