Solved Malwarebytes blocking outgoing file(s)

[romeohotel]

Hello I am getting this message at least 3 times a session.
Your help appreciated. RH.


Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 10/15/17
Protection Event Time: 1:54 PM
Log File: 097bbc80-b1a8-11e7-bd16-3085a92e7a96.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2029
Components Version: 1.0.212
Update Package Version: 1.0.3015
License: Premium

-System Information-
OS: Windows 10 (Build 15063.674)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: ia801509.us.archive.org
IP Address: 207.241.228.159
Port: [52930]
Type: Outbound
File: C:\Program Files (x86)\Opera\48.0.2685.39\opera.exe



(end)

 

[TwinHeadedEagle]

Welcome,


Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
  
  
  
  
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

[romeohotel]

Thanks for reply I have run Farbar please see attached,

 

[TwinHeadedEagle]

Have you checked Opera's extensions? Anything suspicious there?

 

[romeohotel]

The only extension that looks as though it may be a problem is WebRTC Prevent.

 

[TwinHeadedEagle]

Can you remove it?

 

[romeohotel]

Hello, Yes I can remove extension. I will certainly try that.
On vacation today returning Sunday, please watch this space.
RH.

 

[romeohotel]

I am going to disable Opera extensions one at a time. Disabling WebRTC Prevent did not
make any difference.

 

[TwinHeadedEagle]

Can you try to clean Opera's cache?

 

[romeohotel]

Hi, just returned from short, but exhausting city tour, and now back on line.
Thanks for suggestion. I have cleared Opera's cache. Will have to wait a while
to see if this has had desired effect.

 

[romeohotel]

Sorry, clearing Opera cache did not work.

 

[TwinHeadedEagle]

Is this happening only when Opera is active? Can you try to reinstall it?

 

[romeohotel]

I switched to Firefox for sometime yesterday - no warnings.
I have just uninstalled and reinstalled Opera and for a while I
thought this had done the trick,but not so. Warning popup soon returned.

 

[TwinHeadedEagle]

So it is not happening when you use Chrome, only Opera?

 

[romeohotel]

Yes only Opera.

 

[TwinHeadedEagle]

Do you have a Google account in Opera by any chance?

 

[romeohotel]

I have Google search bar above my Speed Dial tabs, Google Home page and Google News
are two of my Speed Dial tabs. I use Google News a lot, but the popup seems to be random
and not just when I am browsing Google.

 

[TwinHeadedEagle]

I asked did you login to Google account after reinstalling Opera?

 

[romeohotel]

Sorry, the answer to your question is no I did not sign in to my google a/c after I reinstalled Opera.
I have just checked and I am still not signed in.
Two popups in quick succession when I started Opera this morning after a pc restart.

 

[TwinHeadedEagle]

MalwareBytes is blocking a phishing site. I don't know why is it happening. Does it happen as soon as you start opera or when you browse some website?