URL Scam

[chris115]

Hi

Not sure if this is the right place but I'm sure somebody can sort it out

Avast keeps flagging up

Threat Secured. We've safely aborted connection on base2.sv.tribal-envoy.com because it was infected with a URL:Scam

Whilst I'm very happy that Avast has warned me of this problem it's not actually telling me why this problem is occurring or how I can stop it. It is getting very annoying.

Only seems to occur when I'm using Chrome.
The details show that the threat is URL: Scam
URL is base2.sv.tribal-envoy.com/api2/m/debug
Process C:\Program Files\
(x86)\Google\Chrome\Application\Chrome.exe

Can anybody assist me in removing this?

Best regards

[CraigB]

Try cleaning the browser cache and cookies, then set the browser to block 3rd party cookies.

[chris115]

Thanks for that CraigB.

Alas it doesn't seem to be that simple

[CraigB]

My only other thought would be checking for any suspicious extensions that may be calling home only when the browser is open.

[chris115]

Mmmm can't see anything

I'm going to try and contact Google.

Thanks for your suggestions

[DavidR]

Try running your browser with extensions/add-ons disabled.
If that resolves the problem then one of your extensions/add-ons could be responsible, finding it is more complex as you would have to enable the extensions/add-ons one by one.

Also try running your browser in Private mode.

[chris115]

Many thanks CraigB and DavidR

The extension responsible is WebRTC Leak Shield it appears. I disabled it and AVAST has not thrown any errors up

Again many thanks

[DavidR]

You're welcome.

[CraigB]

The extension responsible is WebRTC Leak Shield it appears. I disabled it and AVAST has not thrown any errors up

Probably best to delete the WebRTC Leak Shield extension, it's had no updates since September 2021 which suggests it's been abandoned.