PeterM Posted October 19, 2020 ID:1415155 Share Posted October 19, 2020 cilkonlay.com comes up every couple minutes and is blocked. Can't find it. How do I stop this and what is it? Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted October 19, 2020 Staff ID:1415156 Share Posted October 19, 2020 ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes for Windows Help forum. If you are having technical issues with our Windows product, please do the following: Malwarebytes Support Tool - Advanced Options This feature is designed for the following reasons: For use when you are on the forums and need to provide logs for assistance For use when you don't need or want to create a ticket with Malwarebytes For use when you want to perform local troubleshooting on your own How to use the Advanced Options: Spoiler Download Malwarebytes Support Tool Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next Navigate to the Advanced tab The Advanced menu page contains four categories: Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand. Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot. Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent. Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program. To provide logs for review click the Gather Logs button Upon completion, click OK A file named mbst-grab-results.zip will be saved to your Desktop Please attach the file in your next reply. To uninstall all Malwarebytes Products, click the Clean button. Click the Yes button to proceed. Save all your work and click OK when you are ready to reboot. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows. Select Yes to install Malwarebytes. Malwarebytes for Windows will open once the installation completes successfully. Screenshots: Spoiler Spoiler If you are having licensing issues, please do the following: Spoiler For any of these issues: Renewals Refunds (including double billing) Cancellations Update Billing Info Multiple Transactions Consumer Purchases Transaction Receipt Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help If you need help looking up your license details, please head here: Find my premium license key Thanks in advance for your patience. -The Malwarebytes Forum Team Link to post Share on other sites More sharing options...
exile360 Posted October 19, 2020 ID:1415158 Share Posted October 19, 2020 Greetings, Please follow the instructions in this topic then create a new topic in our malware removal area by clicking here and a malware removal specialist will guide you in checking and cleaning your system of any threats. Thanks Link to post Share on other sites More sharing options...
PeterM Posted October 19, 2020 Author ID:1415163 Share Posted October 19, 2020 mbst-grab-results.zip Link to post Share on other sites More sharing options...
exile360 Posted October 20, 2020 ID:1415275 Share Posted October 20, 2020 Please follow my instructions above to post in our malware removal area; the web block appears to indicate that you have an infection. You should also select only one antivirus and remove the others; you currently appear to have COMODO, Webroot and Bitdefender (though Bitdefender may just be leftover traces). Link to post Share on other sites More sharing options...
PeterM Posted October 20, 2020 Author ID:1415333 Share Posted October 20, 2020 I do not have Comodo at all. I have Webroot and MBAM. Windows defender is off. I am thinking that this blocked site if you read it is part of MS Edge browser that I am using. See above attachment I post3ed right after "application". Link to post Share on other sites More sharing options...
exile360 Posted October 20, 2020 ID:1415347 Share Posted October 20, 2020 Yes, it's something in your browser causing the blocks. Possibly an infection or PUP which is why I asked that you follow the instructions above to seek assistance in our malware removal area. Regarding AVs, here's what I'm seeing in the logs: AntiVirus Information ================================== Anti-Virus Product : Webroot SecureAnywhere Up To Date: Yes Enabled: On Anti-Virus Product : Webroot SecureAnywhere Up To Date: Yes Enabled: On Anti-Virus Product : Windows Defender Up To Date: Yes Enabled: Off Anti-Virus Product : Webroot SecureAnywhere Up To Date: Yes Enabled: On Anti-Virus Product : Webroot SecureAnywhere Up To Date: Yes Enabled: On Anti-Virus Product : COMODO Cloud Antivirus Up To Date: Yes Enabled: On (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe HKLM\...\Run: [CL-25-CBE71890-2783-4ABC-A9D8-C82A4630DE3E] => C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-25-CBE71890-2783-4ABC-A9D8-C82A4630DE3E\setuplauncher.exe [853920 2020-07-16] (Bitdefender SRL -> Bitdefender) HKLM-x32\...\Run: [WRSVC] => C:\Program Files\Webroot\WRSA.exe [4906232 2020-10-05] (Webroot Inc. -> Webroot) AV: Webroot SecureAnywhere (Enabled - Up to date) {EA22F846-E33A-0128-9418-185509C86920} AV: Webroot SecureAnywhere (Enabled - Up to date) {4646A877-74EB-CD3B-8FDB-210DB94FA61A} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Webroot SecureAnywhere (Enabled - Up to date) {DF901FA1-F926-253B-C464-B01C79DCAD48} AV: Webroot SecureAnywhere (Enabled - Up to date) {A16A5B28-D1C0-417E-771B-123558EECC69} AV: COMODO Cloud Antivirus (Enabled - Up to date) {08B84BA8-CC77-5A8B-A100-3F522B1B6106} AS: Webroot SecureAnywhere (Enabled - Up to date) {FD274993-52D1-C2B5-B56B-1A7FC2C8ECA7} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} The extra AV entries may just be leftovers, however the web blocks coming from Edge are likely due to some piece of malware, Potentially Unwanted Program (PUP), or something such as a push notification in the web browser triggering the blocks which needs to be removed. Link to post Share on other sites More sharing options...
PeterM Posted October 20, 2020 Author ID:1415351 Share Posted October 20, 2020 Have not seen that block notification today. I did not know Bitdefender was in there. I have deleted it. Link to post Share on other sites More sharing options...
exile360 Posted October 20, 2020 ID:1415353 Share Posted October 20, 2020 Yeah, it was probably some leftover traces. Were you seeing the blocks occur any time you used MS Edge, or were they happening even when the browser wasn't open? Link to post Share on other sites More sharing options...
PeterM Posted October 20, 2020 Author ID:1415356 Share Posted October 20, 2020 With using Edge not FF. Not when no browser was open. Link to post Share on other sites More sharing options...
exile360 Posted October 20, 2020 ID:1415357 Share Posted October 20, 2020 (edited) OK, and was it showing up only when visiting a particular website, or pretty much all the time? You said it showed up around every 2 minutes which makes it sound like it was probably something in the browser such as an add-on/plugin or push notification like what's described in this Malwarebytes Labs article; that article. The info at the bottom of the article may help in tracking down and removing it if it's only a push notification. If it's a PUP or malware, you'll need to head to the malware removal area to get it checked out and cleaned up. Edited October 20, 2020 by exile360 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now