WillerWalla Posted November 23, 2020 ID:1422751 Share Posted November 23, 2020 I get a popup-warning every time I connect to a website. The warning comes up when I go to all normal sites, such as google and the like. As I understand it, the call comes from some program in my computer. How do I solve this? How do I find out which software is sending the call? Can I block the call so I avoid the warning? -Logginformation- Datum för skyddshändelse: 2020-11-23 Tid för skyddshändelse: 13:13 Loggfil: 3b7bcc82-2d85-11eb-91aa-c85b76088c05.json -Programvaruinformation- Version: 4.2.3.96 Komponentversion: 1.0.1104 Uppdatera paketversionen: 1.0.33312 Licens: Testversion -Systeminformation- OS: Windows 10 (Build 19041.630) CPU: x64 Filsystem: NTFS Användare: System -Information om blockerad webbplats- Skadlig webbplats: 1 , C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blockerad, -1, -1, 0.0.0, , -Webbplatsdata- Kategori: Trojan Domän: shortem.com IP-adress: 34.102.136.180 Port: 443 Typ: Utgående Fil: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) Link to post Share on other sites More sharing options...
nasdaq Posted November 23, 2020 ID:1422756 Share Posted November 23, 2020 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please Attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Please attach the logs for my review. Wait for further instructions p.s. This program is updated often. If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided. You should restore the program from the Quarantine folder. ==== Link to post Share on other sites More sharing options...
Solution WillerWalla Posted November 23, 2020 Author Solution ID:1422761 Share Posted November 23, 2020 Found the problem! It's a Chrome extension that calls the shady address. The culprit: "Adblock Plus for YouTube ™" Solution: Turned off the extension! Link to post Share on other sites More sharing options...
nasdaq Posted November 23, 2020 ID:1422828 Share Posted November 23, 2020 Hi, Thank you for the feedback. If anything else run the Farbar program and attach the logs. Stay safe. Link to post Share on other sites More sharing options...
Maurice Naggar Posted December 18, 2020 ID:1427935 Share Posted December 18, 2020 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts