March 10, 20251 yr This is from the Kaspersky report: Event: Access allowed User: black-PC\black User type: Initiator Application name: chrome.exe Application path: C:\Program Files (x86)\Google\Chrome\Application Component: Safe Browsing Result description: Allowed Type: Data Loss Threat Name: https://p242.aulogirefaure.com/v2/a/prl/vst/106483?tburl=https://websterro.com/api/back/ljufqimsnp&tbminbid=0 Accuracy: True Threat level: Very Object type: Web page Object name: ljufqimsnp&tbminbid=0 Object paths: https://p242.aulogirefaure.com/v2/a/prl/vst/106483?tburl=https://websterro.com/api/back Reason: Cloud Protection Is this something dangerous and how do I remove it, thanks?
March 10, 20251 yr Welcome to Kaspersky Community. Can You provide the version of K. product installed? Check Your Safe Browsing module settings: If You try to visit that URL in Your browser, will K. warn You? That URL has no malware, but a phishing detect.
March 10, 20251 yr Ok, last version is 21.20, You can already download new installer and update it. I see in Your capture that You have set to only Inform, in Action on threat detection ?♂️, set it to Block or Perform recommended: Also, enable this one:
March 10, 20251 yr Author Thank you! I changed this parameters! Also, I saw and this url location, is this url contain malware: Опис резултата: Дозвољено Тип: Претња по губитак података Име: https://29026622-1077-20567.tundevelluckeed.com/iiZAC4Q5PwnlZtdxoEWUMWYKz8kSuJyaPLsGe9XeS90vNJyWpsNR9teOUrJjct6blYcCJpoKsuqBbih3FT72T8Lwk1B3?v=PD94bWwgdmVyc2lvbj0iMS4wIj8-PFZBU1QgdmVyc2lvbj0iMy4wIj48QWQgaWQ9IjUxMTA6MTE0NDg1Nzk3NzE3Ij48V3JhcHBlcj48QWRTeXN0ZW0-RGFvLmFkPC9BZFN5c3RlbT48VkFTVEFkVGFnVVJJPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL3Zhc3Q_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZ0bT0xNzQxNTk3MzY1XV0-PC9WQVNUQWRUYWdVUkk-PEVycm9yPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL2Vycm9yP2lkPTUxMTAlM0ExMTQ0ODU3OTc3MTcmdG09MTc0MTU5NzM2NSZjb2RlPVtFUlJPUkNPREVdXV0-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-PFRyYWNraW5nIGV2ZW50PSJmaXJzdFF1YXJ0aWxlIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTMmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PFRyYWNraW5nIGV2ZW50PSJtaWRwb2ludCI-PCFbQ0RBVEFbaHR0cHM6Ly91dmktNzEwNS5hZ2VudGVpbW1vYmlsaWFyZS5pbmZvL2FwaS9ydGItdmlkZW8vdHJhY2s_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZldmVudD00JnRtPTE3NDE1OTczNjVdXT48L1RyYWNraW5nPjxUcmFja2luZyBldmVudD0idGhpcmRRdWFydGlsZSI-PCFbQ0RBVEFbaHR0cHM6Ly91dmktNzEwNS5hZ2VudGVpbW1vYmlsaWFyZS5pbmZvL2FwaS9ydGItdmlkZW8vdHJhY2s_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZldmVudD01JnRtPTE3NDE1OTczNjVdXT48L1RyYWNraW5nPjxUcmFja2luZyBldmVudD0iY29tcGxldGUiPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL3RyYWNrP2lkPTUxMTAlM0ExMTQ0ODU3OTc3MTcmZXZlbnQ9NiZ0bT0xNzQxNTk3MzY1XV0-PC9UcmFja2luZz48VHJhY2tpbmcgZXZlbnQ9ImNsb3NlIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTcmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PFRyYWNraW5nIGV2ZW50PSJza2lwIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTgmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PC9UcmFja2luZ0V2ZW50cz48L0xpbmVhcj48L0NyZWF0aXZlPjxDcmVhdGl2ZT48Tm9uTGluZWFyQWRzLz48L0NyZWF0aXZlPjwvQ3JlYXRpdmVzPjwvV3JhcHBlcj48L0FkPjwvVkFTVD4%3d Прецизност: Тачно Ниво претње: Веома Тип објекта: Web страница Име објекта: iiZAC4Q5PwnlZtdxoEWUMWYKz8kSuJyaPLsGe9XeS90vNJyWpsNR9teOUrJjct6blYcCJpoKsuqBbih3FT72T8Lwk1B3?v=PD94bWwgdmVyc2lvbj0iMS4wIj8-PFZBU1QgdmVyc2lvbj0iMy4wIj48QWQgaWQ9IjUxMTA6MTE0NDg1Nzk3NzE3Ij48V3JhcHBlcj48QWRTeXN0ZW0-RGFvLmFkPC9BZFN5c3RlbT48VkFTVEFkVGFnVVJJPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL3Zhc3Q_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZ0bT0xNzQxNTk3MzY1XV0-PC9WQVNUQWRUYWdVUkk-PEVycm9yPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL2Vycm9yP2lkPTUxMTAlM0ExMTQ0ODU3OTc3MTcmdG09MTc0MTU5NzM2NSZjb2RlPVtFUlJPUkNPREVdXV0-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-PFRyYWNraW5nIGV2ZW50PSJmaXJzdFF1YXJ0aWxlIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTMmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PFRyYWNraW5nIGV2ZW50PSJtaWRwb2ludCI-PCFbQ0RBVEFbaHR0cHM6Ly91dmktNzEwNS5hZ2VudGVpbW1vYmlsaWFyZS5pbmZvL2FwaS9ydGItdmlkZW8vdHJhY2s_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZldmVudD00JnRtPTE3NDE1OTczNjVdXT48L1RyYWNraW5nPjxUcmFja2luZyBldmVudD0idGhpcmRRdWFydGlsZSI-PCFbQ0RBVEFbaHR0cHM6Ly91dmktNzEwNS5hZ2VudGVpbW1vYmlsaWFyZS5pbmZvL2FwaS9ydGItdmlkZW8vdHJhY2s_aWQ9NTExMCUzQTExNDQ4NTc5NzcxNyZldmVudD01JnRtPTE3NDE1OTczNjVdXT48L1RyYWNraW5nPjxUcmFja2luZyBldmVudD0iY29tcGxldGUiPjwhW0NEQVRBW2h0dHBzOi8vdXZpLTcxMDUuYWdlbnRlaW1tb2JpbGlhcmUuaW5mby9hcGkvcnRiLXZpZGVvL3RyYWNrP2lkPTUxMTAlM0ExMTQ0ODU3OTc3MTcmZXZlbnQ9NiZ0bT0xNzQxNTk3MzY1XV0-PC9UcmFja2luZz48VHJhY2tpbmcgZXZlbnQ9ImNsb3NlIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTcmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PFRyYWNraW5nIGV2ZW50PSJza2lwIj48IVtDREFUQVtodHRwczovL3V2aS03MTA1LmFnZW50ZWltbW9iaWxpYXJlLmluZm8vYXBpL3J0Yi12aWRlby90cmFjaz9pZD01MTEwJTNBMTE0NDg1Nzk3NzE3JmV2ZW50PTgmdG09MTc0MTU5NzM2NV1dPjwvVHJhY2tpbmc-PC9UcmFja2luZ0V2ZW50cz48L0xpbmVhcj48L0NyZWF0aXZlPjxDcmVhdGl2ZT48Tm9uTGluZWFyQWRzLz48L0NyZWF0aXZlPjwvQ3JlYXRpdmVzPjwvV3JhcHBlcj48L0FkPjwvVkFTVD4%3d Путања објекта: https://29026622-1077-20567.tundevelluckeed.com Разлог: Заштита из облака
March 10, 20251 yr I don't know why You had that parameter set to only Inform, by default K. set it to Perform recommended, which is enough to block malicious URL sites.
March 10, 20251 yr Author Because I couldn't access some pages that were important to me, or it kept saying that I had to confirm access to those pages in the browser via Kaspersky, and then I forgot to return them. It's probably because of that. I tried the domain of those sites to add so that Kaspersky would exclude them, as trusted, but it didn't want to work that way. Edited March 10, 20251 yr by KloxMix
March 10, 20251 yr Ok, next time You can't access one site because of Kaspersky, please ask in this community for help, We will help you to create a proper exclusion.
This is from the Kaspersky report:
Event: Access allowed User: black-PC\black User type: Initiator Application name: chrome.exe Application path: C:\Program Files (x86)\Google\Chrome\Application Component: Safe Browsing Result description: Allowed Type: Data Loss Threat Name: https://p242.aulogirefaure.com/v2/a/prl/vst/106483?tburl=https://websterro.com/api/back/ljufqimsnp&tbminbid=0 Accuracy: True Threat level: Very Object type: Web page Object name: ljufqimsnp&tbminbid=0 Object paths: https://p242.aulogirefaure.com/v2/a/prl/vst/106483?tburl=https://websterro.com/api/back Reason: Cloud ProtectionIs this something dangerous and how do I remove it, thanks?