avast traps Deloton hijacking attempt but how to stop attacks completely?

Viruses and worms
1

Hi there. My copy of Avast successfully interrupts repeated attempts to take over my browser etc in Chrome on Win 10 - seems to be every time I open Chrome.

But my question is, why does the attempt keep being tried? Is it something that is resident on my PC or does Deloton just have my ip address and somehow externally detects when I run Chrome or what?

Obviously I am pleased and relieved that Avast detects it, but concerned that the attempted attacks keep on happening.

I have run a few malware removal tools like adwcleaner and malwarebytes itself but none detect the presence of Deloton on my machine.

Any help appreciated.

2

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

3

Apologies - the malwarebytes scan was negative, so I did not attach the log. Now appreciate that there might be info you still wanted to see - so now attached. I also ran a Farbar scan and both files now attached.

4

OK, now you’ve to wait for one of the malware experts…

5

Sure - appreciate that

6

** Bump**

Sorry - not sure how long it takes to get a reply. Perhaps I’ll should just keep waiting?

7

Hi,

I’m surprised Sass hasn’t visited you yet. I’ll send them a reminder immediately.

I’m so sorry

8

Sorry for late response.

Can you make screenshot of Avast message/popup?

9

I would if I could, but I think Avast only pops up for 20 seconds as the default. I might well have missed recent examples. I have changed the alert to 120 seconds to increase the chances of my seeing it (I have a three monitor setup so not always working on the relevant screen).

It there an activity log that might help

Richard

10

I don’t see anything in FRST logs.

Please attach following file to your post.

C:\ProgramData\AVAST Software\Avast\report\WebShield.txt

11

OK here is the webshield.txt report. You can see the relevant deloton attempts on 15 and 20 march.

Appreciate your continued support.

Richard

12

Which websites you keep always opened in your browser?

13

I use Chrome and I normally have Gmail, Calendar, Contacts permanently pinned open. Otherwise I might pin a site or two because I am awaiting answers - like this site, maybe Amazon or a couple of forums like Lotus Cars or whatever. I will close these as and when I have got what I was expecting.

14

Report your findings please because Avast probably blocks some ad domain used by websites you use.

15

Er… sorry report what findings?

16

You said " I will close these as and when I have got what I was expecting."
Anyway, test if Avast notification will show if those tabs are closed.

17

Sorry - I have misinterpreted or do not understand what you want me to do.

My earlier comment was that when I have received the information I want from a site in an open or pinned tab, i will close them again and just have gmail, calendar and contacts pinned.

Not sure how to find any option in Avast that shows changes in things like open tabs

18

You can’t see in Avast “changes” but if you stop receiving Avast alerts that means that Avast was blocking ad domain used by websites you visit. Let me know does Avast still displays those popups’

19

No more since the last one in the webshield report (20 March I think). Let’s consider this solved for the moment. If it starts reoccurring I will get back to you.

Thanks for your help as always.

Richard

20

Sorry. I fogot to say what do do. Close not Google websites when you can and see will Avast notification appear.