Windows 10, KIS19 obtained from ISP (Consolidated communication).
Since this morning, when Chrome is open I get this alert every 15 seconds or so (in fact, looking at the alerts, I get 4 every minute):
08.07.2019 12.34.47;
Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data;
https://jonysource.com/213db237bbd6bf854a.js;
https://jonysource.com/213db237bbd6bf854a.js;
URL;Google Chrome;07/08/2019 12:34:47
If I turn off Chrome (including taskbar icon) alert stops.
I have purged chrome cache, history and everything else I could (aside from saved passwords) but it continues. I had to stop showing the alerts as they were continuous.
I searched for the website but found nothing of relevance.
I tried opening the website (but not the .js file) in a Virtual Machine but even there I got a malware alert, so I did not continue.
I need to find out what is trying to download or access this URL on such a regular schedule.
In looking at the "detailed report" in the middle of all these alerts I also found the following alerts"
Same site but favicon.ico
08.07.2019 11.53.06;Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data;http://jonysource.com/favicon.ico;http://jonysource.com/favicon.ico;URL;Google Chrome;07/08/2019 11:53:06
same site but /robots.txt file
08.07.2019 11.53.06;Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data;http://jonysource.com/robots.txt;http://jonysource.com/robots.txt;URL;Google Chrome;07/08/2019 11:53:06
same site but actual website rather than a file therein.
08.07.2019 11.53.06;Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data;http://jonysource.com;http://jonysource.com;URL;Google Chrome;07/08/2019 11:53:06
Then I also found these:
Under title: "Object (File) Detected"
08.07.2019 12.34.47; Object (file) detected; https://jonysource.com/213db237bbd6bf854a.js;not-a-virus:HEUR:AdWare.Script.Generic;https://jonysource.com/213db237bbd6bf854a.js;Google Chrome;Adware;07/08/2019 12:34:47
and this under "Download Blocked"
08.07.2019 12.34.47;Download blocked; https://jonysource.com/213db237bbd6bf854a.js;not-a-virus:HEUR:AdWare.Script.Generic;https://jonysource.com/213db237bbd6bf854a.js;Google Chrome;Adware;07/08/2019 12:34:47
All of the other alerts are for the JS file under the heading "Blocked an advertisement website or a URL that can be used by criminals to damage your computer or personal data"
Beside the annoyance, I don't know what level of risk I am facing. Since I had to turn off alerts to be able to work in peace, I could be missing other important notifications.
I can sterilize Chrome (uninstall and install again), but before I do that I'd like to see what other options are available.
Thank you.
