1

Hi. I too had that issue in Opera with Adguard extension. Sometimes i got the popup when i opened Opera, or later, when i opened a random webpage. Now i dont get the message since i removed Adguard. My question is: Am i safe? Was that a false-positive? Can i have it still lurking in my system if not?

2

https://forum.avast.com/index.php?topic=53253.0

3

what does this mean? :o it would be a lot more simple to just answer my question. or at least burp something , like: “post in that topic”, or “wrong category”.

4
what does this mean?
It means, follow instructions and attach the requested logs, then a malware expert will answer your question(s)
5

ah all right, let me get those logs

6

Read here what kind of intrusion has happened. Chrome should keep such abuse at bay!
http://blog.elevenpaths.com/2015/04/fake-adblocks-in-chrome-web-store-leads.html
Fake Adguard code in backgroind js.file ::slight_smile:

To check extensions: chrome-extension://lkakdehcmmnojcdalpkfgmhphnicaonm/options.html#

polonus

7

I don’t use Chrome, i use Opera. here are the logs, hope i did everything as i was supposed to do.

8

Opera is also being affected - it is with some adguard IP address.
See:
http://www.herdprotect.com/adguardadblockeradguard.com.xpi-04c34ab118027ecf0fb076a083dac03d2c7c90bb.aspx

The threat: http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan:HTML/Redirector.BB

pol

9

so basically it’s best not to use any ad blocker extensions?

10

It is best not to use adguard for the moment, until the abuse has ceased, you can safely use uBlock,
a decent adblocker I prefer over ABP.
For your Opera browser uninstall adguard and install uBlock from here:
https://addons.opera.com/nl/extensions/details/ublock/?display=en

kind regards,

polonus

11

Logs look clean

12

thanks very much to the both of you, i already installed uBlock just now. Have a nice day!