Suspicious download from greybrown.net warning by Kaspersky

Browser Support Desktop Support
1

Just out of the blue today whenever I go to Google search I get a pop-up from Kaspersky alerting that malicious download was prevented rooted from the Brave browser directory.

Event: Download denied
User type: Active user
Application name: brave.exe
Application path: C:\Program Files\BraveSoftware\Brave-Browser\Application
Component: Safe Browsing
Result description: Blocked
Type: Probability of unauthorized software download
Name: https://greybrown.net/238f7140e57fe9b219.js
Threat level: High
Object type: Web page
Object name: 238f7140e57fe9b219.js
Object path: https://greybrown.net
Reason: Cloud Protection

and

Event: We found an application that can be used by intruders to damage your computer or personal data
User type: Active user
Application name: brave.exe
Application path: C:\Program Files\BraveSoftware\Brave-Browser\Application
Component: Safe Browsing
Result description: Detected
Type: Contains adware, auto-dialers, legitimate software that can be used by intruders to damage your computer or personal data
Name: not-a-virus:HEUR:AdWare.Script.Generic
Precision: Heuristic Analysis
Threat level: Medium
Object type: File
Object name: 238f7140e57fe9b219.js
Object path: https://greybrown.net
MD5 of an object: F8644E830BCF0B7ECEEA66A75F64E227
Reason: Expert analysis
Databases release date: Today, 9/7/2022 12:40:00 AM

It has never happened before and I have not downloaded anything today. I’ve clean uninstalled and reinstalled Brave completely but it still occurs. Any help is appreciated. Thank you

2 Likes
2

Just to be clear this has nothing to do with brave browser. Brave is not at fault here.

Check your cookies and see if anything related to greybrown is listed

brave://settings/siteData

Does the pop-up appear when you only visit greybrown or during casual browsing?

Disable Kaspersky (for this test) and download Malwarebytes https://www.malwarebytes.com/. Do a complete scan of your windows machine.

1 Like
3

Hello. Thank you for the suggestions!

I’ve checked and cleared the cookies: no greyhound related cookies were found and problem persists.

Pop-up seems to only appear whenever I initiate Google search, casual browsing.

I have no idea what greybrown site is. Never heard of it nor visited.

I’ve disabled Kaspersky temporarily and did a complete scan with Malwarebytes: 11 adwares were found and quarantined but problem still occurs.

I really don’t know why this happens only with Brave. I been currently using and testing in Firefox, Chrome, and Edge and I don’t get any warnings.

2 Likes
4

My guess would be some extension messing around. Disable all your extensions and do a simple google search. See if the pop-up still appears.

Or create a completely new profile from top right hand corner, do not change or add anything in it. Do a simple google search and see if the pop-up appears.

It might also be a false positive from Kaspersky Anti-virus program. It happens sometimes.

Some other users might be able to help regarding this issue.

3 Likes
5

I’ve been having EXACTLY the same problem for three days now.
I’ve done all the steps indicated, and I haven’t been able to solve the problem.

1 Like
6

Just for the record…
I’ve been having EXACTLY the same problem for three days now.
I’ve done all the steps indicated, and I haven’t been able to solve the problem.

1 Like
7

Hi! I got here doing research about “greybrown.net”. I’m having the same problem using Chrome. Norton is filtering “Norton Safe Web” (that is a chrome extension) is redirecting me to an alert page that reads: "Malicious site blocked! You tried to access: https://greybrown.net/metric/?wid=52791. This is a known malicious web page We strongly recommend that you DO NOT access this page.

I restored my browser yesterday, and it seemed to be working again. But today it did the same again. I do not know what to do.

8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.