Author Topic: Cosmeticsrc  (Read 1803 times)

0 Members and 1 Guest are viewing this topic.

Offline jeanne.bab

  • Newbie
  • *
  • Posts: 3
Cosmeticsrc
« on: May 07, 2020, 01:25:25 PM »
I'm getting an obnoxious alert every 10 minutes.  It says 

"We've aborted connection on cosmeticsrc.com because it was infected with Other:Malware-gen [Trj]."

How can I stop these alerts?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Cosmeticsrc
« Reply #1 on: May 07, 2020, 01:35:36 PM »
Hi jeanne.bab,

Haven't we been here before. Read here: https://forum.avast.com/index.php?topic=231517.msg1531900#msg1531900

Quote
  a complete removal of Chrome, followed by running CCleaner, followed by a cold boot of the machine before reloading Chrome, provided satisfactory results.


If however you feel you need help from a qualified remover to get you through such procedures,
post whatever logs are requested for here, see: https://forum.avast.com/index.php?topic=194892.0

Have a nice day and a fully cleansed Google Chrome browser that again feels fresh.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jeanne.bab

  • Newbie
  • *
  • Posts: 3
Re: Cosmeticsrc
« Reply #2 on: May 07, 2020, 01:40:52 PM »
Sorry.  I'm not very computer savvy.  Are you suggesting I follow the procedure to remove Chrome???

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Cosmeticsrc
« Reply #3 on: May 07, 2020, 04:09:19 PM »
Hi jeanne.bab

Proceed exactly as is written there in the Quote. That does not demand rocket technology, does it?
I wrote that whenever you do not  feel up to that routine, you could wait for a qualified remover to show up in the thread,
and do it under guidance. As they say in Scotland "easy peasy",

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline jeanne.bab

  • Newbie
  • *
  • Posts: 3
Re: Cosmeticsrc
« Reply #4 on: May 08, 2020, 01:31:13 PM »
Thank you!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Cosmeticsrc
« Reply #5 on: May 08, 2020, 02:05:56 PM »
Website has Adware located here   cosmeticsrc.com/2171de9c9971669bb5.js
also see attached screenshot

https://www.virustotal.com/gui/file/8f49f9dc47ccf6bf080a217171f59782c458afa2222afe141302122c38c1b1b9/detection

Blacklisted
https://www.virustotal.com/gui/url/3d3ec5df6b316a2d40454c7ea7e41b957a4f284d86e7a59647428a38e46a797b/detection

https://www.urlvoid.com/scan/cosmeticsrc.com/



You may try clear your browser surf history and see if that help