anythicago popups threat detected

Viruses and worms
1

Lately I have been getting “threat detected” popups from avast (usually two at once) from various sources like anythicago and others. Usually the process is svchost.exe or chrome.exe. What should I run to fix this?

Thanks

2

Monitoring…

3

https://forum.avast.com/index.php?topic=53253.0

4

Thanks, I am running MBAM and then FRST and will post the logs when they are done.

5

Here are the results of MBAM and FRST.

6

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
chrdefaults;
bitsadmin /reset /allusers;b
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

7

Here are the results of zoek

8

Good. How is the situation now?

9

Nothing has popped up yet, but there was a pop up this morning before I ran zoek. Something like easydriverstar was the source. I’ll post again if another comes up.

10

Okay, let me know, so we can continue or close this case.