Hyper guard chrome extension malware?

[capr]

Hi everyone. I have been googling this but get completely unrelated results.

 

For the last couple of weeks. I will randomly get a popup while using google chrome. It is trying to get me to download some security chrome extension. the domain is suspicious but always the same. I am half thinking I have undetected maleware but can't tell. Does anyone recognize this? 

 

 

[goretsky Supervisor]

Hello,

 

My assumption would be that Chrome has a malicious extension installed which is opening this, or the DNS or proxy settings for the computer/network have been compromised to redirect you to it.

 

Regards,

 

Aryeh Goretsky

 

[Nick H. Supervisor]

How random is "randomly"? Is there no pattern at all? And as Aryeh mentions, what extensions do you have installed at the moment? Does this only happen with Chrome, or with other browsers as well?

[Steven P. Administrators]

mimastrollers.com redirects to https://www.mimakidsusa.com/ which are pushchairs/strollers for infants. I suspect the domain has been hijacked to spread that malware.

[capr]

it's pretty random... happened as I was trying to navigate to this site just now. Yesterday I was just checking a Wikipedia page. it only opens when I am directly using chrome. doesn't just pop up while I am in  game or anything. I pretty much only use chrome.

 

The only extensions I have are adblock, improve youtube!, IE Tab. google voice, docs, dictionary.  I had tapermonkey installed for some projects but just removed it. maybe that was it...

[Marujan]

wp-content/download sais its Malware link

 

check SSL certificate or Virustotal.com

[capr]

6 hours ago, Marujan said:

wp-content/download sais its Malware link

 

check SSL certificate or Virustotal.com

Yea it's def malware. i just don't know what's triggering it. I just rand superatispyware and it didn't find anything... 

[Dawyer]

I have the same pop ups, happened twice on snowcrows.com. I'm using ublock origin, adblocker, Google opt out extensions, and apparently some extension supposed to make me able to edit my drive offline. Bitdefender and Windows defender didn't pick up on anything.

[Marujan]

23 hours ago, capr said:

Yea it's def malware. i just don't know what's triggering it. I just rand  and it didn't find anything... 

what is trasshy app you using? what is super-ultra-deluxe-premium-antispyware?

 

Kaspersky AV is no longer free for USA users, but you can try 30 days for free

https://usa.kaspersky.com/home-security

 

 

 

Edited March 23, 2021 by Marujan

[goretsky Supervisor]

Hello,

Start by removing all the non-Google provided extensions and see if that makes any difference.

 

Also, does the problem occur in any web browsers besides Google Chrome?

 

Regards,

 

Aryeh Goretsky