PLZ Help with Malvertising & a Phishing Website!
al corriente: 07-Mayo-2023 | 8:42AM · 17 Respuestas · Enlace permanente · Translation:
Hello,
Thank You for taking the time to read my post! :o)
I am 83 years old and have recently moved into a Senior Citizen (Community) home, hence prior too I had to engage in a great deal of downsizing & belt-tightning...
I saved some money (short term), yet also had to put up with trade-offs...
For one, there is ONE ISP provider for the entire building (basic cable) and all of us share the Wi-Fi which slows down internet speed (obvious when watching streaming movies which stall/refresh dozens of times).
My Room did not come with pre-installed (basic cable) box, hence I had to wait for a VERY, VERY, VERY, long time until my tv was hocked up to said basic cable box.
So, as not to die from boredom, I turned to internet tv (Tubi) as a substitute until I would, eventually, have my basic cable box installed.
I had my HP laptop hookedup to my flatscreen tv via USB cable thus this worked for a while.
Eventually I grew tired of tubi and was curious about other FREE online tv providers (streaming or VOD).
Via Google Search Engine (Google Chrome) I discovered goku.to. Norton Safe Search (Green dot with white checkmark next to google goku.to hyperlink). Norton Safe rating. Under full report TV/Video Streams (rather then saying piracy/malware).
So, I visited goku.to and, via their internal search engine, bookmarked movies & series to be watched at a latter date.
I was surprised by the "download" option below screen right which I did not make us off, yet had me suspicious all the same.
I watched goku.to for about 2-3 days when suddenly MBAM Security Pop-Up appeared warning of malvertising! (see below)
MBAM
Website blocked due to malvertising
cstoeydbhdgrip.com
139.45.197.154
443
Outbound
C:\Program Files\Google\...e\Application\chrome.exe
This was not an isolated incident it happened again another 3 times (different letters before .com such as edncewvfadqrkr.com)
SO, LONG STORY SHORT, MY QUESTION IS IS FOLLOWING SUFFICIENT TO DEAL/UNCOVER MALVERTISING?
1.) I removed the goku.to bookmark within my Google Chrome Browser.
2.) I cleared Google Chrome History
3.) I ran MBAM Premium (offline) No Infections (0 threats).
4.) Updated Norton 360 (Live Update) and ran Quick Scan (0 threats), Full Scan (0 threats), Smart Scan (0 threats) and then ran Norton Power Eraser.
ANYTHING ELSE THAT I SHOULD DO?
Plus...
I also ran afoul via yet another google search (for series streaming) and received the ALL CLEAR from Norton Safe Search (green dot plus white checkmark next to hyperlink). (see below)
https://fmovies.to/series/the-girls-guide-to-depravity-vvwy6/2-5
I watched one episode of a series on fmovies.to (all okay) and later, when I returned to said website to watch episode two suddenly Norton made an appearance albeit late, "Dangerous Website."
Okay, how come did I not get the warning upfront rather then later (delayed?). And suddenly there is an red dot with white X (Norton putting the cart in front of the horse?).
Norton ("Dangerous Website" Full Report) on fmovies.to was a privacy/id concern (phishing). So, THEY have my IP address???
I removed the fmovies.to bookmark from my Google Chrome Browser and ran all the scans (0 threats) plus ran Norton Power Eraser..
WHAT ELSE SHOULD I DO?
I thank you in advance for all of your help and understanding & am looking forward to feedback from the "Good People" on these forums.
Re: PLZ Help with Malvertising & a Phishing Website!
al corriente: 08-Mayo-2023 | 6:14AM · Enlace permanente
Again, Norton objected when I tested with uBlock Origin Off.
Norton as I recall was quiet for the brief time I tested with uBlock Origin On.
I simply reported as I observed regarding goku.to and fmovies.to ... for what it's worth.
If you have concerns. Maybe, ask Malwarebytes Forum to check your machine.
Malwarebytes Malware Removal Help
https://forums.malwarebytes.com/forum/108-malware-removal-help/