Bit of a weird one - W7 password changed, not by me.

[Smiler.]

Logged on this morning as usual.

Password need 3 tries as my hand tremor is particularly bad at the moment & fingers have a life of their own.

Anyway, 3rd time lucky with the right characters.


Using Chrome to do some browsing (multiple tabs).

Notice I got logged out of Facebook (from one account to another). Thought nothing of it.


Then wanted to see the password of a gmail account. Went into Chrome settings, found account, clicked show password - needed to enter W7 login password.

Typed it in. Wrong password.

Checked again, no dice.

Checked by typing in Notepad, copy/paste. No dice.

Ran MalwareBtyes.

Got a malicious website protection popup for Chrome, immediately closed.

MalwareBtyes tagged 1 item in scan, adware of something (potential) - removed it.


Checked Protection Log, got a few of these:

Detection, 30/05/2016 15:14, SYSTEM, My PC, Protection, Malicious Website Protection, IP, 46.246.126.220, 17265, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,

1st one was 09.19 (4 hits), then 09.55 (3 hits), then 4 more from 15.14.


To rectify the situation, I created an new User with Admin rights, set a password, switched to new User, removed password from my account, created new password, switched back, changed new password back.

Any insight into what might have happened/tips would be welcome.

Thanks.

[Smiler.]

Thanks for the replies. Already on the MalwareBytes forum & will post up after Microsoft Security has finished a deep scan.

Nothing seems out of place at the moment, I did an IP lookup for that address but didn't really understand the results (in terms of threat level).

I checked the system events & the only ones found seem to correspond to my setting up a new admin user & deleting/changing of my password.

All rather odd.