Windows 10: Continuing to protect Chrome users from malicious extensions

Source: Chromium Blog: Continuing to protect Chrome users from malicious extensions

 

Thanks for the info. . .*Smile

:)

 

JS/Paco.A Proxy Trojan

Hello everyone!

I've been experiencing a weird type of malware, windows defender is catching this thing several times a day but I cannot find any info on it and where it's coming from.

JS/Paco.A on Windows "Encyclopedia"

That's all the information available via the Microsoft "malware encyclopedia" which labels it as a severe threat. I want to figure out how to get rid of this thing if I can, it's driving me nuts.

Defender always says it finds it in a location like -

"file:C:\Users\Korbin\AppData\Local\Microsoft\Windows\INetCache\IE\0EU83XU0\localhost[1].local"

I've also got Malwarebytes picking up something that seems related -

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 2

Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-3009677750-2374012560-642225824-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigURL, http://localhost.world/localhost.local, , [111fa081ecaef6401762ec024fb46d93]

Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-3009677750-2374012560-642225824-1001\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigURL, http://localhost.world/localhost.local, , [7ab6f8298416b581a5d434ba659e639d]

Registry Data: 0

(No malicious items detected)

Folders: 3

PUP.Optional.CrossRider, C:\Users\Korbin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi, , [141cef328614270fea2b2e959d65df21],

PUP.Optional.CrossRider, C:\Users\Korbin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\0.1_0, , [141cef328614270fea2b2e959d65df21],

PUP.Optional.CrossRider, C:\Users\Korbin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\0.1_0\_metadata, , [141cef328614270fea2b2e959d65df21],

Files: 2

PUP.Optional.CrossRider, C:\Users\Korbin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\0.1_0\_metadata\computed_hashes.json, , [141cef328614270fea2b2e959d65df21],

PUP.Optional.CrossRider, C:\Users\Korbin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi\0.1_0\_metadata\verified_contents.json, , [141cef328614270fea2b2e959d65df21],

Physical Sectors: 0

(No malicious items detected)

Does anybody have any ideas? Greatly appreciate any help!

 

Microsoft Edge

For now, Microsoft Edge doesn't support browser extensions. Most security software tries to install web browser extensions to rate search results, protect you from accessing malicious web sites, provide extra security for online banking and shopping, and
other security features. If these features are important to you, don't use Microsoft Edge.

Edge won't get support for browser extensions until Q1 of 2016 at the earliest. You can use it without security software extensions, but many people rely on those extensions to keep them safe as they search the web. If you want that extra security, use Google
Chrome or Mozilla Firefox instead of Edge.