Author Topic: Message about protection from URL:Scam on wpad.co.uk every ten minutes  (Read 836 times)

0 Members and 1 Guest are viewing this topic.

Offline ssmithben

  • Newbie
  • *
  • Posts: 2
Hi
For days I've been getting a message from Avast (free version):
"We've safely aborted connection on wpad.co.uk because it was infected with URL:Scam"
Threat name: URL:Scam
URL: http://wpad.co.uk/wpad.dat
Process: c:\windows\system32\svchost.exe
Detected by Web Shield
Status: Connection aborted

There's no sign of how to stop it happening. I've tried scanning with Malwarebytes and found nothing. I've also reinstalled Google Chrome as I read somewhere that a similar issue was fixed by a Google Chrome reinstall.

Anyone have any experience of this?

Thanks

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11192
  • No support PM's thanks
Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
« Reply #1 on: December 06, 2022, 04:41:55 AM »
Cleaning out browser cookies will help, then for future protection set your browser to block all Third Party Cookies.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33489
  • malware fighter
Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
« Reply #2 on: December 07, 2022, 06:10:50 AM »
Hi ssmithben,

First and foremost, do not put live links in your posting. This for obvious reasons.

The link is to a parked domain, and parked domains could be open to 'abuse all sorts'.
Re: https://www.virustotal.com/gui/url/cdec3d5301de51c3077d28976411938367d78a16cfb586a4e8f26d9cb60d0377/details
Also consider: https://www.abuseipdb.com/check/34.102.136.180?page=2   (spam & phishing etc.)

So avoid visiting such parked destinations,

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline ssmithben

  • Newbie
  • *
  • Posts: 2
Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
« Reply #3 on: December 14, 2022, 07:53:51 PM »
Hi Polonus

Thanks - that's a fair point. I won't do that again.

If that was first and foremost is there anything to come second and help with the issue? :)


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33489
  • malware fighter
Re: Message about protection from URL:Scam on wpad.co.uk every ten minutes
« Reply #4 on: December 15, 2022, 06:41:26 AM »
Thanks. That's good conduct.

Clear your browser cache and history. Reset your browser to it's initial settings.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!