Suspicious download from greybrown.net warning by Kaspersky

[ekzmlee]

Just out of the blue today whenever I go to Google search I get a pop-up from Kaspersky alerting that malicious download was prevented rooted from the Brave browser directory.

---

Event: Download denied
User type: Active user
Application name: brave.exe
Application path: C:\Program Files\BraveSoftware\Brave-Browser\Application
Component: Safe Browsing
Result description: Blocked
Type: Probability of unauthorized software download
Name: https://greybrown.net/238f7140e57fe9b219.js
Threat level: High
Object type: Web page
Object name: 238f7140e57fe9b219.js
Object path: https://greybrown.net
Reason: Cloud Protection

and

---

Event: We found an application that can be used by intruders to damage your computer or personal data
User type: Active user
Application name: brave.exe
Application path: C:\Program Files\BraveSoftware\Brave-Browser\Application
Component: Safe Browsing
Result description: Detected
Type: Contains adware, auto-dialers, legitimate software that can be used by intruders to damage your computer or personal data
Name: not-a-virus:HEUR:AdWare.Script.Generic
Precision: Heuristic Analysis
Threat level: Medium
Object type: File
Object name: 238f7140e57fe9b219.js
Object path: https://greybrown.net
MD5 of an object: F8644E830BCF0B7ECEEA66A75F64E227
Reason: Expert analysis
Databases release date: Today, 9/7/2022 12:40:00 AM

It has never happened before and I have not downloaded anything today. I’ve clean uninstalled and reinstalled Brave completely but it still occurs. Any help is appreciated. Thank you

[chh_68]

VirusTotal

VirusTotal

Just to be clear this has nothing to do with brave browser. Brave is not at fault here.

Check your cookies and see if anything related to greybrown is listed

brave://settings/siteData

Does the pop-up appear when you only visit greybrown or during casual browsing?

Disable Kaspersky (for this test) and download Malwarebytes https://www.malwarebytes.com/. Do a complete scan of your windows machine.

Detected Trojan Virus Downloaded in the background while using BRAVE

While only having BRAVE downloaded for a total of 30 minutes, I was notified of a Trojan virus download directly to my BRAVE system cache files. I will throw in some information! Please contact me BRAVE devs so we can resolve the issue. But for the rest of the community here is the information on the file downloaded. The file C:\Users**********\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Cache\Cache_Data\f_000150=>(INFECTED_JS) is infected with JS:Trojan.JS.Agent.UJY and was mov…

Nftsolana.fun Threat from Brave Browser

Description of the issue: Hello, i’ve had a worrying issue which happened twice. I was notified by my antivirus Avast that there was a threat blocked from the Brave browser directory. I do not know what I did which triggered the website to try to open this website but I know for sure that i have not been clicking on any links. I’m afraid this comes from Brave browser can someone help me out ? Windows, latest version Brave latest version [image]

[ekzmlee]

Hello. Thank you for the suggestions!

I’ve checked and cleared the cookies: no greyhound related cookies were found and problem persists.

Pop-up seems to only appear whenever I initiate Google search, casual browsing.

I have no idea what greybrown site is. Never heard of it nor visited.

I’ve disabled Kaspersky temporarily and did a complete scan with Malwarebytes: 11 adwares were found and quarantined but problem still occurs.

I really don’t know why this happens only with Brave. I been currently using and testing in Firefox, Chrome, and Edge and I don’t get any warnings.

[chh_68]

@ekzmlee

Pop-up seems to only appear whenever I initiate Google search, casual browsing.

My guess would be some extension messing around. Disable all your extensions and do a simple google search. See if the pop-up still appears.

Or create a completely new profile from top right hand corner, do not change or add anything in it. Do a simple google search and see if the pop-up appears.

It might also be a false positive from Kaspersky Anti-virus program. It happens sometimes.

Some other users might be able to help regarding this issue.

[dansampaio]

I’ve been having EXACTLY the same problem for three days now.
I’ve done all the steps indicated, and I haven’t been able to solve the problem.

[dansampaio]

Just for the record…
I’ve been having EXACTLY the same problem for three days now.
I’ve done all the steps indicated, and I haven’t been able to solve the problem.

[treinamentoswinner10]

Hi! I got here doing research about “greybrown.net”. I’m having the same problem using Chrome. Norton is filtering “Norton Safe Web” (that is a chrome extension) is redirecting me to an alert page that reads: "Malicious site blocked! You tried to access: https://greybrown.net/metric/?wid=52791. This is a known malicious web page We strongly recommend that you DO NOT access this page.

I restored my browser yesterday, and it seemed to be working again. But today it did the same again. I do not know what to do.