Author Topic: "Threat Secured" keeps popping up with the URL: Blacklist notification!  (Read 13328 times)

0 Members and 1 Guest are viewing this topic.

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Hello.

I have been getting this pop up for a few weeks now and it is really driving me up the wall. I am usually pretty careful about where I am on the net so this one really caught me by surprise. It happens whenever I open the Chrome browser. I have followed most of the steps I have seen on here such as downloading the FRST tool to generate documents and the "mbam" document from a Malwarebytes scan. Any help would be appreciated! Thanks in advance.

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Heres the pop up message..forgot to post it.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
  • Open Notepad (click Start button -> type notepad.exe -> press Enter)
  • Copy text from code block below and paste it into Notepad
Code: [Select]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
AlternateDataStreams: C:\Users\ikair\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\ikair\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [482]
  • Go to File -> Save As
  • Make sure that  UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.




Does it happen when only Chrome is opened?

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Hello. Sorry for late reply..it does only happen when Chrome is opened. Fixlog has now been attached.
« Last Edit: April 14, 2019, 02:14:06 AM by ikairos180 »

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Open in Chrome:
chrome://serviceworker-internals/
and unregister all listed service workers.

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Open in Chrome:
chrome://serviceworker-internals/
and unregister all listed service workers.

Hello. How does one do this?

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Well I believe I've unregistered all of the listed service workers now. What's the next step?

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Does Avast still display notifications you posted?

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Does Avast still display notifications you posted?

It still does. When I try to close pop up it continues to pop right back up!

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Can you disable Chrome extensions until Avast stops displaying popups?

Offline ikairos180

  • Newbie
  • *
  • Posts: 7
Re: "Threat Secured" keeps popping up with the URL: Blacklist notification!
« Reply #10 on: April 20, 2019, 11:55:30 PM »
Can you disable Chrome extensions until Avast stops displaying popups?

Even after disabling extensions the popup still occurs. Am I doing something wrong? Did I not unregister all of the service workers properly?

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: "Threat Secured" keeps popping up with the URL: Blacklist notification!
« Reply #11 on: April 21, 2019, 05:21:08 PM »
You are doing fine.

Please attach following file to your post.

C:\ProgramData\AVAST Software\Avast\report\WebShield.txt

Offline msmm3

  • Newbie
  • *
  • Posts: 1
Can someone please help me... I keep getting this notification every day and I don't know what to do.