Hello. Avast keeps announcing a threat has been detect. It gives me these as the threats, and others:
37.48.117.50
epictory.com
alwaysisobar.com
I have run the avast boot scan and malwarebytes anti-malware scan, and I am still getting the messages.
Attached are the First and Additional logs from ZOEK.
Thanks
Let me know if this stops the alerts
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
BHO-x32: No Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-2363213091-3883293985-2512453490-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
2015-03-09 15:30 - 2015-04-24 11:33 - 0000385 _____ () C:\Users\cbeattie\AppData\Roaming\BYAIAMUF
2015-01-25 10:12 - 2015-01-25 10:12 - 0002086 _____ () C:\Users\cbeattie\AppData\Roaming\GNOK
Task: C:\WINDOWS\Tasks\BYAIAMUF.job => C:\Users\cbeattie\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GNOK.job => C:\Users\cbeattie\AppData\Roaming\GNOK.exe <==== ATTENTION
C:\Users\cbeattie\AppData\Roaming\BYAIAMUF.exe
C:\Users\cbeattie\AppData\Roaming\GNOK.exe
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
Could you confirm the alerts have ceased
Sorry, yes, so far they have. I will let you know if they return, but for the time being they are gone. I really appreciate your help in this, as all other venues of repair seemed to come up empty. Thanks again!