WayneF3842 Posted October 8, 2020 ID:1412576 Share Posted October 8, 2020 I am using the Microsoft Edge browser and every time I open it I get the message that pops up saying Malwarebytes has blocked a trojan Cilkonlay.com. When I try to see what that is I come up with nothing as to what that is. My Grandson has been using my computer for zoom learning and said he has only been connected to his school. It hasn't caused ant trouble, but very annoying. Thank you. Link to post Share on other sites More sharing options...
Porthos Posted October 8, 2020 ID:1412577 Share Posted October 8, 2020 (edited) On 10/7/2020 at 7:57 PM, WayneF3842 said: am using the Microsoft Edge browser and every time I open it I get the message that pops up saying Malwarebytes has blocked a trojan Cilkonlay.com. Please read and follow the instructions in this topic, skipping any steps you are unable to complete, then creating a new topic in our malware removal area by clicking here and one of our malware removal specialists will assist you as soon as one is available. Edited October 19, 2020 by Porthos Link to post Share on other sites More sharing options...
paulchan7777 Posted October 19, 2020 ID:1415180 Share Posted October 19, 2020 On 10/7/2020 at 5:57 PM, WayneF3842 said: I am using the Microsoft Edge browser and every time I open it I get the message that pops up saying Malwarebytes has blocked a trojan Cilkonlay.com. When I try to see what that is I come up with nothing as to what that is. My Grandson has been using my computer for zoom learning and said he has only been connected to his school. It hasn't caused ant trouble, but very annoying. Thank you. I have similar problem today, very annoying to see the notifications. Have your problem been resolved yet? Link to post Share on other sites More sharing options...
WayneF3842 Posted October 19, 2020 Author ID:1415193 Share Posted October 19, 2020 Not yet. It only happens on Edge, I have contacted Microsoft support, but who knows how long it will take them to get back to me if ever. It shows It is outbound and is very annoying. In the meantime I switched my browser to Firefox and have no problem. Hope either Malwarebytes or Microsoft gets it figured out because I like the Edge browser because of it's speed and ease of use. Link to post Share on other sites More sharing options...
JeffLo Posted October 19, 2020 ID:1415201 Share Posted October 19, 2020 My sister reports the same issue on her Windows 10 machine using Edge. She had recently installed Zoom. Malwarebytes reports website blocked due to Trojan. Outbound on port 443, domain = Cilkonlay.com. I wold love to see this fixed as well. 1 Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415206 Share Posted October 19, 2020 It is happening to me on at least 2 of my 6 systems win 10 and CHROME very annoying Link to post Share on other sites More sharing options...
ashkelamy Posted October 19, 2020 ID:1415210 Share Posted October 19, 2020 Mine too with Chrome and Windows 10. It does NOT happen on espn.com, cnn.com, wsj.com, yahoo.com, amazon.com or nytimes.com But it DOES happen on foxnews.com Maybe some website analytics intermediary that fox uses. What websites are you seeing this behavior on? Link to post Share on other sites More sharing options...
ashkelamy Posted October 19, 2020 ID:1415218 Share Posted October 19, 2020 5 minutes ago, ashkelamy said: Mine too with Chrome and Windows 10. It does NOT happen on espn.com, cnn.com, wsj.com, yahoo.com, amazon.com or nytimes.com But it DOES happen on foxnews.com Maybe some website analytics intermediary that fox uses. What websites are you seeing this behavior on? It seems that cilkonlay.com is listed as a site that is currently serving up the "Lnkr ad injector" malware via browser extensions. Link to post Share on other sites More sharing options...
KenW Posted October 19, 2020 ID:1415219 Share Posted October 19, 2020 Happens with Chrome on Fox news Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415221 Share Posted October 19, 2020 I will chime in. This happens to me on Chrome base browsers only. This is either a FP or something nasty is getting blocked. I only tested on Fox News.com. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 10/19/20 Protection Event Time: 5:17 PM Log File: e6ab6db2-1258-11eb-8f26-001a7dda7102.json -Software Information- Version: 4.2.1.89 Components Version: 1.0.1070 Update Package Version: 1.0.31640 License: Premium -System Information- OS: Windows 10 (Build 19041.572) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: cilkonlay.com IP Address: 172.64.139.29 Port: 443 Type: Outbound File: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (end) Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 10/19/20 Protection Event Time: 5:24 PM Log File: e471a290-1259-11eb-88c0-001a7dda7102.json -Software Information- Version: 4.2.1.89 Components Version: 1.0.1070 Update Package Version: 1.0.31640 License: Premium -System Information- OS: Windows 10 (Build 19041.572) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: cilkonlay.com IP Address: 172.64.138.29 Port: 443 Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415222 Share Posted October 19, 2020 sp ,y version of windows complains bitterly about running your farber tool Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415226 Share Posted October 19, 2020 2 minutes ago, B-squared said: sp ,y version of windows complains bitterly about running your farber tool Ignore that. Could be a False positive. Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415227 Share Posted October 19, 2020 MY version of windows complains bitterly about your farber tool this is really annoying and I am increasingly underwhelmed with the behavior of malwarebytes Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415230 Share Posted October 19, 2020 and as an additional side comment it was even more annoying for you to suggest I get the premium version of malewarebyts as that is what I already have on my several systems Link to post Share on other sites More sharing options...
Rob800 Posted October 19, 2020 ID:1415231 Share Posted October 19, 2020 Once I closed Foxnews.com it stopped the warnings. So I wonder if Foxnews changed something on their site. Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415232 Share Posted October 19, 2020 1 minute ago, B-squared said: and as an additional side comment it was even more annoying for you to suggest I get the premium version of malewarebyts as that is what I already have on my several systems Where do you see that?? Link to post Share on other sites More sharing options...
Staff Solution thisisu Posted October 19, 2020 Staff Solution ID:1415236 Share Posted October 19, 2020 Hello, Just wanted to clear this up. It is being blocked due to this javascript file on the domain: hxxps://cilkonlay.com/2137bb8ccf3c973e8c.js More info: https://www.virustotal.com/gui/url/b1ef99078e03872e47f5c6afbb59cae2d46ee6b461e55cd5b04a19761fd84a20/details Best regards Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415237 Share Posted October 19, 2020 i am getting messages about the trojan every minute or so holy smoke! 14 minutes ago, B-squared said: sp ,y version of windows complains bitterly about running your farber tool Link to post Share on other sites More sharing options...
B-squared Posted October 19, 2020 ID:1415239 Share Posted October 19, 2020 the "consider upgrading to premium was in the text of go get the farber (sp?) tool and follow all of these instructions" note Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415241 Share Posted October 19, 2020 @thisisu Why does it only manifest on Chrome based browsers and not Firefox? I can guarantee my machine is clean and fully up to date. 1 Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415243 Share Posted October 19, 2020 4 minutes ago, B-squared said: the "consider upgrading to premium was in the text of go get the farber (sp?) tool and follow all of these instructions" note That is GENERAL instructions for all to follow when requesting help in that section. WE who are here do not know what you have or not. 21 minutes ago, B-squared said: MY version of windows complains bitterly about your farber tool For the future. Farbar is 1000%safe and is used on dozens of help forums around the world. You would just tell Defender to run any way. Link to post Share on other sites More sharing options...
JeffLo Posted October 19, 2020 ID:1415244 Share Posted October 19, 2020 In my case this is happening on Microsoft Edge Link to post Share on other sites More sharing options...
Porthos Posted October 19, 2020 ID:1415250 Share Posted October 19, 2020 It has gone away for me so far. Close your browser and reopen. Link to post Share on other sites More sharing options...
paulchan7777 Posted October 19, 2020 ID:1415256 Share Posted October 19, 2020 I turned off the notification, which had been very annoying. Link to post Share on other sites More sharing options...
WayneF3842 Posted October 20, 2020 Author ID:1415271 Share Posted October 20, 2020 I just did a windows update and when I restarted the computer it said ".HTML files was reset to Microsoft Edge" and that annoying popup is gone. I don't know why and don't really care it's gone and that's what matters. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now