Sudden Phishing Attack or Rootkit or Virus ????


  1. yrralrellim
    Posts : 64
    Windows 10 Professional (x64) Version 10.0.19043 (Build 19043) 07aug2021
       New #1

    Sudden Phishing Attack or Rootkit or Virus ????


    I have no idea what is happening. I have seen the attempt just this afternoon on three of my networked PC's but, SO FAR, Malwarebytes AntiMalware Premium has blocked attempts on all three. Malwarebytes says "Malicious Website" - "Category: Phishing". This PC system is Windows 10 (Build 18362.628) and besides Malwarebytes, I have Bitdefender Total Security installed. The other two PC's where I have seen the same blocked attempt, are also Windows 10. The blocked attempt is outgoing, where "C:\Windows\System32\svchost.exe" is trying to connect to Domain: ipv4.login.msa.akadns6.net - IP Address: 40.90.137.126 - Port: 443

    Can someone please tell me what is going on? I have temporarily disabled Bitdefender Anti-Virus module on one machine and I have started an online scan with the "Sophos Virus Removal Tool".

    Thank you!!
      My Computer
    Quote Quote

  3. TairikuOkami
    Posts : 5,492
    Windows 11 Home
       New #2

    Well, there appears to be a problem with the certificate. You should probably contact Malwarebytes support.
    IP belongs to the Microsoft, but probably DNS requests failed, so it fails to retrieve the correct domain name.
    Attached Thumbnails Attached Thumbnails Sudden Phishing Attack or Rootkit or Virus ????-capture_02102020_203754.jpg  
      My Computer
    Quote Quote

  4. jamis
    Posts : 579
    Windows10 Home 64 bit v. 22H2 bld. 19045.2604
       New #3

    Does this help?

    https://forums.malwarebytes.com/topi...-ip-fps-fixed/
      My Computer
    Quote Quote

  6. yrralrellim
    Posts : 64
    Windows 10 Professional (x64) Version 10.0.19043 (Build 19043) 07aug2021
    Thread Starter
       New #4

    Thank you all very much. I contacted Malwarebytes Support. Problem was a false positive. Problem is now SOLVED.
    Last edited by yrralrellim; 10 Feb 2020 at 16:34.
      My Computer
    Quote Quote

 

  Related Discussions
Phishing Attack?
in AntiVirus, Firewalls and System Security

I keep getting this message, should I be worried? It started while I was working and checking hospital websites. I have checked svchost.exe with VirusTotal which came up negative. 266521
Virus Attack
in Backup and Restore

Good Day We had an virus attack by this one ( Dharma ,very all files encrypted and ended with .java extension.) No decryption as off yesterday . " all your data has been locked usYou want to return?write email GuardBTC@cock.li " :-) I...
Source: Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites
Read more here: Chrome and Firefox Phishing Attack Uses Domains Identical to Known Safe Sites
Rootkit Virus?
in AntiVirus, Firewalls and System Security

I basically downloaded the 1607 Windows update, the latest one. And one time, my AVG came up with 800 plus threats to do with a rootkit or something, and I think ntoskrnl.exe. I can't remember. Basically, the threats I think were hidden, and either...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 06:11.
Find Us




Windows 10 Forums