Malwarebytes blocking outbound connection when using Stickypassword

[StephenK]

Hi there

Malwarebytes keeps blocking an outbound connection when using StickyPassword.  MB isn't picking up any infections in my daily scans.

Not sure exactly what is going on here and what to do so would appreciate advice.

Thanks

 

[Porthos]

42 minutes ago, StephenK said:

Malwarebytes keeps blocking an outbound connection when using StickyPassword. 

Were you trying to access equifax.com.au?

[StephenK]

5 minutes ago, Porthos said:

Were you trying to access equifax.com.au?

No, not intentionally.

[Porthos]

11 minutes ago, StephenK said:

No, not intentionally.

Have you used the site and saved it in sticky password?

[StephenK]

8 minutes ago, Porthos said:

Have you used the site and saved it in sticky password?

No I haven't

[Porthos]

For now, We will wait for researchers check the site.

[StephenK]

1 minute ago, Porthos said:

For now, We will wait for researchers check the site.

Thanks for your help.

[Dashke]

Thank you StephenK for reporting this domain, the block will be removed.

[StephenK]

33 minutes ago, Dashke said:

Thank you StephenK for reporting this domain, the block will be removed.

Just to clarify, what exactly is that domain? It's not harmful? 

[StephenK]

3 hours ago, StephenK said:

Just to clarify, what exactly is that domain? It's not harmful? 

I guess I'm also trying to understand why I would be redirected to www.equifax.com.au via Sticky Password at all?  It's not a site I've ever accessed, and do not have it in Sticky Password.  It didn't really make sense to me, which is why I thought that the alert from MalwareBytes could well be a valid block of a phishing attempt?

 

[thisisu]

On 12/20/2021 at 3:02 AM, StephenK said:

Just to clarify, what exactly is that domain? It's not harmful? 

Hello,

No, that domain doesn't appear harmful. I'm not sure why Sticky Password is shown to be the application communicating with the domain. You might want to visit here just to get someone to look through your diagnostic logs if you're still interested.

I realize this is a long shot, but just out of curiosity, do you have a program installed called "finPOWER Connect" by Intersoft Systems? It's a file I see that communicates with that domain according to this.

 

 

[StephenK]

50 minutes ago, thisisu said:

I realize this is a long shot, but just out of curiosity, do you have a program installed called "finPOWER Connect" by Intersoft Systems? It's a file I see that communicates with that domain according to this.

No, I don't have that program.

Given that StickyPassword was trying to access an outbound connection that wasn't expected, perhaps it was actually correct for MalwareBytes to block it as a phishing attempt?

[Porthos]

@StephenK

Please follow the instructions in this topic then create a new topic in our malware removal area by clicking here and a malware removal specialist will guide you in checking and cleaning your system of any threats.  They will be able to help you to determine whether your system is truly clean or not.