URL:Mal Alert 8.29.128.136/casino/CA?

No its not an extension. It is a part of Google sync so that if say you are browsing on an Android tablet and want to have the tabs you are browsing in Chrome on that device open in say your pc’s Chrome browser than I think you just leave those tabs open on the tablet and when you open you browser on the pc the tabs while open. I mean that is provided you are using the same Google Sync account on both devices. That is at least how I understand it is suppose to work.
Well anyways that didn’t solve the problem! As I was typing this up I got the EXACT same alert again!!! So I think I am just going to go ahead and do a reinstall. I must have picked something up trying to find a decent free Video Downloader that would download new Youtube content, Vimeo and Dailymotion videos.
Now before I do that I am going to uninstall a couple of programs that add to the right click context menu, Better File Rename and File Shredder and see what happens.
BTW They only things I had running were Avast, CCleaner Pro (background monitor), Malwarebytes and Mailbird email client.

OK I have found that Chrome is becoming the most insecure browser at the moment

Yah I am starting to wonder. On another note. Yesterday in preparation to try running windows in a virtual box I installed Microsoft Hyper-V and immediately after the required reboot my mouse stopped working in the USB 2.0 port but worked in 3.0 port so I did another reboot than it was fine. Than today after uninstalling the 2 programs I mentioned and rebooting it stopped working again in the 2.0 port. Uninstalled Hyper-V and rebooted but it still won’t work in that port.
I’m going to go ahead with a reinstall as time consuming as it and see what happens. I would like to believe it isn’t Chrome itself mainly because why always the same URL I would think if Google was trying to make some revenue through pop up adds in Chrome it would be using an Ad service and not always that same URL.

So that is all done and so far so good. However I went through my System processes/Details and notice that I now only have 1 process for Realtek HD Audio Manager (RAVCpl64.exe) where before if I recall I had 1 other running twice RAVBg64.exe I checked the folder and that file is there but maybe the infection was hiding itself in RAVBg64.exe.
Well anyways I will see what happens hopefully the clean install took care of what was infected. One thing I should have done now that I think of it is I should have individually did online scans on Virus Total of all the files running in Task manager.
If the alert does pop up than I will replace my router firmware running Tomato Shibby with DD-WRT and see what happens. I just have a hard time believing a router infection would be able to inject links into your web browser but than again anything is possible.

Nope I will go for a Chrome infection as it is becoming quite a regular occurrence now

All that work and it happened AGAIN! I guess I am gonna have to switch to another browser. I was fine right up until about a half hour ago. I did install qBittorent and was setting up the proxy settings to use Pia’s Proxy server than BANG the alert pops up! I don’t think it is qTorrent though since this was the first time I ever tried it. Earlier today I installed Pia’s VPN manager also but had no issues all day.
I would thing if it was Chrome that their would be others getting the exact same alert with the same IP address but than again maybe it isn’t bothering them.

I never thought that maybe it is the popup blocker Popup Blocker Pro? I switched uBlock Origin. I also installed Firefox to replace Chrome but I will use Chrome for a few days or until I get the alert again. If I don’t than its that Chrome extension.

I did a google search for Threat blocked 8.29.128.136 and found some posts that told me to do a scan with SpyHunter which found threats in the extensions folder so I deleted the folder that was involved. I am now pretty sure it was that Popup Blocker Pro extension. I also got a hit in the Firefox extensions folder and uBlock Origin was the only extension I installed so I removed it also. Any suggests on a safe Popup/ pop under blocker? Kinda strange though that the sites that came up are 2 or 3 days old and all are pushing SpyHunter which is very overpriced at I think it was 49.99 for 6 months!

I would not touch spyhunter with a bargepole

As I only use IE I do not use a popup blocker the only extensions/addons I have are RoboForm and google translate

Well I removed the plugin that it detected as a threat manually so hopefully that is what it is. I as mentioned before find it very strange that the only google results pointed to results that were only 2 or 3 days old all pushing that program. This kinda makes me think they are trolling AV support forums.
I will do as much surfing as I can today although I have ran out of things to surf and hopefully I won’t get anymore alerts. If I don’t than I will report that extension to Google.

Surfed off and on all day today and for the past hour and not one alert! I have concluded that it is the browser extension.

Thanks, the only problem is that any extension could be suborned

Subject to no further problems :slight_smile:

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware

https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG

Malwarebytes

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme :wink:

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe :wave:

Well no alerts since removing Popup Blocker Pro. I have attached an image of what Popup Blocker Pro is the problem in case anyone else reads this.

Thanks for your help and time.