online threat when in emails

[treacle1]

Is anyone else getting continuous online threats when using Yahoo mail? This does not happen when I am browsing it is only when I go in to my emails In the space of 1 hour I have received 60 notifications through my anti virus security of an online threat, same details are coming up all the time. It is driving me insane.

[caesarome]

Without seeing one of these 60 notifications it is difficult for us to say why your anti virus seems to have a problem with your Sky Yahoo email account. Do you login to the Sky website to view your account ?

[treacle1]

Many thanks for your reply. My Anti virus is blocking this so it is not coming through to me it is the amount of times it is trying to attempt. It is regarding chrome.exe and it is coming from something called imp-euro.emxdgt.com. Like I said it only happens when I go into my sky email account. I access this by logging in to my sky account then select the Yahoo mail. It does not happen when I am browsing the web. I did google about chrome.exe and there were suggestions about removing this as it is not essential but I am unsure about doing this.

[jayach]

---

@treacle1 wrote:

 I did google about chrome.exe and there were suggestions about removing this as it is not essential but I am unsure about doing this.

---

LOL. It's not essenial unless you want to use the Chrome browser.

Try using a different browser and see if they still occur.

Are you using Bitdefender as your anti-virus?

[treacle1]

Yes I am using Bitdefender, have used them for some time now. I am not sure if I tried my emails in microsoft edge can't remember will have a go at that and see what happens. 

[jayach]

I asked if it was Bitdefender you were using, because other Bitdefender users have complaned of the same thing when using Chrome to access their Yahoo emails. If possible try in Firefox as Edge is just another chrome clone now. (albeit a good one)

[treacle1]

Hi Jayach

Just gone in to Microsoft Edge and same thing is happening but this time instead of saying chrome.exe it is saying the following:-

msedge.exe attempted to establish a connection relying on an unmatching security certificate to imp-euro.emxdgt.com.. We blocked the connection to keep your data safe since the used certificate was issued for a different web address than the targeted one.

Seems strange it is only on my emails this is happening. Think I may have to get on to Sky and see what is going on and if they can help. These damn pop ups are driving me insane. 

[jayach]

I definitely think the problem is with Bitdefender. You could try adding that website to its exception list. https://www.bitdefender.com/consumer/support/answer/1519/

Edit: It may be worth running a Malwarebytes scan before doing that.

https://www.malwarebytes.com/mwb-download/

[Mark39]

@treacle1 I took a look at this too and I agree with @jayach - it does seem to be an anomaly with Bitdefender, rzther than the presence of genuine threats. Hopefully Bitdefender are aware and will fix the false positive.

[treacle1]

Hi Mark

Many thanks for your reply, appreciated 

Regards

Chris

[treacle1]

Thank you Jayach x

[wirefan59]

This whole thread, particularly the helpful answers is most welcome.  As a new participant in Bitdefender, I too am inumdated with its "warnings of critical threat" for this Chrome anomaly.  I am sorely tempted to add this to the exceptions just to stop it clocking up every time I go into Sky Yahoo emails.

If anyone gets any joy with a solution, PLEASE post it.   Many thanks to all above.

[treacle1]

Hi there, I am also tempted to allow but as I do not know what it is that is trying to get through I am very wary so have not done so yet. I am going to see if the IT guys we use at work have any ideas. If they do i will let you know.

[jayach]

Do Bitdefender not have a forum/helpline where you can query this?

[wirefan59]

just received this from Bitfinder support :

"This usually indicates that there are issues with the certificates for that endpoint, and since Bitdefender enforces encrypted connections at all time, it will block it due to that certificate. However, the website looks legitimate and may be an endpoint used by your email provider, thus you should be safe to create an exception for it. "

In light of this I will add this issue to the "Exceptions" function.