Avast blocks malicious website on startup of Chrome only

Avast keeps popping up every time I start Chrome(this doesn’t happen on any other browser) to say it blocked a malicious website: http:**long-shore*com/api/services/format/json(intentionally edited so as to not link to it)
I should also mention here that I only have one home page at the moment upon opening Chrome(Twitter), but when this started I had 4 tabs set to open. I deleted all of them separately, even to go as far as to uninstall and reinstall Chrome with no difference

Malware Bytes and OTL logs are attached. The other two didn’t apply as I’m running Windows 8.1 and don’t use USB drives for anything.
Note: MalwareBytes scan showed three infections, but cleaning them up upon restart didn’t show anything. New scan showed 0 infections; as such, I did not save the new scan log.

Thanks

Edit: Removed slashes in “malicious URL” to keep it from linking any further.
Edit2: Added more detail.

Hi lets run this initially

Please download Junkware Removal Tool to your desktop.

[]Right-mouse click JRT.exe and select “Run as Administrator” the tool will open and start scanning your system
[
]please be patient as this can take a while to complete depending on your system’s specifications
[]On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
[
]post the contents of JRT.txt into your next message.

Log attached. The program doesn’t appear to have made any difference as I still got the pop up when I opened Chrome.

OK lets now look with a different programme

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please copy and paste log back here.
[*]The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

Logs Attached.

Thanks

Hmm not showing there OK next trick

Could you restart chrome in incognito mode and let me know if the alerts still appear https://support.google.com/chrome/answer/95464?hl=en

The alert does still appear. I’ve attached an image of the avast page that comes up when I click “More Detail”(or similar) as well as the actual link that it comes up with. It says that this is coming straight from the launching of chrome.exe, or at least that’s what I can decypher from this:

http://www.avast.com/en-us/lp-fr-virus-alert?p_ext=&utm_campaign=Virus_alert&utm_source=prg_fav_90_0&utm_medium=prg_systray&utm_content=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_vir=URL:Mal&p_prc=C:\Program%20Files%20(x86)\Google\Chrome\Application\chrome.exe&p_obj=http://long-shore.com/api/services/format/json&p_var=.%2Ffa%2Fen-us%2Fvirus-alert-default&p_elm=7&p_lex=328&p_lid=en-us&p_lng=en&p_lqa=0&p_lqe=0&p_lst=0&p_lsu=24&p_pro=0&p_bld=empty&p_vep=9&p_ves=0&p_vbd=2008&p_hid=f93ac900-17f1-4a53-9741-c8f08a919a12

Could you run shortcut cleaner from here and run
http://www.bleepingcomputer.com/download/shortcut-cleaner/

Meanwhile I will check to see if I have come across this before

I’m pleased to inform that, upon playing with my extensions, I found the culprit that was apparently causing the issue.
Silver Bird is an extension for Twitter that hadn’t been working regularly for a while. Upon disabling it and re-enabling it I was able to cause the pop up on 5 out of 5 times.
Therefore, I guess this issue is resolved. Thank you so much for your help essexboy! ^^

Well I saw twitter but that is generally legitimate… Now I know why I hate chrome… Thank you for letting me know

Actually it was Silver Bird, a third party extension that uses twitter’s API to allow you to use twitter easier. Or at least it’s supposed to.

Thanks :slight_smile:

I also have the same problem, I’ve downloaded the Farbar Recovery Scan Tool. unfortunately I do not know how to make a fixlist. Could someone help me out Please!? I will attach the files.

Topic created here https://forum.avast.com/index.php?topic=167228.new#new with fix