Author Topic: Malware HavyTyler.Net in Avast Browswer  (Read 1558 times)

0 Members and 1 Guest are viewing this topic.

Offline Shawn124

  • Newbie
  • *
  • Posts: 5
Malware HavyTyler.Net in Avast Browswer
« on: May 27, 2021, 03:27:50 PM »
Nearly every time I search in the address bar of my Avast Secure Browser, I'm presented with the message: Threat secured -- We've safely aborted connection on havytyler.net because it was infected with Other:Malware-gen[Trj] -- Scan your computer for other issues, too?   If I scan or don't scan, if I close the browser and reopen, if I reboot the computer, I'm still getting this message when I search in my toolbar for anything. How do I get rid of the malware that is infecting my Avast "secure" browser? Why doesn't Avast get rid of this for me? How did it get infected in the first place when I'm using a paid version of this browser? Please help.

Offline Olga Fomicheva

  • Avast team
  • Jr. Member
  • *
  • Posts: 24
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #1 on: June 02, 2021, 01:45:30 PM »
Hello!

Thank you for reporting the issue, I will try to help.
Could you please provide us with more details? Please, send us the screenshot of the notification that you receive after clicking on 'See details' option that is available in it.

Thank you!

Offline Shawn124

  • Newbie
  • *
  • Posts: 5
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #2 on: June 02, 2021, 02:35:32 PM »
I have an image and would love to post it, but this forum does not appear to allow me to attach an image. Using the "Insert Image" button only appears to insert empty img tags. I could not find an attach button. So sorry, please instruct me as to how I can send an image and I'll send the pop-up that appears when I search on Avast Browser.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 71828
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #3 on: June 02, 2021, 02:44:06 PM »
Hi, see screenshot. ;)
Win 8.1 [x64] - Avast PremSec 21.8.6586.IBC [UI.666] - EEK - Firefox ESR 78.14 [NS/uBO/PB] - TB 91.1
Avast-Tools: Secure Browser 93.0 - Cleanup 21.3 - SecureLine 5.13 - Driver Updater 21.3 - CCleaner 5.84
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Shawn124

  • Newbie
  • *
  • Posts: 5
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #4 on: June 24, 2021, 02:45:48 PM »
Image attached.

Offline Jiří Malina

  • Avast team
  • Jr. Member
  • *
  • Posts: 27
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #5 on: June 24, 2021, 03:19:33 PM »
Thanks for the screenshot. The problem was caught by AV not browser itself. It looks that the browser got infected. Can you please share your diagnostic info from secure://settings/help -> Diagnostic Information

Also try the same on other browsers if the warning will also be present so we can figure out where the source can be.

Offline Shawn124

  • Newbie
  • *
  • Posts: 5
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #6 on: June 24, 2021, 05:45:23 PM »
The warning appears only on the Avast Secure Browswer. It does not appear on Edge, Firefox, or even Chrome.
Here is the Diagnostics:
executable_path=C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
profile_path=C:\Users\penni\AppData\Local\AVAST Software\Browser\User Data\Default
os_version=Windows 10 v2009 (x64)
av_version=21.4.2464
urlscanner_version=1.7.0.287
host_prefix=
browser_version=91.0.10129.78 (Official Build (64-bit))
cgid=312
cid=3211
uid=af78bec304c048b48ff29126c5c2ea34

Channel: stable
OS language: en-us
Browser language: en-US
Search Engine URL: https://www.google.com/search?client={google:client}&q={searchTerms}&{google:originalQueryForSuggestion}{google:assistedQueryStats}ie={inputEncoding}
Omaha version: 1.8.1065.0

Enabled extensions:
ahfgeienlihckogmohjhadlkjgocpleb : Web Store : 0.2
dmfdacibleoapmpfdgonigdfinmekhgp : Avast SecureLine VPN : 1.5.1.839
ekmkelgimdicdgkflkakgmjcghgpdnji : Messaging : 1.6.0.274
glidbdbacfjioedheokaociibpcijiha : Docs Creator : 3.7.0
kdhipfbocahipinepiahppeionfbahlg : Avast Video Downloader : 2.5.149
kejbdjndbnbjgmefkgdddjlbokphdefk : Tag Assistant Legacy (by Google) : 21.11.16
kmediagceboldddnnajkcochbkfkedel : Avast Anti-Tracking : 1.23.0.675
kmendfapggjehodndflmmgagdbamhnfd : CryptoTokenExtension : 0.9.74
lhnnoklckomcfdlknmjaenoodlpfdclc : Avast Bank Mode : 1.3.0.39
mecokbmnofclapimmlnfegiohceoaocc : Avast Performance Manager : 1.2.220
mhjfbmdgcfjbbpaeojofohoefgiehjai : Chrome PDF Viewer : 1
nkeimhogjdpnpccoofpliimaahmaaome : Google Hangouts : 1.3.16
nmebbcjdbhgggcgohlnlgadkmjiedfbc : Avast Hack Check : 1.2.341
ooeobdingfeedklanlfcjhffgennflke : Avast Adblock : 2.5.127
pkedcjkdefgpdelpbcmbmeomcjbeemfm : Chrome Media Router : 9021.222.0.0

Disabled extensions:
beghmmhchncjignfbfnemngnlnjdmbcb : Avast Anti-Fingerprinting : 2.5.181

Offline Jiří Malina

  • Avast team
  • Jr. Member
  • *
  • Posts: 27
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #7 on: June 28, 2021, 09:32:51 AM »
From diag info everything looks good but if the only Avast Secure Browser is affected I suggest to:

- Uninstall Avast Secure Browser
- Remove folder C:\Users\penni\AppData\Local\AVAST Software\Browser
- Install browser again and check if problem persist

Offline Libor Šlechta

  • Browser QA Team
  • Avast team
  • Jr. Member
  • *
  • Posts: 30
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #8 on: June 30, 2021, 04:45:31 PM »
Hello,

Jiri is right.

My guess is that it may be caused by one of the extensions.

Most of the extensions are installed by Avast Secure Browser.

However there are 2 extensions that I do not recognize:
glidbdbacfjioedheokaociibpcijiha : Docs Creator : 3.7.0
kejbdjndbnbjgmefkgdddjlbokphdefk : Tag Assistant Legacy (by Google) : 21.11.16

If you did not uninstall the browser yet, could you please try to remove those extensions and try whether the issue persist?

If removing extensions or reinstalling browser will not solve your problem, you can try ask for help in one of the forums where community offers help with removing of malware. Here is a link to section of Avast forum where volunteers (non Avast employees) offer help https://forum.avast.com/index.php?board=4.0
« Last Edit: June 30, 2021, 04:52:27 PM by Libor Šlechta »

Offline Shawn124

  • Newbie
  • *
  • Posts: 5
Re: Malware HavyTyler.Net in Avast Browswer
« Reply #9 on: August 02, 2021, 02:06:18 AM »
Thanks for the responses. Sorry it took so long for me to get back to this. I had removed Google as my default search and instead used one of the others as they did not result in the malware report. However, I removed the docs extension as suggested, and the problem seems to have gone away, even when I switched back to Google as my primary search engine.

Thanks for the help. I'll report again if the warning returns, but so far so good.