Avast Internet Security continuously blocking a redirect

Viruses and worms
1

Thank you in advance for your help.
I’m not sure what my son did to get this but Avast continuously has a pop up that blocks http:// redirect.ad-feeds.net/resultsa/ . Ran Avast /malwarebytes but no fix. I’m including the logs as requested. A few keystrokes away from F-disking this pc! Thank you again for your help.

Sincerely,
Angela

2

Could you let me know how it is after these fixes

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: GroupPolicy: Group Policy on Chrome detected <======= ATTENTION GroupPolicyUsers\S-1-5-21-3084673100-3859282759-2116851398-1003\User: Group Policy restriction detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=221&itype=n&ver=13892&tm=470&src=ds&p={searchTerms} SearchScopes: HKU\S-1-5-21-3084673100-3859282759-2116851398-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=221&itype=n&ver=13892&tm=470&src=ds&p={searchTerms} BHO: No Name -> {72351B45-9636-4F99-820B-7C552D27897D}} -> No File 2015-01-09 21:09 - 2015-01-09 21:09 - 00803040 _____ ( ) C:\Users\Bee Hive\Downloads\Unconfirmed 747821.crdownload 2015-01-01 15:27 - 2015-01-01 15:27 - 14307939 _____ () C:\Users\Bee Hive\Downloads\Unconfirmed 269774.crdownload 2014-12-27 01:06 - 2014-11-30 18:54 - 00000000 ___HD () C:\Users\Bee Hive\AppData\Local\C094548F-65F1-1602-8800-000000B100 Task: {232A6E47-6A9C-40E4-9E2D-F853D5211F41} - \Microsoft\Windows\Maintenance\Update IC No Task File <==== ATTENTION Task: {95C90236-D78E-4E67-BFAD-7C3E69DA421F} - System32\Tasks\Cerber AV => C:\Program Files\Cerber AntiVirus\cerber.exe Task: {BBEDFFB2-3BE7-4CE4-8F6F-4B7500D6C341} - \PastaQuotes No Task File <==== ATTENTION Task: {F2A55AE6-2954-4837-B2D1-C8F8BD196B25} - \Runner IC No Task File <==== ATTENTION EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

3

Approx how long should it take to run the fix with FRST? It’s been about 25 mins.

Thanks!

4

It depends on how much temporary data there is to remove

If it seems to be taking to long with no disc activity then stop the programme and post the log on the desktop

5

I had to download FRST for x86 in safe mode. Avast blocked it in regular mode. I can’t run it in regular mode either. Safe mode won’t allow a restore point to be made per the log.

6

ADWCleaner results

7

Avast should allow it from normal mode … I have just downloaded and tested the latest version

Could you run a fresh FRST scan for me please, also how is the computer behaving now