Jump to content
dpcrawley

Address has been blocked pops up every 8 or so minutes

Recommended Posts

I keep on getting this message every eight or so minutes. I did a full scan of my drive and found nothing. Not sure how to stop this.

Usswwwwwwwntitled.jpg

Share this post


Link to post
Share on other sites

I also got this message in every 10 minutes ever since yesterday., 

Share this post


Link to post
Share on other sites

You're the second person to post about this URL. It could be a false positive from Eset. The IP address points to an Amazon Internet backbone server.

When the alert appears again, click on the on the down arrow pointer "Details." This should show what process is performing the network connection.

Also check Eset's Filtered Websites log. There should be entries there showing the source process.

Submit URL address to Eset via Eset GUI as a suspicious process with verbage duplicate to what you have posted in this thread.

Edited by itman

Share this post


Link to post
Share on other sites

It has been posted also on here 

 seems to be possibly linked with ExpressVPN

Share this post


Link to post
Share on other sites
Posted (edited)

If you have their extension in browser , remove it , it will be solved

There is JavaScript Redirector in that website , I don't know what this link has to do with that VPN

Quote

JS.Redirector is a detection used to identify HTML files containing JavaScript that redirects users to malicious web content.

 

Edited by Rami

Share this post


Link to post
Share on other sites
Posted (edited)
1 hour ago, Rami said:

If you have their extension in browser , remove it , it will be solved

Not so sure on that one. As I posted in the other thread on this issue, some were receiving the Eset alert with no desktop initiated processes running. Resolution might require full ExpressVPN removal till they resolve the issue.

A workaround would be to create an Eset firewall rule to block outbound TCP/UDP network traffic from C:\Program Files (x86)\ExpressVPN\xvpnd\xvpnd.exe to IP address, 3.218.219.179 . Note that this rule must be placed above any existing C:\Program Files (x86)\ExpressVPN\xvpnd\xvpnd.exe rules. Also verify the directory ExpressVPN is installed in. On x(64) systems, it may be in C:\Program Files instead.

Alternatively, one could create an entry in Eset's Web Access Protection "List of blocked addresses" for *.7g6njejx.com/* . This method would be more effective if ExpressVPN changed IP address being used.

 

Edited by itman

Share this post


Link to post
Share on other sites
1 hour ago, itman said:

Not so sure on that one. As I posted in the other thread on this issue, some were receiving the Eset alert with no desktop initiated processes running. Resolution might require full ExpressVPN removal till they resolve the issue.

A workaround would be to create an Eset firewall rule to block outbound TCP/UDP network traffic from expressVPN.exe to IP address, 3.218.219.179 .

Alternatively, one could create an entry in Eset's Web Access Protection "List of blocked addresses" for *.7g6njejx.com/* . This method would be more effective if ExpressVPN changed IP address being used.

 

I believe one who use the expressVPN ,  should consider again if to use them or not , after all when one uses VPN he/she should feel more secure while using VPN and not more vulnerable :lol:

Share this post


Link to post
Share on other sites

Solution: Had several conversations with VPN provider and concluded that I needed to add an exception in NOD32 Antivirus for my VPN .exe  No pop ups since.

Some background: the IP address's that change & are associated with the pop up address, if searched, state that they are associated with Amazon - they in fact are NOT associated, unless my VPN is hosted on an Amazon server!?  ;)

Share this post


Link to post
Share on other sites
On 10/3/2019 at 1:22 PM, Playya said:

Solution: Had several conversations with VPN provider and concluded that I needed to add an exception in NOD32 Antivirus for my VPN .exe  No pop ups since.

Some background: the IP address's that change & are associated with the pop up address, if searched, state that they are associated with Amazon - they in fact are NOT associated, unless my VPN is hosted on an Amazon server!?  ;)

I'm no expert about VPNS but it may be risky adding the VPN to exception - What many users have found is updating the VPN fixed the issue and if this is the case it is safer than adding it to the exceptions

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...