Avast keeps announcing Threat has been detected

Viruses and worms
1

Avast keeps announcing a threat has been detect. It seems like it happens every couple minutes. It gives me these as the threats:

37.48.117.50/4141/AppendInit_142667197663784.dll

37.48.117.50/4141/SeekerFoobar_142667093444337.dll

37.48.117.50/4141/SystemInclude_142652930465496.dll

I was getting the following also, but it has stopped saying this threat replaced with the SeekerFoobar threat.
37.48.117.50/4141/CutterSystem_142669222898480.dll

I have run the avast boot scan and malwarebytes anti-malware scan, and I am still getting the messages.

2

Hello,

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

3

Thank you for replying. I have attached the .txt files as you said

4

Please make the malicious links not clickable.

5

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
BITSADMIN /RESET /ALLUSERS;b
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

6

I ran a scan with aswMBR and am posting the results. I will run Zoek now and post those results.

7

I have scanned with Zoek and have attached the results to this post.

8

Let’s run one more fix:

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Fix with ZOEK

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
chrdefaults;

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

9

This is the results of the fix using Zoek as requested:

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by The Eclectic One on Thu 05/28/2015 at 15:41:47.70.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\The Eclectic One\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-05-28-170940.log 25724 bytes

==== System Restore Info ======================

5/28/2015 3:44:01 PM Zoek.exe System Restore Point Created Successfully.

==== Reset Google Chrome ======================

C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=54 folders=11 6360203 bytes)

==== EOF on Thu 05/28/2015 at 15:44:47.29 ======================

Avast has not popped up with the message in some time so hopefully this all worked. Thank you very much.

10

Very good. Anything else I can help with?

11

Nope. Thank you so very much! You’ve been awesome!

12

Can I play too? I have the exact same issue. :cry: Thanks

13

Open you own topic.

Follow this guide: https://forum.avast.com/index.php?topic=53253.0