Weird Web Shield Trojan detection

Hi,

I just did a clean reinstall of my Windows yesterday. Completely formatted the C-Drive and did a new install of Windows 10. I got myself Firefox and Avast again.

Today, when I opened Firefox, I got a “Threat secured” message by the Avast Web Shiel.

We have safely aborted connection on cdn.mwbsys.com because it was infected with JS:Agent-EKY [Trj]. I have uploaded a picture to imgur to better show all relevant information.

https://imgur.com/a/hT4l41r

This is the alert ID: 8b8af7018000/2024-03-20T13:19:59.450Z (in case that helps)

I am unsure what to do with this information. I dont remember which website exactly was open but it was either Facebook or web.whatsapp or web.telegram but nothing weird or shady iirc.

Any suggestions how to continue from here?

Thanks in advance for your help
AMPZar

Yep same here i have multiple users having this error can get the pop ups to stop

Hi,

same for me

i think i got infected lol

Apparently that problem shows up if you use the Malwarebytes-Browser Guard together with Avast:

https://forums.malwarebytes.com/topic/309646-trojen-being-delivered-via-cdnmwbsyscom/

I have the Malwarebytes-Browser Guard running with Avast. Do you have the same setup?

This is essentially two dogs fighting over one bone.

It unusual to see with 2 on access AVs installed, they can trip over each others actions and or signatures.

If the Malwarebytes-Browser Guard is trying to do the same taks as the Web Shield there could be a conflict.

Please refer to this support article which lists several known applications that conflict with the Web Protection in Malwarebytes currently, which includes Avast.

So the shoe can be on the other foot ‘Web Protection in Malwarebytes’ conflicts with Avast (in this particular case the Web Shield).