I believe that I am being attacked by the ipy sheetinglulu malware

  • 23 September 2015
  • 5 replies
  • 26 views

I am being attacked by something called ipy sheetinglulu
 
When I scan for it, the webroot & malwarebytes scan doesnt find anything.
 
When I go to my Task Manager, I cant find the process to end it.
 
Somehow, it's attached to my google.com browsing actions...everytime i open a new search or go somewhere on my google browser, the malwarebytes window pops up, with and ip addy, port ans  a message saying "OUTBOUND" and the alleged computer file that's infected.
 
PLEASE HELP !
 
Thanks for your assistance,
 
Mike Wilcox

5 replies

Userlevel 7
Mike,

Sorry to hear about the issue you are experiencing.

If you believe you are infected, the best thing to do is contact support so they can take a look at this for you, completely free of charge.
 
Support Number: 1-866-612-4227
Support Ticket: https://detail.webrootanywhere.com/servicewelcome.asp
 
Please let me know if there is ever anything I can do to assist.
 
Regards,
PS...
 
The process highlighted is C:Program Files (86)GoogleChromeApplicationchrome.exe
 
Do I have to find this process in my Task Manager and end it ?
 
What else do I have to do ?
 
THanks again,
 
Mike
Thank you James !
Userlevel 7
Mike,
 
That is the process for Google Chrome, that is not malicious.

Please contact support when you have an issue you believe to be threat-related.
 
You can call, or create a ticket.
 
Support Number: 1-866-612-4227
Support Ticket: https://detail.webrootanywhere.com/servicewelcome.asp
 
Regards,
 
Userlevel 7
Hello there, 
 
If I can add a couple of things.
 
1) Even after you close Chrome, you WILL still see it in the task manager.  It does keep some background processes running after closing the browser window, so do not let that spook you.
 
2) Since you mentioned that the pop up is coming in from Malwarebytes, it sounds to me like you need to adjust the settings there.  It sounds like you have it set to flag ALL outbound traffic from ALL programs.  I am sorry I cannot help you adjust that program here in the Webroot Community, but it sounds like that is where the problem actually is.

Reply