Access Denied Malicious garzku5t.de in google chrome window 10

[ivanderbenko2]

Kaspersky activates and reports a malicious link to me, I continuously receive warnings such as: Access Denied Malicious website I have copied and pasted what i get from Web-Antivirus

 

Today, 4/29/2021 2:13:03 PM;Access denied;Google Chrome;chrome.exe;C:\Program Files\Google\Chrome\Application\chrome.exe;C:\Program Files\Google\Chrome\Application;10000;DESKTOP-3RMDC6P\admin;Active user;Blocked;Blocked;garzku5t.de;Malicious link;High;Exactly;garzku5t.de;garzku5t.de;;Web page;Databases

 

Event: Access denied
User: DESKTOP-3RMDC6P\admin
User type: Active user
Application name: chrome.exe
Application path: C:\Program Files\Google\Chrome\Application
Component: Web Anti-Virus
Result description: Blocked
Type: Malicious link
Name: garzku5t.de
Precision: Exactly
Threat level: High
Object type: Web page
Object name: garzku5t.de
Reason: Databases
Databases release date: Today, 4/29/2021 5:45:00 AM

[Berny]

@ivanderbenko2 Welcome.

Please see https://opentip.kaspersky.com/garzku5t.de/

From  Kaspersky Virus Lab :

“Hello,
The blocking is correct.
Best regards
xxxxxxxxxxxxx
Malware Analyst“

 

 

 

 

 

[ivanderbenko2]

should i be worried? or it is okay to block this website?

[ivanderbenko2]

i scanned my whole system and KIS did not found any viruses

[Berny]

@ivanderbenko2 You shouldn’t worry , Kaspersky blocked the dangerous Website  :-)

[ivanderbenko2]

why does it happen in the first place? i mean why my web browser want to go to that website? 

[Berny]

@ivanderbenko2   Please see this important Topic :

Link

 

? Is your desktop Chrome shortcut pointing to “chrome.exe” without any additional attribute ?

[ivanderbenko2]

@ivanderbenko2   Please see this important Topic :

Link

 

? Is your desktop Chrome shortcut pointing to “chrome.exe” without any additional attribute ?

"C:\Program Files\Google\Chrome\Application\chrome.exe"

 

"C:\Program Files\Google\Chrome\Application"

 

 

[ivanderbenko2]

almost every time i try to search anything in google or open my favorite website KIS block that url

i feel unsafe and might reinstall windows

[Berny]

@ivanderbenko2 This looks fine , please proceed  with next step :

Download & run AdwCleaner as ADMIN and attach the TXT Log in your next post.
⚠ Please don’t clean eventual detections.

[ivanderbenko2]

@ivanderbenko2This looks fine , please proceed  with next step :

Download & run AdwCleaner as ADMIN and attach the TXT Log in your next post.
⚠ Please don’t clean eventual detections.

 

[Berny]

 AdwCleaner Log : Threats detected: 2

PUP.Optional.BundleInstaller C:\USERS\ADMIN\DOWNLOADS\BITTORRENT.EXE

PUP.Optional.MailRu  C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME

If this objects  are not relevant for  you,
please  clean both items  → Clear Browser cache with CCleaner → Reboot

[Opisthion]

I have same problem too

[Berny]

@OpisthionWelcome.
Please check your Kaspersky reports and post a screenshot from the detection(s).

[ivanderbenko2]

 AdwCleaner Log : Threats detected: 2

PUP.Optional.BundleInstaller C:\USERS\ADMIN\DOWNLOADS\BITTORRENT.EXE

PUP.Optional.MailRu  C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME

If this objects  are not relevant for  you,
please  clean both items  → Clear Browser cache with CCleaner → Reboot

do i need to tick all boxes or just internet cache is enough? i need my cookies

 

 

 

 

[Berny]

@ivanderbenko2 Cache is enough.

[Opisthion]

It’s in turkish so:  bugün=today, engellendi = denied/blocked, kötü amaçlı bağlantı = malicious link

 

[Berny]

@Opisthion

The link is dangerous 
⚠  From  Kaspersky Virus Lab :
“Hello,
The blocking is correct.
Best regards
xxxxxxxxxxxxx
Malware Analyst“

First,  please scan your PC for malicious objects ?
 

Hide content

 

 

[harlan4096]

What about this (if still not fixed):

 

https://support.google.com/chromebook/answer/3296214?hl=en#zippy=

[ivanderbenko3]

@ivanderbenko2Cache is enough.

hey im the author and i lost my password during system cleaning :D

 

anyway it does not help

 

what i did:

1. removed threats with MB
2. reboot
3. clean chrome cache with cleaner
4. reboot
5. did not help
6. run deep MB scan - nothing found
7. run ccleaner and cleaned everything for chrome
8. run chrome and manually cleared everything in history (with cockies passwords etc)
9. reboot
10. still did not help 

[Berny]

@ivanderbenko2 Did you check for suspicious Browser extensions ?

[ivanderbenko4]

@ivanderbenko2Did you check for suspicious Browser extensions ?

lost my passwork again

but this time i found a suspicious extension that caused access to that website and it is

Lingualeo Language Translator

"https://chrome.google.com/webstore/detail/lingualeo-language-transl/nglbhlefjhcjockellmeclkcijildjhi"

!!!

im deleting it and report to google!!

 

mod edit:  Lingualeo Language Translator  → Trojan.JS.Extension.n

 

 

[ivanderbenko4]

users reported the same issue here in reviews

https://chrome.google.com/webstore/detail/lingualeo-language-transl/nglbhlefjhcjockellmeclkcijildjhi?hl=ru

[Opisthion]

I was using LinguaLeo too, i deleted it i hope it works.

[ivanderbenko4]

I was using LinguaLeo too, i deleted it i hope it works.

this extension does not work as it used to be anyways

they broke it with their updates and never fix