Potential Threat?

Norton Security | Norton Internet Security
1

Hi all,

i keep on getting a the following web page opening up in my browser, can anyone tell me how to stop it from happening.

https :// noriskdomain . com/fdbe136efe09008353650b66f1911327/analyze?u=aHR0cHM6Ly93d3cubWljc m9zb2Z0LmNvbS9lbi11cy93aW5kb3dzL2ZlYXR1cmVz&s=e239 2548d3652c18f216a1551b4e1bf74e34 f258&t=fdbe136efe09008353650b66f1911327

I am currently using Microsoft Edge to access the internet.

Thanks in advance 

Mark

[Edit: Removed hyperlink to a potentially malicious page to conform with the Participation Guidelines and Terms of Service]

2

Safe Web Report for: webnavigator.co
https://safeweb.norton.com/report/show?url=webnavigator.co = CAUTION

png_7412.png

3

FWIW ~ as test ~ starting over from opening post

Filename: Click HERE to start the WebNavigator Browser Installer_96035n_.exe
Full Path: c:\Users\bjm\Desktop\Click HERE to start the WebNavigator Browser Installer_96035n_.exe

Developers 
Better Cloud Solutions LTD

Version 
2.2.0.6

Identified 
8/21/2020 at 12:37:27 PM

Many Users
Tens of thousands of users in the Norton Community have used this file.

New
This file was released 13 days ago.

Good
Norton has given this file a good rating.


hxxps: //download. webnavigator. co/cgi/adk/chrstubdl. cgi?user_id=f9203c7d-49c5-4802-903e-c75d51511ed5&source=d-cp10377976785-cg2-lp1-obem-wbn-bb8-ab10-w64-brwsr&adprovider=AppFocus1&implementation_id=wbx_&domain=webnavigator. co&dfn=Click HERE to start the WebNavigator Browser Installer&re_url=noriskdomain. com
Downloaded File Click HERE to start the WebNavigator Browser Installer_96035n_. exe from download. webnavigator. co

Click HERE to start the WebNavigator Browser Installer_96035n_.exe

File Thumbprint - SHA:
3ace4cc2e440b30e39307efc6980f713db7ffc99e37aa648a293cfe40c72734d
File Thumbprint - MD5:
2fb8f187d5c181fad90fee57267c4a58


3ace4cc2e440b30e39307efc6980f713db7ffc99e37aa648a293cfe40c72734d
BrowserInstaller
-
https://www.virustotal.com/gui/file/3ace4cc2e440b30e39307efc6980f713db7ffc99e37aa648a293cfe40c72734d/detection

4

47743c9a8d81d449a6c7d2df09c07a8c2cda9d389064a5d0a36c1d797df79d76
webnavigatorbrowser_exe
-
https://www.virustotal.com/gui/file/47743c9a8d81d449a6c7d2df09c07a8c2cda9d389064a5d0a36c1d797df79d76/detection

5

FWIW ~ 

Filename: webnavigatorbrowser.exe
Full Path: C:\Users\user\AppData\Local\WebNavigatorBrowser\Application\webnavigatorbrowser.exe

Developers 
Better Cloud Solutions LTD
Version 
2.2.0.6
[...]
Many Users
Thousands of users in the Norton Community have used this file.
New
This file was released 10 days ago.
Bad
There are many indications that this file is untrustworthy.

Source File:
webnavigatorbrowser.exe

System Change
[...]

File Thumbprint - SHA:
47743c9a8d81d449a6c7d2df09c07a8c2cda9d389064a5d0a36c1d797df79d76
File Thumbprint - MD5:
1b7ec12290e2b4cb4a784cb15575e7b3

as always, your mileage may vary

6

FWIW ~ 

PUP.Optional.BrowserIO is Malwarebytes’ detection name for a desktop search bar published by Better Cloud Solutions LTD designed for Windows systems.

https://blog.malwarebytes.com/detections/pup-optional-browserio/ 

7

FWIW ~ 

https://webnavigator.co/terms.html

https://webnavigator.co/privacy.html

8 
hxxps://noriskdomain.com/fdbe136efe09008353650b66f1911327/analyze?u=aHR0[..]zL2ZlYXR1cmVz&s=e239254[..]34f258&t=fdb[..]0b66f1911327

FWIW ~ with my content blocker off

hxxps://webnavigator.co/?adprovider=AppFocus1&source=d-cp[..]785&group=cg2&device=c&keyword=&creative=4[..]1&adposition=none&placement=noriskdomain.com&target=boomuserlist%3A%3[..]1&sl=&caid=10377976785&gw=1&test=://mail&gclid=EAI[..]SAAEgJErvD_BwE

png_7390.png

https://safeweb.norton.com/report/show?url=https://noriskdomain.com/fdbe136efe09008353650b66f1911327/analyze 

https://safeweb.norton.com/report/show?url=https://webnavigator.co/

9

Um, have you reviewed:

png_7392.png

https://forums.tomsguide.com/threads/chrome-keeps-opening-noriskdomain-website-why.456365/

If your Microsoft Edge browser is constantly being redirected to unwanted sites or advertisements are popping up while you browse the Internet, then it is possible that you have malware installed on your computer.

https://malwaretips.com/blogs/remove-microsoft-edge-popup-ads/

If your browser homepage or search queries are being redirected to unwanted or suspicious sites, then you have a browser hijacker installed that is causing these redirects.

https://malwaretips.com/blogs/browser-toolbar-removal/