malicious URL starting with “ams-update” - Apple Push [Solved] [Closed]

[PEGADelage]

Hi,

 

Since yesterday I’m having a lot of messages about a malicious URL starting with “ams-update” and some other letters, like ““ams-updatea”, “ams-updatec” or “ams-updatew”. Kaspersky inform that the app relate is something called “Apple Push”, but I never installed nothing by Apple and this app isn’t show in my programs.
 

I had search in the forum and found something close to my case, but the answer ask him to attach the report and a image of the problem. So, I couldn’t know the final answer, because was specific to him.

Can somebody help me?

[mpaulino710]

I have the same problem since yesterday

[Flood and Flood's wife]

Hello @PEGADelage & @mpaulino710,

Welcome!

1. Have you installed any new extensions or backgrounds or themes?
2. If “yes”, reset whichever browser the alerts are happening in to default.
3. Export Bookmarks for that browser.
4. Run KIS Privacy Cleaner. 
5. Reboot, restart device, login, start KIS.
6. Recheck the issue?
7. If the issue is happening in all browsers, so we can see what KIS is actually blocking, may we have the KIS Report:

➡ Open KIS, select MORE TOOLS, select Reports, select Detailed Reports, select All Events, select  7days, select Export, export the Report, save as a .txt file, 📎 attach the Report to your reply?

Please post back?

Thank you🙏

Flood🐳

[mpaulino710]

Thank you very much for your reply

 

I did the procedure and I have almost 2 hours and the message has not returned, I also uninstalled whatsapp windows app, because I noticed that the message came out more often when the app was open.

[Flood and Flood's wife]

Hello @mpaulino710,

Thank you very much for the feedback & the report👏

It’s great to read the issue appears to be resolved☺

Thank you🙏

Flood🐳

[AO85]

I am facing the same problem, tried the above steps but it is still not working. Attached is the KIS Report.

 

Greatly appreciate any assistance. 

 

Thanks & Regards

[Flood and Flood's wife]

Hello @AO85, 

Welcome!

1. May we see a screen image of the alert please?
2. What apps are active when Apple Push Time, Dangerous URL alert happens?
3. What is KIS version & patch(x)?
4. Please post an image of C:\Users\YOURNAME\AppData\Local\Temp ?
5. Please post an image of: C:\Users\YOURNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ ?

Please post back?

Thank you🙏

Flood🐳

[Wesly.Zhang]

I am facing the same problem, tried the above steps but it is still not working. Attached is the KIS Report.

 

Greatly appreciate any assistance. 

 

Thanks & Regards

Hello @AO85 

Have you installed some apple software in your PC before, such as iTunes?

Regards.

[AO85]

Hi @FLOOD 

 

Attached are the screenshots, 

Active apps are Google and Steam

KIS Version is Total Security 20.0.14.1085 (j)

 

Thanks for the assistance @FLOOD 

 

Regards,

AO85

[AO85]

Hi @Wesly.Zhang 

 

Yes, I did download itunes before.

 

Regards

 

[Flood and Flood's wife]

Hello @AO85, 

You’re very welcome☺ !

Thank you for the information & the images👌

Please follow these steps carefully:

• 1 Create a System Restore Point.
• 2 Uninstall Whatsapp (note this is temporary). 
• 3 Export all Bookmarks for all supported browsers.
• 4 Run Chrome Reset & Cleanup: 
• 5 Run KIS Privacy Wizard, select ALL of the following: 
• a] Perform strongly recommended actions,
• b] Perform recommended actions.
• c] Perform additional actions
• At the completion of the Wizard do not select Reboot. 
• 6 Run Windows in Safe Mode
• 7 Delete everything in C:\Windows\Temp
• 8 Return to Normal Mode, start KIS.
• 9 Run manual KIS database update - allow it to complete.
• 🔟 Recheck Apple Push Time, Dangerous URL alert?
• If it persists, run the report of Adware Cleaner - do not actually run the clean, post the report here please, in a text file? 

Let us know the outcome please?

Thank you🙏

Flood🐳

[Wesly.Zhang]

Hi @Wesly.Zhang 

 

Yes, I did download itunes before.

 

Regards

 

Hello,

Please the uploaded screenshot and let me know “Apple Push” is belongs to which process.

 

Regards.

[Flood and Flood's wife]

Hello @AO85, 

My reply has been blocked.

I’ve sent you the instructions.

Please follow them carefully.

Thank you🙏

Flood🐳

[AO85]

Hi @FLOOD & @Wesly.Zhang 

 

The problem is solved after the update on my Kaspersky product. Thanks for your support and assistance. 

 

Regards,

AO