Avast WEBforum

Other => Viruses and worms => Topic started by: Gunjan on January 13, 2022, 07:43:56 PM

Title: Recurring Virus Notice
Post by: Gunjan on January 13, 2022, 07:43:56 PM
Hello,

This error started this evening after my brother downloaded a couple of software and some other files. But they were all from trusted sources and when we custom scanned them, no error was found. However, whenever I browse the internet, only reliable sites like google docs and YouTube, this one error constantly appears within random intervals of a time.

"We've safely aborted connection to s.viixie.com because it was infected with URL:Scam."

Everytime this is the same site which shows error even though I did not tried to establish a connection. But the complete URL has slight alterations which gets changed with error...I am not sure what to do.

I don't understand why this is happening, please help.

Alert ID: 60a22cf6a9fb/220114.0230+0800
Title: Re: Recurring Virus Notice
Post by: Pondus on January 13, 2022, 07:54:46 PM
Try clear your browser surf history

Still problems, then you may have a browser extension that try to Connect to that url
Disable one by one to find it

Title: Re: Recurring Virus Notice
Post by: polonus on January 15, 2022, 02:20:03 PM
Pondus points you in the right direction to eliminate this browser hijacker.
Things you could while being assisted by a qualified malware remover for instance at Malwarebytes forum.
Considerations, do not do this on your own accord.

As Pondus states, this could be a malicious extension.
Or use both startkey and R and look for appwiz.cpl  and then uninstall.

Go to Control Panel. Look for suspicious entries. Uninstall it/them.
Type msconfig in the search field and hit enter. A window will pop-up:
Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

Hold the Start Key and R –  copy + paste the following and click OK:
notepad %windir%/system32/Drivers/etc/hosts
A new file will open.
Whenever you are hacked, there will be a loadof other IPs connected to you at the bottom.
Go to the MalwareBytes forum and ask for a qualified removal expert to help you cleansing.

polonus