Jump to content

pedrohenriquegs

Members
  • Posts

    3
  • Joined

  • Last visited

    Never

Everything posted by pedrohenriquegs

  1. Guys, I've found the issue, was the LastPass Chrome extension, after removing it the malicious site stopped to be accessed. I got that in debug log from Google Chrome. the line if the information, the confirmation come with the extension ID [12472:14916:0505/090143.618:VERBOSE1:network_delegate.cc(32)] NetworkDelegate::NotifyBeforeURLRequest: https:// xmr.omine. org/assets/v7.js [12472:14916:0505/090143.618:VERBOSE1:network_delegate.cc(32)] NetworkDelegate::NotifyBeforeURLRequest: https:// xmr.omine. org/assets/v7.js [11324:19096:0505/090143.626:VERBOSE1:dispatcher.cc(493)] Num tracked contexts: 3 [7376:9500:0505/090143.627:VERBOSE1:v8_context_snapshot.cc(152)] A context is created from snapshot for non-main world [7376:9500:0505/090143.627:VERBOSE1:script_context.cc(94)] Created context: extension id: hdokiejnpimakedhajhdlcegeplioahd frame: 000018AF11903160 URL: context_type: CONTENT_SCRIPT effective extension id: hdokiejnpimakedhajhdlcegeplioahd effective context type: CONTENT_SCRIPT [7376:9500:0505/090143.627:VERBOSE1:script_context.cc(94)] Created context: extension id: (none) frame: 0000000000000000 URL: context_type: UNSPECIFIED effective extension id: (none) effective context type: UNSPECIFIED
  2. I already perfomed all actions, the URL keep trying to be open. Attached my GSI in this link: https://www.sendspace.com/file/u39b0n
  3. Hello guys, Please, can you help me found whats is in my computer? Some sites i try to access the Kaspersky Total Security perform a block by Web AV to this site, doesn't matter the site, its random. So, I suppose, there something in my PC or in browsers. I already executed a full scan with Total Security and with Malwarebytes. How can I solve this? I attached two screens, at iracing.com I noticed a white border when KTS block the malicious .js Feel free to request to some logs and send procedures. Thanks in advance.
×
×
  • Create New...