Another URL:Mal problem

system · 2015-06-21T01:47:59.000Z

As others here, I am getting URL malware alerts, like:

URL:http://opticguardzip.net/
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I couldn’t get MalwareBytes to run, so no log from that, but I attached the FRST logs and the aswMBR log. Thanks in advance for any help.

TwinHeadedEagle · 2015-06-21T02:04:52.000Z

Monitoring…

TwinHeadedEagle · 2015-06-21T06:46:23.000Z

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-06-21T16:32:52.000Z

Zoek log attached.

TwinHeadedEagle · 2015-06-21T17:39:41.000Z

Very good. How is the situation now?

system · 2015-06-21T18:10:57.000Z

So far so good, thanks for your help. I’ll post again if it pops up.

Announcements