Sudden Phishing Attack or Rootkit or Virus ????

  1. yrralrellim's Avatar
    Posts : 57
    Windows 10 Professional (x64) Version 20H2 (Build 19042.631) 4/15/21
       #1

    Sudden Phishing Attack or Rootkit or Virus ????


    I have no idea what is happening. I have seen the attempt just this afternoon on three of my networked PC's but, SO FAR, Malwarebytes AntiMalware Premium has blocked attempts on all three. Malwarebytes says "Malicious Website" - "Category: Phishing". This PC system is Windows 10 (Build 18362.628) and besides Malwarebytes, I have Bitdefender Total Security installed. The other two PC's where I have seen the same blocked attempt, are also Windows 10. The blocked attempt is outgoing, where "C:\Windows\System32\svchost.exe" is trying to connect to Domain: ipv4.login.msa.akadns6.net - IP Address: 40.90.137.126 - Port: 443

    Can someone please tell me what is going on? I have temporarily disabled Bitdefender Anti-Virus module on one machine and I have started an online scan with the "Sophos Virus Removal Tool".

    Thank you!!
      My Computer

  2. TairikuOkami's Avatar
    Posts : 4,668
    Windows Home Dev 21xxx x64
       #2

    Well, there appears to be a problem with the certificate. You should probably contact Malwarebytes support.
    IP belongs to the Microsoft, but probably DNS requests failed, so it fails to retrieve the correct domain name.
    Attached Thumbnails Attached Thumbnails Sudden Phishing Attack or Rootkit or Virus ????-capture_02102020_203754.jpg  
      My Computer

  3. jamis's Avatar
    Posts : 465
    Windows10 Home 64 bit v. 2004 bld. 19041.867
       #3
      My Computer

  4. yrralrellim's Avatar
    Posts : 57
    Windows 10 Professional (x64) Version 20H2 (Build 19042.631) 4/15/21
    Thread Starter
       #4

    Thank you all very much. I contacted Malwarebytes Support. Problem was a false positive. Problem is now SOLVED.
    Last edited by yrralrellim; 10 Feb 2020 at 15:34.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:46.
Find Us




Windows 10 Forums