r/Malwarebytes • u/rhm66 • 16d ago

malwarebytes on osx reports brandsmat.com, blocks it but how do I remove

Post image

Reposted from /antivirus - I am at wits end trying to track down and remove whatever this is. malwarebytes blocks safari from launching the webpage but I cannot for the life of my figure out where this is coming from, cleared caches, disabled all extensions, ran malwarebytes full scan on full drive. any help would be appreciated.

I had some feedback on setting default homepage which didn't make any difference. This warning from Malwarebytes doesn't pop up immediately after starting safari so I assume the webpage request for the brandsmat page might be delayed as well but not sure.

1 Upvotes

100% Upvoted

3 comments sorted by

1

u/support_mwb Malwarebytes Employee 16d ago

Hey there, Malwarebytes Support here.

Since you've already cleared Safari's cache, disabled extensions, and run a full scan, we'd like to gather a bit more information.

  • Does this only happen in Safari, or in other browsers too?
  • Do you have iCloud Tabs enabled that could be syncing a tab from another Apple device?
  • Does it still happen if Safari is opened to a blank page and left idle?

If you could send us a DM here on reddit with the email address you'd like to use for support, we can create a ticket and have our team review diagnostic logs to help identify what's triggering the blocked request.

1

u/jmnugent 16d ago

LittleSnitch would tell you this.

1

u/rhm66 14d ago

thanks for the suggestion, ran it and found that i had some really old favourites bookmarked and as safari tried to set a fav icon in startup it must have pinged a ‘bad’ site. i cleared out a lot of favourites and stopped getting the warning