Avast keep alerting...Web Shield has blocked a harmful webpage or file

Viruses and worms
1

Avast keep alerting…Popup constantly saying
avast! Web Shield has blocked a harmful webpage or file.
Object: http://getmuzicas.info/?e=svon&cht…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

i try malwarebytes anti-malware, and this is the .log file…

2

follow instructions https://forum.avast.com/index.php?topic=53253.0

attach OTL and aswMBR logs

make sure you save OTL log as ANSI and not Unicode

3

Thanks for reply :slight_smile:
here is OTL.txt (ANSI)
as for aswmbr, avast is blocking it ( Win32:Dropper-gen [Drp] ), so should i ignor it??

4

Yes … right click tray icon and pause all shields

5

Hi there, nothing evident however I will look deeper

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

6

@Pomdus
i disable avast all sheilds…n run “aswMBR” but after few mins it stops working :frowning: (i attach screen shot)

@essexboy
thanks i’ll follow your instructios… :slight_smile:

7

Thanks @pondus and @essexboy
its gone :wink: , don’t know how :o
first i scan with TDSKiller, (no thread found), then with Malwarebytes’ Anti-Malware and OTL (in previous post log files r attached)…
after that i run BOOT Scan (Avast, take more than 2 hrs… ) and then its gone… :smiley:
thanks again…