What is e2c28.gcp.gvt2 ??

[AlpUbay]

I've been getting this warning for a few days. Is it something harmful? How can I fix? When I run a full scan, my computer seems clean.

[Flood and Flood's wife]

  On 10/13/2022 at 1:12 AM, AlpUbay said:

I've been getting this warning for a few days. Is it something harmful? How can I fix? When I run a full scan, my computer seems clean.

Expand  

Hello @AlpUbay, 

Welcome!

Please do the following:

1. Go to KIS, Web Anti-Virus Reports, at the top right-hand side of the report window, select SAVE, save the Report as a text file, upload the file to any cloud service of your choice - for example: OneDrive, DropBox, MegaDrive, IceDrive - so we can read the events - note - we only need a 24hr report, not a month or 6 months - post the share link please? 
2. Reset Chrome settings to default.  
3. Read & follow: Kaspersky notification of detection, file or website detected - by Moderator Richbuff. 

Thank you?
Flood?+?

Edited October 13, 2022 by Flood and Flood's wife

[Roberto Fracassi]

Hi! I have the same problem.. already 3/4 days

 

cancelled all plugins already but still ahve problems

https://drive.google.com/drive/folders/1kpuZEVmoPzXKGjLtVxV0MKaOsQwSSiMF?usp=sharing

[Berny]

@Roberto Fracassi Welcome.

Did you reset your Browser settings + reboot ?

If no fix , please download and run AdwCleaner(*) as ADMIN.

1) ⚠️ Don’t fix eventual detections ⚠️

2) Please attach the TXT Log in your next post

(*) No installation required.

[Paidrow]

Likewise, I'm getting these messages as well but it appears it's nothing harmful: 

https://www.netify.ai/resources/domains/gcp.gvt2.com

The domain name belongs to Google but it appears it's a SSL issue on their end.

 

[AlpUbay]

https://drive.google.com/file/d/1yjbeCo_tfXfpxujSfrnCeelNq0CwUkKN/view?usp=sharing
Here is my txt report

Edited October 13, 2022 by AlpUbay

[Roberto Fracassi]

Rebooting browser setting does not work.. lets try the AswCleaner

Edited October 13, 2022 by Roberto Fracassi
Problem arise again

[Paidrow]

  On 10/13/2022 at 5:52 PM, Roberto Fracassi said:

Rebooting browser setting does not work.. lets try the AswCleaner

Expand  

I tried rebooting the browser and the problem persisted too. I think it has something to do with Google itself.

Edited October 13, 2022 by Paidrow

[AlpUbay]

  On 10/13/2022 at 5:52 PM, Roberto Fracassi said:

I tried rebooting the browser and the problem persisted too. I think it has something to do with Google itself.

Expand  

C:\Program Files (x86)\Google\Chrome\Application Delete all files in App folder. Restart your browser. I think it's working. I'm not get this warning anymore. But not sure for now.

Edited October 13, 2022 by AlpUbay

[Paidrow]

  On 10/13/2022 at 6:13 PM, AlpUbay said:

C:\Program Files (x86)\Google\Chrome\Application Delete all files in App folder. Restart your browser. I think it's working. I'm not get this warning anymore. But not sure for now.

Expand  

Keep us informed if that does work. 

I think it has something to do with Google Cloud and SSL certificates:

https://www.netify.ai/resources/domains/gcp.gvt2.com

 

[Paidrow]

  On 10/13/2022 at 6:13 PM, AlpUbay said:

C:\Program Files (x86)\Google\Chrome\Application Delete all files in App folder. Restart your browser. I think it's working. I'm not get this warning anymore. But not sure for now.

Expand  

Did it work?

[Berny]

Please make the URL trusted in the Network settings ?

[AlpUbay]

  On 10/13/2022 at 6:30 PM, Paidrow said:

Did it work?

Expand  

Don't close Chrome, find app folder and select all. Delete all but pass open stuff. My last warning one hour ago. At 20:29

Edited October 13, 2022 by AlpUbay

[Paidrow]

  On 10/13/2022 at 6:51 PM, AlpUbay said:

Don't close Chrome, find app folder and select all. Delete all but pass open stuff. My last warning one hour ago. At 20:29

Expand  

That's what I did and I'm still getting messages in Kaspersky.

[Paidrow]

  On 10/13/2022 at 6:50 PM, Berny said:

Please make the URL trusted in the Network settings ?

Expand  

Is doing that safe? Basically we're letting Chrome enter those sites without a valid SSL certificate.

[AlpUbay]

  On 10/13/2022 at 6:50 PM, Berny said:

Please make the URL trusted in the Network settings ?

Expand  

You can't. Because not same url everytime. Etc:
e2c39,gcp.gvt2,com
e2c38,gcp.gvt2,com
e2cs51,gcp.gvt2,com
Always change a character.

[harlan4096]

Use a mask in the exclusion: *gcp.gvt2.com

[AlpUbay]

  On 10/13/2022 at 6:54 PM, Paidrow said:

That's what I did and I'm still getting messages in Kaspersky.

Expand  

Try not pass. Delete chrome right here and setup again. Maybe work this time. I dont know how to fix this sorry.

[Paidrow]

OK, I've been doing some research myself and I found out that the certificates of those domains have expired

It means: Valid from 11/07/2022 (dd/mm/yyyy) to 09/10/2022 (dd/mm/yyyy).

As I mentioned, it's on Google to update the ceritificate:

I guess all we have to do is to wait.

[Berny]

@Paidrow

Correct , Qualys. SSL Labs report is confirming above.

 

 

 

 

 

 

 

[Flood and Flood's wife]

Hello @AlpUbay, @Roberto Fracassi, @Paidrow, 

14th October 2022, we logged the certificate issue with the Google team, they sent thru advice last night, that certificates for *.gcp.gvt2.com *.gcp.gvt6.com, have been updated.

Please check, if there's any ongoing issues, please post back? 

Thank you?
Flood?+?

 

[Paidrow]

  On 10/19/2022 at 8:03 PM, Flood and Flood's wife said:

Hello @AlpUbay, @Roberto Fracassi, @Paidrow, 

14th October 2022, we logged the certificate issue with the Google team, they sent thru advice last night, that certificates for *.gcp.gvt2.com *.gcp.gvt6.com, have been updated.

Please check, if there's any ongoing issues, please post back? 

Thank you?
Flood?+?

 

Expand  

Yup, the warnings have stopped at last. Thanks a lot.

[Flood and Flood's wife]

  On 10/20/2022 at 5:08 AM, Paidrow said:

Yup, the warnings have stopped at last. Thanks a lot.

Expand  

Hello @Paidrow, 

You're most welcome!

Thank you for taking the time to post back & confirm the issue is resolved; we really appreciate that?

Flood?+?