Skip to main content
To Customer Support To Customer Support
I am being attacked by something called ipy sheetinglulu

 

When I scan for it, the webroot & malwarebytes scan doesnt find anything.

 

When I go to my Task Manager, I cant find the process to end it.

 

Somehow, it's attached to my google.com browsing actions...everytime i open a new search or go somewhere on my google browser, the malwarebytes window pops up, with and ip addy, port ans  a message saying "OUTBOUND" and the alleged computer file that's infected.

 

PLEASE HELP !

 

Thanks for your assistance,

 

Mike Wilcox
Mike,



Sorry to hear about the issue you are experiencing.



If you believe you are infected, the best thing to do is contact support so they can take a look at this for you, completely free of charge.

 

Support Number: 1-866-612-4227

Support Ticket: https://detail.webrootanywhere.com/servicewelcome.asp

 

Please let me know if there is ever anything I can do to assist.

 

Regards,
PS...

 

The process highlighted is C:Program Files (86)GoogleChromeApplicationchrome.exe

 

Do I have to find this process in my Task Manager and end it ?

 

What else do I have to do ?

 

THanks again,

 

Mike
Thank you James !
Mike,

 

That is the process for Google Chrome, that is not malicious.



Please contact support when you have an issue you believe to be threat-related.

 

You can call, or create a ticket.

 

Support Number: 1-866-612-4227

Support Ticket: https://detail.webrootanywhere.com/servicewelcome.asp

 

Regards,

 
Hello there, 

 

If I can add a couple of things.

 

1) Even after you close Chrome, you WILL still see it in the task manager.  It does keep some background processes running after closing the browser window, so do not let that spook you.

 

2) Since you mentioned that the pop up is coming in from Malwarebytes, it sounds to me like you need to adjust the settings there.  It sounds like you have it set to flag ALL outbound traffic from ALL programs.  I am sorry I cannot help you adjust that program here in the Webroot Community, but it sounds like that is where the problem actually is.

Reply


Terms & Conditions