Jump to content

Keep getting pup accessing web sites


Recommended Posts

10/18/2023

Hello, I keep getting pup's when I access a web site e.g.:  

https://thegatewaypundit.com/

 

When I do get the pup's, I continually quarantine them.

What can I do to prevent getting the pup's all the time?

Please see attachments.

Thank you, Emery St. Martin

Malwarebytes threat scan results 10182023.jpg

Malwarebytes info 10182023.docx

Edited by AdvancedSetup
Disabled hyperlink
Link to post
Share on other sites

  • Root Admin

The real site blocked is: 

content.garretttrails.org

There appears to be a link on thegatewaypnudit that links to that domain. Perhaps an Ad or an article that may link to it. We are not blocking the actual thegatewaypundt website.

There are currently 15 AV vendors that are blocking that site from garretttrails

https://www.virustotal.com/gui/url/e00f3e5b3742f6d6464b6ab379d6aa1d6b63d883a3ff93cfeabf7c6801cf99f4

 

 

image.png

 

image.png

 

 

Sandbox analysis shows it's malicious as well

https://www.joesandbox.com/analysis/1292866/0/html

 

I would not ignore it. If anything perhaps contact thegatewaypundit and let them know about the link and block.

 

Edited by AdvancedSetup
Updated information
Link to post
Share on other sites

  • Root Admin

After you update the program, please restart the computer. Then get me some logs, please.

 

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply

Thank you

 

Link to post
Share on other sites

10/20/2023 Hello Root Admin ID:1595697

Ref: Keep getting pup accessing web sites - Windows Malware Removal Help & Support - Malwarebytes Forums                                                                                                      I updated MB and restarted my computer. Today I downloaded MB support tool and have the mbst-grab-results.zip file on my desktop and will attach it on my reply. Note: I’ll send a Private Message if needed.

 

 

mbst-grab-results.zip Malwarebytes scan report exported 10202023.txt

Link to post
Share on other sites

  • Root Admin

Please run the following fix

 

NOTE: Please read all of the information below before running this fix.

  • NOTICE: This script was written specifically for this user, for use on this particular machine.
  • Running this on another machine may cause damage to your operating system that cannot be undone.

Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply

Farbar program:   FRSTEnglish.exe

Save the attached file:  FIXLIST.TXT to this folder C:\Users\Emery St. Martin\Downloads\

NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it.

 

 

Run the Farbar program with Admin rights and press the Fix button just once and wait.

The fix may possibly take up to 60 minutes to complete

If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply.

 

  1. NOTE:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity.
  2. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed.
                Also, make sure you know the passwords for all websites as cookies may possibly be removed in some cases, but not all cases.
  3. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.

The following directories are emptied:

  • Windows Temp
  • Users Temp folders
  • Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
  • Recently opened files cache
  • Discord cache
  • Java cache
  • Steam HTML cache
  • Explorer thumbnail and icon cache
  • BITS transfer queue (qmgr*.dat files)
  • Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

Link to post
Share on other sites

  • 3 weeks later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.