Author Topic: Infection: URL:Mal  (Read 4361 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Infection: URL:Mal
« on: November 05, 2016, 12:16:46 AM »
Hi everybody,

I keep receiving the following messages that avast blocked a threat:

Infection: URL:Mal
URL: http://ju6chah.bid/watch?key= ....and then a bunch of numbers   
Process: /System/Library/StagedFrameworks/Safari/Webkit.framework/Versions/A/XPCServices/com.apple.Webkit.Networking.xpc/Contents/MacOS/com.apple.Webkit.Networking


Don't think I have ever been to that website. Emptied cache, deleted all website data and ran a full scan but nothing seemed to work.

Also there is a couple more messages relating to other URLs SUCH AS
http://ju6chah.bid/apple-touch-icon-precomposed.png
http://ju6chah.bid/favicon.ico

and the process /Applications/Safari.app/Contents/MacOS/Safari

Has anybody any idea what to do?

Thanks in advance
mhb

REDACTED

  • Guest
Re: Infection: URL:Mal
« Reply #1 on: November 09, 2016, 08:06:28 PM »
I am experiencing the exact same thing.   :( :( :(

The thing makes me super nervous.  and it pops up randomly when I use Safari - so I know there's some process at work that is running in the background somewhere.

Anybody out there who can help us, your assistance is greatly appreciated!

REDACTED

  • Guest
Re: Infection: URL:Mal
« Reply #2 on: January 27, 2017, 01:30:36 PM »
Something with a known safe site. same message

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infection: URL:Mal
« Reply #3 on: January 27, 2017, 04:06:12 PM »
There is no such thing as a safe site.
A site can be clean now, and infected before you can blink with your eye(s).

URL:Mal = domain and/or IP is blacklisted.

Offline .: Mac :.

  • Avast √úberevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re: Infection: URL:Mal
« Reply #4 on: January 28, 2017, 01:09:39 AM »
URL:Mal is detection by Avast Web Shield that you are visiting a site that is known to have malicious content. Either you visited the site, or some process is accessing the site.

Lets start with a full system scan with Avast!  Open Main Avast GUI and click scan on the left then Full system scan.

Note that if you have a time machine backup running its best to temporarily remove the backup drive wile you run the scan as the backup drive takes quite some time to scan.

Also you can run a full scan with Malwarebytes for Mac. This will check for some adware that may not be normally detected by Avast.

Post back with results and we can move on from there!

Cheers!
Mac
"People who are really serious about software should make their own hardware." - Alan Kay