Froide Posted July 22, 2019 ID:1324276 Share Posted July 22, 2019 Hi, Yesterday, I downloaded a Malaware Bytes Premium trial and now keep getting this error message when trying to login on the website of a major bank. I previously used the free version of Malaware Bytes, along with Norton and then Webroot security suites, and ever had this problem before. I saw the following thread, on the same topic, in Malware Removal Help > Windows Malware Removal Help & Support > Website Blocked Due to Trojan, but the text the OP was directed to download is no longer available. Therefore, I'm making this new post seeking help to resolve this. Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 22, 2019 ID:1324468 Share Posted July 22, 2019 Hi, @Froide My name is Maurice. I will be helping and guiding you, going forward on this case. We need to get information from this machine in order to have the proper detail to help you forward. NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Tool Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-1.4.0.615.exe to run the report You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Get Started!" Do NOT use the button “Start repair” ! Click the Advanced tab on the left column Click the Gather Logs button A progress bar will appear and the program will proceed with getting logs from your computer Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK Please attach the ZIP file in your next reply. Also, provide the link address to the front page of this bank. I would like to do a test on my own machine. also, be sure to tell me which web browser you used ( the last time) when logging in to this bank site. Thank you. Link to post Share on other sites More sharing options...
Froide Posted July 23, 2019 Author ID:1324533 Share Posted July 23, 2019 Hello Maurice Naggar, Thanks so much for your help! I have run the Malwarebytes Support Tool, run the report, and attached the zip file as instructed. The bank's home page is https://www.chase.com/ . The browser I used was the most up-to-date version of either MIcrosoft Edge or Google Chrome. [FYI, now, when I visit Chase.com from either of those browsers, I no longer get the "Website Blocked Due to Trojan" warning. Nonetheless, I want to continue this process to ensure my laptop is secured.] mbst-grab-results.zip Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 23, 2019 ID:1324645 Share Posted July 23, 2019 Hi, Thanks for the report. Thanks for the status information. Just by the way, the main page would be https://chaseonline.chase.com Just as an added by the way: Just do a new Update check on the Dashboard screen of Malwarebytes. Start Malwarebytes. Look on the right-most pane and do a Update check. Thanks for the report file you sent. The block events I see that were logged, show a block on "forwrdnow.com" & on "mybetterdl.com" when Chrome browser was in use. The block event notice does not mean there is a "infection". The web protection is protecting the PC and those were courtesy notices. Web protection is one of the features of Malwarebytes Premium. Premium has several layers of protection. Since this install is in "Trial" mode, those will cease when the 2-week trial period expires. Let's do one new Scan with Malwarebytes for Windows. Then let me know what the result is. Run a scan with Malwarebytes. Start Malwarebytes from the Start menu. Click Settings. Then click the Protection tab. Scroll down and lets be sure the line in SCAN OPTIONs for "Scan for rootkits" is ON Click it to get it ON Click the SCAN button. Select a Threat Scan ( which should be the default). Let me know the result of this scan. [ 2 ] See this article on our Malwarebytes Bloghttps://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/ You want to disable the ability of each web browser on this machine from being able to allow "push ads". That means Chrome, Firefox, or Edge browser (on Windows 10), or on Opera. Scroll down to the tips section "How do I disable them". [ 3 ] also, if you use Chrome or Firefox browser, install the Malwarebytes beta browser extension. There is one for Chrome & another for Firefox. To get & install the Malwarebytes beta Chrome extension, Open this link in your Chrome browser: https://chrome.google.com/webstore/detail/malwarebytes/ihcjicgdanjaechkgeegckofjjedodee Then proceed with the setup. To get & install the Malwarebytes beta Firefox extension. Open this link in your Firefox browser: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/ Then proceed with the setup. Sincerely, Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 27, 2019 ID:1325564 Share Posted July 27, 2019 Hi. Checking in with you. How is it going? Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 29, 2019 ID:1325886 Share Posted July 29, 2019 Hello. Re-checking with you. Are you still with us ? Link to post Share on other sites More sharing options...
Maurice Naggar Posted July 30, 2019 ID:1326329 Share Posted July 30, 2019 Hello. I have not heard back from you in several days. If we do not get a reply over the next two days, I may consider this case as abandoned & close it. Please advise on the status. Link to post Share on other sites More sharing options...
Maurice Naggar Posted August 2, 2019 ID:1327296 Share Posted August 2, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts