0

My computer keeps connecting itself to a malicious website.

Here is the image of my antivirus blocking it:

enter image description here

I didn't even open the Web browser when this appeared.

Whenever I start the computer it's like this (happening for a couple of days now).

What can I do to stop it?

Pierre.Vriens
  • 1,425
Deba
  • 11

2 Answers2

1

If you trust your AV, there's only one thing to do:

  1. Backup all your data using a different OS (like a live linux CD)
  2. Reinstall your computer

Why?

If you suspect you have malware, you should always assume, there is more. Also, especially since your AV only catches the connection but not the program, it's probably something that is good at evading AV scanners, especially those running on the same system. There is a chance you can get rid of it if you boot some kind of "AV Rescue System", but I would never rely on that. Copy your data to somewhere safe, don't open anything, reinstall your OS. Then you wait a few days, so the AV makers can catch up to your malware, scan it and only then start trusting your data again. Reason for the delay: AV vendors have to find new viruses to detect them reliably, so there'll always be viruses that they won't catch.

Edit:

Since you asked only what you can do to prevent your computer from connecting to that site: it seems, you're doing that already. But because whatever is trying to connect to that site might be trying to do other things as well, I'll stick with my recommendation above.

PaterSiul
  • 339
-1

My guess is, it might be some program trying to connect to its own service but hijacked or redirected...

Use TCPView and see what is trying to contact that site.

https://technet.microsoft.com/en-us/sysinternals/tcpview.aspx

I recommend you install Malwarebytes and run a quick scan. MBAM is designed to provide layered protection alongside the major AV suites/programs.

John Doe
  • 386