Processing Ajax...

Title
Close Dialog

Message
OK

Confirm
Close Dialog

NoYes

Confirm
Close Dialog

CancelConfirm

Confirm
Close Dialog

CancelDelete
<< DiscussionsReply

Malwarebytes detecting web access

User Image
Matt Turley
14 discussion posts
Quote:
Every couple of minutes Norton history shows displayfusion as trying to access data (see screenshot). Can someone please explain what the program is trying to do and why Norton might be blocking it as a threat? I have noticed this for a long time on numerous installs of Win 10, just asking now (i.e. its not related to virus definition versions or displayfusion program versions).


I have Malwarebytes just tonight detecting the Display Fusion executable trying to connect to sketchy websites. What is going on?

For example:

-Log Details-
Protection Event Date: 3/3/21
Protection Event Time: 9:44 PM
Log File: e2e57936-7c9b-11eb-95b7-00ff5c586fa9.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1173
Update Package Version: 1.0.37757
License: Premium

-System Information-
OS: Windows 10 (Build 19041.804)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data-
Category: Phishing
Domain: cosmonerd.com.br
IP Address: 159.65.71.181
Port: 443
Type: Outbound
File: C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
Mar 4, 2021 (modified Mar 4, 2021)  • #1
Owen Muhlethaler (BFS)'s profile on WallpaperFusion.com
Hi Matt,

Do you have DisplayFusion configured to use any online wallpaper sources? If so, which ones?

Thanks!
Mar 4, 2021  • #2
User Image
Matt Turley
14 discussion posts
Quote:
Hi Matt,

Do you have DisplayFusion configured to use any online wallpaper sources? If so, which ones?

Thanks!


Would this only be the active ones? I mean the ones that are currently in use as I know I have used different ones over the years? Also, it doesn't look like the behavior continued today, at least if it did there was nothing new detected by Malwarebytes.

Currently I am using:
Astronomy Picture of the Day
Bing Image Search
Google Earth View
Mar 5, 2021 (modified Mar 5, 2021)  • #3
Owen Muhlethaler (BFS)'s profile on WallpaperFusion.com
Hi Matt,

It's likely one of those sources that are trying to pull an image from that website. If the issue comes back, can you try to disable them and see if it persists?

Thanks!
Mar 5, 2021  • #4
User Image
Matt Turley
14 discussion posts
Quote:

It's likely one of those sources that are trying to pull an image from that website. If the issue comes back, can you try to disable them and see if it persists?


I'm pretty sure that this is Malwarebytes not liking certain sites that Bing is pulling from since I caught it generating an alert right when wallpaper was refreshing. I don't really want to disable Bing Image Search over it, since hopefully I'm being protected from malicious activity on the rare occassion it triggers Malwarebytes. Unless you have any other suggestions short of disabling problem image sources, I'll just live with this. Thanks.
Mar 9, 2021  • #5
Owen Muhlethaler (BFS)'s profile on WallpaperFusion.com
Hi Matt,

Unfortunately there isn't really anything we can do if Bing is automatically searching for them, but if Malwarebytes is blocking the sites anyway, you should be fine.

Thanks!
Mar 9, 2021  • #6
Subscribe to this discussion topic using RSS
Was this helpful?  Login to Vote(-)  Login to Vote(-)
FacebookShare
TwitterShare
LinkedInShare
RedditShare
EmailShare
<< DiscussionsReply