I can’t send an image but Im gonna copy what it says on the screen, it has been doing it for at least a month and I usually download a lot of stuff into my computer so idk if I got a virus, a chrome extension doing sus things a my computer, am I part of a botnet already or idk… Threat secured
We’ve safely aborted connection on client.yg5sx5kzy.com because it was infected with URL:Blacklist Threat name
Threat type
URL
Process
Detected by
Status
URL:Blacklist
Miscellaneous - This is malicious software that could harm
your data, computer, or network.
https://client.yg5sjx5kzy.com/client_cgi/conn_test
C: Program Files Google|Chrome Application\chrome.exe
Web Shield
Connection aborted
Pd: it does it every time I open chrome or so on every hour
a chrome extension doing sus things a my computer
That would be my guess based on your description. Chrome is trying to open up a connection to a site that you antivirus has flagged as malicious.
Have you installed something called Hola VPN? At least according to JoeSandbox that’s what the URL is trying to get you to do: https://www.joesandbox.com/index.php/analysis/1393010/0/html#deviceScreen
Here’s a discussion on HolaVPN: https://news.ycombinator.com/item?id=18161706
One of my “favorite” evil business models is Hola VPN (https://hola.org), a free browser VPN extension. Hola VPN users unknowingly become exit nodes for residential IP address proxies for sale at https://luminati.io.
If not, it may have modified your Chrome start-up page or your Chrome shortcut.
If you do need a free VPN, you might want to look at Proton.
I do have hola vpn thank you so much
Thanks, I had the same problem and it was solved after unninstalling HolaVPN