Jump to content

Keep getting website blocked due to riskware outbound


nokojohn

Recommended Posts

  • Staff
14 minutes ago, nokojohn said:

I can't seem to locate this file but malwarebytes keeps notifying me it blocked it. I run scan and it shows everything is fine. I think I had a phishing attempt and I shutdown the desktop while they were attempting to take control remotely. How can I remove this?

bad file phish.txt 938 B · 0 downloads

Hello-

This file appears to be the culprit:

ScreenConnect.ClientService.exe

If you trust the file you can keep it, if you are unsure where it came from I'd delete it.

The url that is blocked is asupportcareDOTlive for potential riskware

Link to post
Share on other sites

7 hours ago, nokojohn said:

and yet I can't locate that file screenconnect.clientservice.exe either. I guess I could just keep ignore the malwarebytes notification of blocked website but otherwise i have no apparent file to remove after searching all drives.

Hi, have you checked this location?: C:\Users\JohnRiker2nd\AppData\Local\Apps\2.0\2OMWW332.69X\PYGD5QQ8.OB5\scre..tion_b15b0581876c57b7_0014.0002_a3702b16b1aaf415\ScreenConnect.ClientService.exe

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.