Removal of JS:Miner-AI[PUP] - windows-7

When I try to access every site without using HTTPS. I get a popup from avast telling me they have blocked it.
It says 'JS:Miner-AI[PUP]'. When I try to access google.com (without https) it happens as well.
I have tried the following:
Scan with Avast, adaware and Malwarebytes (used to remove previous versions of js:miner)
Does anyone have any suggestions on what I can do to remove it?

Not sure what is going on but I am sure google.com is not malicious so my best guess is that your computer is infected with malware which tries to inject Javascript/HTML code into every page you visit probably by hooking wininet functions.
Most Malwares inject code into chrome, firefox and internet explorer. one way to check is to install another web browser and check if everything is good in that browser or not. Another way is to restart the computer and run again in safe mode (disable all the start up programs except for AV) and again run your favorite browser to see if the problem solved. if the browser's exe file (chrome.exe or firefox.exe) or any of the their DLLs are infected, then you have to reinstall the browser.
hope it helps :-)

Turns out that the router was infected. Once the router was replaced the problem was solved.

Related

Connection timeout issue in Visual Studio Code

I have been facing some weird connection timeout issues in Visual Studio Code.
I am writing a simple web crawler to read a website using the requests and beautifulsoup4 packages in Python. I don't have any problem opening the URL in my web browsers (opens fine in Edge and Chrome), but when I say request.get(url), then the request always times out. Also, when I try to install some additional packages using pip, it always times out. But the corresponding PyPI page opens fine on my web browser.
The funny thing is - I am facing this issue only when I work out of my company's office. I don't have this issue at all when I am working from my home. There shouldn't be a system-wide firewall or a network firewall, because if there is, then the sites shouldn't be opening on my browsers too, right?
I went to VS Code Preferences and checked the settings there. There's no proxy set up. There is nothing specifically that would block network requests from inside VS Code. Here are some screenshots showing what VS Code Settings looks like.
I looked online and couldn't find much, since every question out there is regarding timeouts in SSH connections, which isn't relevant to me here. This official site here gives a bunch of URLs that need to be allowed by the firewall for VS Code to be able to connect to the network, but I don't know where to add them.
Is there something that I am missing? Any leads on how I can debug this issue? Or is it something that I'll have to take up with my company's network administrator?
TIA.

localhost chrome on catalina

I can not get localhost to work on chrome after upgrading to macOS Catalina. I spent a lot of time trying to figure out why I was getting this message
localhost normally uses encryption to protect your information. When Google Chrome tried to connect to localhost this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be localhost, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Google Chrome stopped the connection before any data was exchanged.
You cannot visit localhost right now because the website sent scrambled credentials that Google Chrome cannot process. Network errors and attacks are usually temporary, so this page will probably work later.
(I wish I had taken a screen shot)
I don't know if this is the "best" solution but it got me able to code again so I figured I would share. I was seriously stuck and couldn't find any answers and saw someone mention this solution to another issue. Go to chrome://flags/#allow-insecure-localhost and change to enable.
Hope this helps someone else. I know this isn't really a question but there's not really a way to just share this. I guess I could use twitter and reddit.
OS X Catalina increased the requirements for an SSL/TLS certificate to be acceptable around November 2019. Notably, certificates now need a "Subject Alternative Name" section, which was not previously required. Note that this is an OS-level requirement and not specific to a single browser (although it doesn't affect FireFox because Firefox doesn't use the OS security stack).
The solution to your issue is how you generate the SSL certificate, not anything you can do as a Chrome user. This particular issue can not be bypassed by clicking through a Chrome warning message.
Also note that fixing this issue for OS X may make the certificate unusable on Chrome + Linux (I have linked to WebPack Dev Server's GitHub Issue discussion of this issue).

Some links refers to localhost but hosts file is fine

I am not sure what tags to add on this question. I will describe my situation as well as I can.
I open the virtual hosts at the chrome, run the phpstorm, read php code. After I searching the question of the code, then I refresh the page, and I am in trouble.
It is so sudden which is never happened before. I tried to figure out what is going on, but I got nothing.
All I know is some links refers to localhost automaticly and I have no idea about it.
The problem website is https://www.iviewui.com/docs/guide/install as far as I know.
I press f12, switch to Network panel and get these.
It seems https://file.iviewui.com/dist/main.9011c9acade2093b2da7.css not works well, so I visit https://file.iviewui.com directly then it shows me Access forbidden! . Ok, I visit http://file.iviewui.com, and it really confuses me that it shows the same result of localhost.
However I am not put the website into hosts file.
I have doubted that it might be caused by the proxy plugin. I open another brower firefox, still get the same result.
Also doubted that it might be caused by the virus, but it doesn't make sense. Actually I did use the safemgr software and still got nothing.
Tried stoping apache of xampp and get ERR_CONNECTION_REFUSED which means it really refers to localhost.
Before I ask this question, bootstrap website has the same problem.I was editing this question meanwhile I visited bootstrap website again and problem disappeared. I still don't know why and iView website still has the problem.
Tried restarting the computer and problem is still there.

Can't access microsoft.com and skype.com web site after installing VS2013 Preview

Recently i installed Microsoft Visual Studio 2013 Preview Ultimate on Windows 7. Everything went smoothly except now i can't access www.microsoft.com and www.skype.com anymore. Tried latest IE10 and FireFox, both show blank page when accessing the above mentioned web sites. Firefox in its left bottom corner shows that it is waiting for ajax.aspnetcdn.com.
I'd really like not to reinstall OS on my machine, so i'd appreciate any idea how to fix this. For myself i tried to stop Firewall service and disable MS Security Essentials runtime protection, neither helped.
PS: I can access www.microsoft.com and www.skype.com from another machine in the same local network
UPDATE: i am using tfs.visulstudio.com as my TFS server and it opens fine if i am not signed in. But once i am trying to log in it opens blank, like browser is waiting for something (the same as for microsoft.com and skype.com). Something related to live ID?
Don't think this is the website to post this kind of question but try uninstalling VS2013 preview because you think that's causing the problem. Search in Google for people getting similar problem. I also don't think it is VS2013 because I can't think of anyway of how VS2013 would somehow disable you from going to a certain website. Make sure the sites weren't down at the time or if you're having something kind of Internet server issues.
skype is owned by microsoft, so you can't enter both microsoft pages. This could be related with some kind of ISP (Internet Service Provider) and not with VS2013, or you can try rebooting your router. Last thing i would do is traceroute both address and see where they fall.
I wanted to write this as a comment but I don't have enough reputation yet. Anyway, obviously trying to uninstall the program and trying again would be a good start as already mentioned, but you should also look inside your hosts file for any weird redirections some virus of malware might have set up. It's located at "C:\Windows\System32\drivers\etc" and you can open this inside notepad (might require notepad to be run as an administrator). Check to see if skype.com or microsoft.com are in there and are pointing to a different IP address. If they are you can just remove them and save the file (might require a restart to take effect). If still no luck you should try a livecd of a linux distro to make sure the problem is definitely inside your windows somewhere.
Let us know how it goes.

Localhost on windows 7 configuration issue

When I am making changes on my localhost, it is not working. I am on windows 7 but when I copy the file in which the changes were made, and try to execute them in Windows XP, its working. I as I asked someone who has a lot of knowledge on this and they said it is a configuration issue.
Someone else told me it was because of output caching, so I disabled everything and tried, even then there was no response. Can anyone tell me how do I go about it?
This was because of caching issue.
Navigate to Control Panel\All Control Panel Items\Administrative Tools\IIS Configuration Manager, select Output caching, then add new rule with follow parameters:
Insert types of files, you are changing(.aspx,.php) in File name extension field and simply unselect all types of caching. Then restart server and it should work now
I could hardly understand your word, so I think your very first task is to make sure you understand IIS and how to start troubleshooting.
Without a clearer description on the problem, nobody can provide you useful information on how to resolve it.
If you like, open a support case with Microsoft support team and talk to the support engineer about your issue.
http://support.microsoft.com

Resources