Avast WEBforum

Other => Viruses and worms => Topic started by: ssmithben on December 05, 2022, 10:38:38 PM

Title: Message about protection from URL:Scam on wpad.co.uk every ten minutes
Post by: ssmithben on December 05, 2022, 10:38:38 PM

Hi
For days I've been getting a message from Avast (free version):
"We've safely aborted connection on wpad.co.uk because it was infected with URL:Scam"
Threat name: URL:Scam
URL: http://wpad.co.uk/wpad.dat
Process: c:\windows\system32\svchost.exe
Detected by Web Shield
Status: Connection aborted

There's no sign of how to stop it happening. I've tried scanning with Malwarebytes and found nothing. I've also reinstalled Google Chrome as I read somewhere that a similar issue was fixed by a Google Chrome reinstall.

Anyone have any experience of this?

Thanks

Title: Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
Post by: CraigB on December 06, 2022, 04:41:55 AM

Cleaning out browser cookies will help, then for future protection set your browser to block all Third Party Cookies.

Title: Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
Post by: polonus on December 07, 2022, 06:10:50 AM

Hi ssmithben,

First and foremost, do not put live links in your posting. This for obvious reasons.

The link is to a parked domain, and parked domains could be open to 'abuse all sorts'.
Re: https://www.virustotal.com/gui/url/cdec3d5301de51c3077d28976411938367d78a16cfb586a4e8f26d9cb60d0377/details
Also consider: https://www.abuseipdb.com/check/34.102.136.180?page=2   (spam & phishing etc.)

So avoid visiting such parked destinations,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

Title: Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
Post by: ssmithben on December 14, 2022, 07:53:51 PM

Hi Polonus

Thanks - that's a fair point. I won't do that again.

If that was first and foremost is there anything to come second and help with the issue? :)

Title: Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
Post by: polonus on December 15, 2022, 06:41:26 AM

Thanks. That's good conduct.

Clear your browser cache and history. Reset your browser to it's initial settings.

polonus