Outbound Trojan Blocked but Nothing Found?

[PixelHeart]

So about half an hour ago, I received two notifications (one minute apart) on my Malwarebytes premium trial about an 'outbound trojan' from Chrome being blocked. Below is the report-

 

Malwarebytes

www.malwarebytes.com

 

-Log Details-

Protection Event Date: 7/2/20

Protection Event Time: 7:37 PM

Log File: 2ef50b1a-bcd6-11ea-8613-a44cc848e22c.json

 

-Software Information-

Version: 4.1.0.56

Components Version: 1.0.955

Update Package Version: 1.0.26325

License: Trial

 

-System Information-

OS: Windows 10 (Build 19041.329)

CPU: x64

File System: NTFS

User: System

 

-Blocked Website Details-

Malicious Website: 1

, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0

 

-Website Data-

Category: Trojan

Domain: mcmoutletonline.com

IP Address: 172.67.149.230

Port: 443

Type: Outbound

File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

------------------------------------------

However, when I scan my system, it doesn't find anything. My question is this: Is there a trojan lurking on my computer that Malwarebytes can't seem to find? I've also read that this kind of block can come from banner/in-browser ads, is that possibly the case if it can't locate anything on my computer? No new notifications have popped up since then, and my computer hasn't acted any differently since those notifications, as far as I can tell anyway. I used adwcleaner and it only found a PUP file, which I quarantined and deleted anyway. Coming back from the system restart and everything seems okay so far. Any help on this matter would be really appreciated.

[Maurice Naggar]

Hi,    
My name is Maurice. I will be helping and guiding you, going forward on this case.
Let me know what first name you prefer to go by.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.
If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible.
 
Please only just attach   all report files, etc  that I ask for as we go along.

.

The Block notices from Malwarebytes web protection do mean that Malwarebytes Premium is keeping your pc safe from potential harm.
A block notice is an advisory of the "block".
 
It  indicates that a potential risk was blocked by the malicious website protection.
The Malwarebytes web protection, by default, will always show each  block occurrence.
The Malwarebytes Webs protection feature will advise customers when a known or suspected malicious IP is attempted to be reached (outgoing) or is trying access your PC.

See our info page https://www.malwarebytes.com/lp/ip-blocking/?ipblock=true

Incoming block notice can be ignored, the Malwarebytes Premium real-time protection is blocking the threat and there is nothing more that can be done.
On Outbound blocks, any attempted connection was stopped.

No action is required unless you’re also experiencing malware symptoms or there are multiple (different) IPs (ex;123.23.34 and 4.44.56).

.

I am going to suggest these next steps as just initial first steps.   They are aimed about the Chrome browser.

Lets set the  Google Chrome's     SYNC to Off.

Use the Chrome browser  to go to https://www.google.com/settings/chrome/sync and sign into your account.
Scroll down until you see the "reset sync" button and click on the button
At the prompt click on "Ok".

[   2   ]

for Chrome, while Chrome is running:
Press & hold SHIFT+CTRL+Del keys  on keyboard to get menu for clearing browsing data:

Check mark the line  "Browsing history"

Check mark the line "Download history"

Check mark the lined "Cached images and files"
and press Clear Data button  ( in blue )

 

[   3   ]

After that, make real sure that Chrome is "NOT" set to reload the pages from the last session

Go into the settings menu of Chrome by first clicking  the control icon of Chrome on upper right of the address bar

Then look deeper in SETTINGS

Make real sure it is "NOT" set to "continue where you left off"

.

[     4    ]

See this article on our Malwarebytes Blog
https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

 

You want to disable the ability of each web browser on this machine from being able to allow "push ads". That means Chrome, Firefox, or Edge browser (on Windows 10), or on Opera.

Scroll down to the tips section "How do I disable them".

 

[   5   ]

I suggest you install the Malwarebytes Browser guard for Chrome.

To get & install the Malwarebytes Browser Guard extension for Chrome,

 

Open this link in your Chrome   browser: 

https://chrome.google.com/webstore/detail/malwarebytes/ihcjicgdanjaechkgeegckofjjedodee

 

Then proceed with the setup.

Sincerely.

[Maurice Naggar]

Good afternoon.   How are things at this point?

[AdvancedSetup]

Are you still with us @PixelHeart

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks