Jump to content

Websites/connections trying to be launched from chrome automatically


mcb1221
 Share

Recommended Posts

I keep getting messages saying that websites are being blocked from launching in Chrome. Here are some of the log files...

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/4/21
Protection Event Time: 6:14 PM
Log File: afc80d88-5568-11ec-a1b3-50465d08cbe9.json

-Software Information-
Version: 4.4.11.149
Components Version: 1.0.1513
Update Package Version: 1.0.48162
License: Trial

-System Information-
OS: Windows 10 (Build 19042.1348)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: kebapcimuhtar.com
IP Address: 159.253.44.104
Port: 80
Type: Outbound
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/4/21
Protection Event Time: 6:14 PM
Log File: b08df584-5568-11ec-8605-50465d08cbe9.json

-Software Information-
Version: 4.4.11.149
Components Version: 1.0.1513
Update Package Version: 1.0.48162
License: Trial

-System Information-
OS: Windows 10 (Build 19042.1348)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: RiskWare
Domain: securecd-smnd.com
IP Address: 34.227.220.17
Port: 443
Type: Outbound
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 12/4/21
Protection Event Time: 6:14 PM
Log File: b0790df4-5568-11ec-b345-50465d08cbe9.json

-Software Information-
Version: 4.4.11.149
Components Version: 1.0.1513
Update Package Version: 1.0.48162
License: Trial

-System Information-
OS: Windows 10 (Build 19042.1348)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: 
IP Address: 37.1.209.213
Port: 80
Type: Outbound
File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(end)

 

The last one I posted has been popping up multiple times. It is trying to make a connection to that IP address and is reoccurring. There are more log files but I didn't think I needed to share them all. I did a fresh update and did a system scan and no threats were detected. Please help, I am really worried about this.

Link to post
Share on other sites

I had a quarantined item in my recycle bin which I deleted but windows popped up a message saying that there were corrupted filed in my recycle bin and wanted me to empty it. It then wanted me to grant administrator privilege's in order to do so. I did not grant privilege's as I thought this message was part of the malware plus there was nothing in my recycle bin.

 

Link to post
Share on other sites

  • 3 months later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.