URL Blacklist: imonews.net

Hello all. I’m trying to get some help. i keep getting a pop up about threat secured in regards to imonews.net.

How can I resolve this annoying problem?

https://www.urlvoid.com/scan/imonews.net/
https://www.virustotal.com/gui/url/843b482961f1bf3e076e5aa436bb5f91fcc3ac2cf1e0ac07c543ddce0c972445
https://urlquery.net/report/a72a1782-1c2d-435b-bea7-74a9174e558e

I’m not sure what to do with the info that you sent. can you elaborate?

Hey! Same problem with me for about a month out of the blue. Tried to scan the whole pc with all types of scans, even the bios one, but no virus was found, which could lead to these pop-ups. Important to mention, that “imonews” is trying to do some harm through powershell, since avast blocking it as well. As I checked, it’s trying to add some kind of code in powershell, but as I mentioned, the avast blocks these actions. Another thing, when “imonews” pop-up occours - “Extension” folder is created automatically in local disc C:, which adds a fake “Google Docs” extension to Chrome. Tried to delete the “Extension” folder, scan Google Chrome, reinstall it, but no changes. Pop-ups are still occurring everyday. What is happening??? As I checked, a lot of people started to get these pop-ups recently from nowhere, so It’s hard to believe that multiple users could’ve got infected with the same and unrecognized virus due to their carelessness.

Sending how these folders look:

https://www.part.lt/img/acb15a04cc36b45e9457f49a05d884b8783.PNG

i’ve scanned with malwarebytes, avast, hitman pro, and windows malicious tool. no virus found in any program, but this imonews pops up everyday for about a week now. I’ve uninstalled and reinstalled chrome since its the only browser that I use.

Does this help?

Try clear Your browser history

In all major Internet browsers (e.g., Chrome, Edge, Firefox, IE, Opera), pressing Ctrl + Shift + Delete opens the Clear browsing data window to quickly clear private data and history

Does it still happen?

  • If so try starting your browser with apps disabled.

Does it still happen?
If not, one of your browser add-ons would appear to be connecting to this site.
Now it is a bit of a pain, disabling one app at a time to find it.
Start with any app recently added and or apps recently updated.

I tried this already, thanks for trying to help though.

@ Jaya3
@ ernestas444

Suggest going to either Malwarebytes or BleepingComputers forums for additional help. Link backwards to this topic when you do this.

If the solution is simple (something we can help other users with) let us know.

We are avast users like you, but ones who help others.

Thanks for the responses. Got this pop-up today again. I forgot to make screenshots earlier, therefore sending right now.

@mchain
thank you

can anyone from avast pop in and help?

It is best to attach screenshots to your post, rather than an unknown 3rd party link (many Avast users won’t visit).

  • Attaching Images to your post - When you Click the Reply button it opens a text window for you to post your comment (reply or post).
    Click the Preview button, that shows what you have input and expands it to include ‘Attachments and other options’. Click that it further expands, here you can attach images, etc. at the bottom of your post.
    See my attached image, click to expand.

Thanks, didn’t notice that earlier.

You’re welcome.

As far as can Avast help - I’m afraid there is no such service in Avast.
There are no longer any volunteer, qualified, malware removal specialists in the forums, they have to remain active to remain qualified. So the suggestion by ‘mchain’ in Reply #7 is your best option.