Advast keeps blocking Chrome with Program File Extension 86 or Syste32 Svchost

system · 2015-06-07T07:51:49.000Z

Hi,

Today when I turned on my computer just about every webpage in Google Chrome is getting blocked. I ran a scan with zero viruses detected.
I have looked over similar forum posts and had to download mozilla firefox to download and scan using Farbar tool.

I was unsure of what to do after the scan on the forums. I have attached the two farbar logs? Could someone please help me?

system · 2015-06-07T09:48:00.000Z

Please have patience while I analyze your logs.

system · 2015-06-07T09:51:52.000Z

Sure no worries thank you

system · 2015-06-07T10:07:28.000Z

Did you add the following Hosts entry?
Hosts: 128.184.225.250 secureaccess.deakin.edu.au

[*]Step #1 Fix with FRST
Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.
[*]Open Notepad.exe. Do not use any other text editor software;
[*]Copy and Paste the contents inside the code-box to your Notepad –

Start
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
CHR HKU\S-1-5-21-2008571136-615640544-7057609-1002\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2008571136-615640544-7057609-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT3321897&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP2DC58E30-E0A0-4739-A866-2278419B4983&SSPV=
HKU\S-1-5-21-2008571136-615640544-7057609-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> URL http://search.conduit.com/Results.aspx?ctid=CT3321897&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP2DC58E30-E0A0-4739-A866-2278419B4983&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-2008571136-615640544-7057609-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
C:\Program Files (x86)\Pando Networks
End

[*]Click on File > Save as…
[list][*]Inside the File Name box type fixlist.txt
[*]From the Save as type drop down list, choose All Files
[*]Save the file to your Desktop;
[*]Re-run FRST.exe and click Fix;
[*]Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.[]After the completion, a log will be produced;
[]Attach the log in your next reply.[/list]

[*]Required Log(s):
[*]FRST Fix Log

Regards,
Valinorum

system · 2015-06-07T10:57:02.000Z

Just doing this now, it is spending a lot of time (Farbar) deleting Temporary files. the green bar that runs along the bottom isn’t moving, (typing on another device).

system · 2015-06-07T11:58:46.000Z

Valinorum post:4:

Did you add the following Hosts entry?
Hosts: 128.184.225.250 secureaccess.deakin.edu.au

Umm Hey I did not see this part, how do I add Host?
This might be why Farbar is frozen… :-X

system · 2015-06-07T13:38:12.000Z

kspeir post:6:

Valinorum post:4:

Did you add the following Hosts entry?
Hosts: 128.184.225.250 secureaccess.deakin.edu.au

Umm Hey I did not see this part, how do I add Host?
This might be why Farbar is frozen… :-X

No but continue with the fix. Give FRST.exe at least thirty minutes.

system · 2015-06-07T14:08:11.000Z

Hey its finished only took 2hrs. Everything seems to be working fine. Avast is not popping up every two seconds blocking all webpages. Do I need to still do the host thing?
ALso thanks so much for your kind help

system · 2015-06-07T14:34:42.000Z

Give me a fresh FRST scan log just to be sure.

Announcements