Yevhen Sychov

Seems I understood why it happens.. I don't know how it was added to the "Top hits" list(i suppose via js somehow), but it there and the top rated list is preloading by a browser(that explains random execution). The solution is to reset the "Top hits" list in the safari. Thanks to all for being participating.

hxxp://ww1.bartzmovie.com/?sub1=7ff6acb0-47b3-11e9-b496-0f8abfda80ae 0D14BB0D32B4879D3C9FC52AD829D87674F2E559 hxxp://ww1.bartzmovie.com/?sub1=7ff6acb0-47b3-11e9-b496-0f8abfda80ae FDB03284DA239F29F63C8CC995770BD9D88F9067 hxxp://ww1.bartzmovie.com/?sub1=bfa05138-4667-11e9-b93f-11f91cb2fc4c FC7154DE4580C9C27B748765E5C6DF0858AA5AAB thanks

it empty in mine logs

that is the point - I don't use a browser in a time of such alerts.. but I'll continue my observations, thanks for the answer.

Thanks for the reply, but on a mac log looks different: and in the fields list nothing related to an application

Quite often I get a notification about blocking opening of a url that leads to redirector trojan, but in the logs, I can't find any other information about which app tries to perform this action. I am using Cyber Security Pro product(mac os), is it possible to get this app and remove it? Thanks!