Wbsite Blocked every time I open Edge - Trojan Horse - cable-solutions.com

[dotuniversal]

Hello.

Every time I open Microsoft Edge (both normal and dev versions), a notice saying "Website blocked due to Trojan" appears (domain: cables-solutions.com)

Even when I close all the tabs, and reload the browser without any tabs opened, the message appears.

I've already ran a full scan (Kaspersky and Malwarebytes, with rootkit enabled), but there are no detections.

I'll attach the image and file of the error file.

Is this a false positive?

Best regards.

MalwareBytes - Website blocked due to Trojan - cable-solutions.com - 173.201.183.5 - Microsoft Edge - 09-04-2023.txt

[1PW]

Hello @dotuniversal and :

While you are waiting for the next qualified/approved malware removal expert helper to weigh in on your topic, and even though you may have run the following Malwarebytes utility, or its subsets, please carefully follow these instructions:

1. Download the Malwarebytes Support Tool.
2. In your Downloads folder, open the mb-support-x.x.x.xxx.exe file.
3. In the User Account Control (UAC) pop-up window, click Yes to continue the installation.
4. Run the MBST Support Tool.
5. In the left navigation pane of the Malwarebytes Support Tool, click Advanced.
6. In the Advanced Options, click only Gather Logs. A status diagram displays the tool is Getting logs from your computer.
7. A zip file named mbst-grab-results.zip will be saved to the Public desktop, please attach that file in your next reply to this topic. Please do NOT copy and paste.

For the short time between when you post the diagnostic logs, and when your helper weighs in, please take no further self-directed remedial actions that will invalidate the diagnostic logs you will have sent.

Thank you.

[Maurice Naggar]

Hello  @dotuniversal

I will guide you along on looking for remaining malware. Lets keep these principles as we go along. Please run the report cited above so that I can review and guide you.

• Removing malware can be unpredictable
• Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• Only run the tools I guide you to.
• Do not run online games while case is on-going. Do not do any free-wheeling web-surfing.
• The removal of malware isn't instantaneous, please be patient.
• Cracked or or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also big source of current trojan infections. Please uninstall them now, if any are here, before we start the cleaning procedure.
• Please stick with me until I give you the "all clear".
• If your system is running Discord, please be sure to Exit out of it while this case is on-going.

I doubt that the IP block is some 'false positive'. The Block notice is about a "outbound attempt to reach the IP Address: 173.201.183.5 ".
The Malwarebytes website protection is keeping your system safe from potential harm.

[dotuniversal]

Hello.

Here is the mb-support file.

Best Regards.

mbst-grab-results.zip

[dotuniversal]

By the way, I've just captured a Netlog from Edge (so I can see what traffic is going to that IP), and the relevant line is attached to file.

It appears that is in the activeFieldTrialGroups

 

 

 

Netlog cable solutions Edge.txt

[Maurice Naggar]

Hello. Thanks for the support zip report. But please, no further "netlog". I notice this machine has Kaspersky Total Security, which includes a firewall. One imagines that K T S is protecting this system. As far as web browser, for the time being, try to use another web browser, other than Edge. The block notices are happening when EDGE is in use.

( 1 ) Please set File Explorer to SHOW ALL folders, all files, including Hidden ones. Use OPTION ONE or TWO of this article
Please use this Guide

( 2 ) Next action step:
Disable ( turn OFF ) Fast Startup

https://www.windowscentral.com/how-disable-windows-10-fast-startup
Then restart the computer

 

( 3 )

Please run the following custom script. Read all of this before you start. Please Close all open work.

Once the script-run has been completed, please attach the file FIXLOG.TXT to your next reply

Farbar program :  is FRSTENGLISH.exe which is already on Downloads

Please download the attached fixlist.txt file and save it to Downloads folder

Fixlist.txt < - - -

NOTE. It's important that both files, FRSTENGLISH, and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Use File Explorer to go to the Downloads folder

RIGHT-Click on   FRSTENGLISH and select

RUN as Administrator

and reply YES to allow it to go forward to start.

That is important so that this run has Elevated Administrator rights !!

NEXT press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Downloads folder (Fixlog.txt) . Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files.  It will reset the Winsock , plus Hosts. It will attempt to clear all Cache and history on web browsers. Depending on the speed of your computer this fix may take 45-50 minutes or more. 

The system will be rebooted after the fix has run. Attach FIXLOG.txt with next reply.

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks