Survived an attempted attack on my laptop on Monday, but have noticed Bitdefender keeps blocking a suspicious chrome connection.
I'll be blunt about what happened to me: I was looking into unlocking everything for Ghost Recon Wildlands to play with my friends, as I've had the game for 7 years and didn't feel it would be a problem to just, mod some shit in. A mod on NexusMods, well, two, actually, by different authors, said to use the Empress crack of the game in conjunction with the legitimate version, and Cheat Engine, to transfer completed Empress crack saves over to the legitimate game. I wound up being subjected to the 'Installer' virus that spews Mr Beast Crypto bullshit through your Instagram and Discord accounts due to where I installed the Empress crack from, despite it being a publicly suggested site (Skidrowcodex or skidrowreloaded, don't recall which) mentioned in both the different mod pages on Nexus. I've managed to, I think, secure my PC. Multiple full system scans with Bitdefender, Malwarebytes and the Kaspersky Virus Removal tool have come back clean over the past 36 hours. No, I did not wipe my PC entirely. I have boatloads of important files only saved locally, and it'd be way too much work to move everything back and forth. Nor do I have a USB install of Windows 11 I can just plug in. Still, everything's come back clean, barring what I'm about to mention.
However, I'm now noticing that Bitdefender freaks out and says the following every so often, and curiously, it's more prone to happening immediately after a restart, and especially fresh-after-restart when I'm refreshing the page on my chrome settings for third party cookies.
"chrome.exe attempted to establish a connection relying on an expired certificate to lmgtfy(dot)app. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk."
Any idea what the fuck is going on, and how I can permanently kill whatever's trying to do this? Again, my PC is otherwise entirely secure based on the three different tools, and windows' own tools, I've used to scan. There's been no suspicious activity on any of my accounts since I locked everything down on Monday after the hack initially happened.
Posted Feb 26, 2026, 3:26 AM UTC