Avast constantly blocking xmlka

Viruses and worms
1

My computer has been running slowly lately, and I keep getting an avast popup blocking hxxp://xmlka.com/click?app=app41&click=33eec542-5d18-49e0-aa67-4c877bd51dcd&search=ab8cb496-51e6-4758-a18f-5d3fceb02416&feed=18396. I’ve ran a full and boottime scan in avast, malwarebytes scan, and ran adwcleaner but I’m still getting them. Any ideas?

2

https://forum.avast.com/index.php?topic=53253.0

3

Thanks for the help

I’m trying to run aswMBR, but the scan is getting stuck at D:\users\colton\appdata\slimware utilities inc\driverupdate\SWDU… its been sitting there for about a half hour now. I have all the other logs, should I post those or keep waiting and hope the aswMBR eventually finishes?

4

Skip aswMBR and attach the other logs.

5

Thanks again

6

You’re welcome, now you’ve to wait a bit…

7

Let me know if this cures the problem

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKU\S-1-5-21-657921076-331067091-195323934-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks! SearchScopes: HKCU - {21A51130-7285-49FE-B3F6-2385CC71CDEA} URL = Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File CustomCLSID: HKU\S-1-5-21-657921076-331067091-195323934-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks? EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

8

here you go

9

Have the alerts now ceased ?

10

yes, and I’m not being flooded by dllhost processes either like before. Thanks!

11

OK a final check scan

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.