Author Topic: [SOLVED] daily virus URL connection  (Read 1589 times)

0 Members and 1 Guest are viewing this topic.

Offline val51589

  • Newbie
  • *
  • Posts: 3
[SOLVED] daily virus URL connection
« on: March 08, 2022, 09:14:10 AM »
Hi everyone.

I don't know if it's the right place for that, please tell me if not.
Since a week, my laptop connect everyday to the same URL vzbucket.beeapi.net which seems to start dowloading some sort of virus.
Hopefully Avast One send an alert and ask me to abort connection.

But I suspect that I have something installed which start this connection. Can you help me to find and delete it?

Thank you in advance
« Last Edit: March 27, 2022, 10:09:07 AM by val51589 »

Offline r@vast

  • Avast team
  • Massive Poster
  • *
  • Posts: 2760
Re: daily virus URL connection
« Reply #1 on: March 08, 2022, 10:16:56 AM »
Hi,

Please add a screenshot of the detection message from Avast One showing the "see details" part as well.
When do you notice your laptop connecting to this site? Is it when you open a specific browser or does the browser open by itself?
Try resetting your browser: https://support.avast.com/article/Reset-browser/

Offline val51589

  • Newbie
  • *
  • Posts: 3
Re: daily virus URL connection
« Reply #2 on: March 08, 2022, 02:13:13 PM »
It seems to happen when I open (or shutdown and then re-open) my browser (Ur).
I will try to find how to reset it.

https://ibb.co/hCSX1sm

Offline val51589

  • Newbie
  • *
  • Posts: 3
Re: daily virus URL connection
« Reply #3 on: March 27, 2022, 10:08:45 AM »
I had to uninstall/reinstall my browser. After that, no more problem.

Thanks.

Offline polonus

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 33976
  • malware fighter
Re: [SOLVED] daily virus URL connection
« Reply #4 on: March 27, 2022, 01:26:06 PM »
-vzbucket.beeapi.net should be blocked: https://any.run/report/2ebbe8b740d8f7510769a5155e8fa5612215205fce027b728d279715d9b89488/670d6d0e-082b-4b0c-9f5f-0adb41400ba8  (see behavior activities)

Should be blocked because it contains malware trojaned adware activity.
Re: https://adwareremoval.info/win32-adaptivebee-a-potentially-unwanted/

polonus


Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!