Avast keeps announcing Threat has been detected

system · 2015-05-30T03:44:21.000Z

Hello. Avast keeps announcing a threat has been detect. It gives me these as the threats, and others:

37.48.117.50
epictory.com
alwaysisobar.com

I have run the avast boot scan and malwarebytes anti-malware scan, and I am still getting the messages.

Attached are the First and Additional logs from ZOEK.

Thanks

essexboy · 2015-05-30T10:39:45.000Z

Let me know if this stops the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: BHO-x32: No Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> No File Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKU\S-1-5-21-2363213091-3883293985-2512453490-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File 2015-03-09 15:30 - 2015-04-24 11:33 - 0000385 _____ () C:\Users\cbeattie\AppData\Roaming\BYAIAMUF 2015-01-25 10:12 - 2015-01-25 10:12 - 0002086 _____ () C:\Users\cbeattie\AppData\Roaming\GNOK Task: C:\WINDOWS\Tasks\BYAIAMUF.job => C:\Users\cbeattie\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\GNOK.job => C:\Users\cbeattie\AppData\Roaming\GNOK.exe <==== ATTENTION C:\Users\cbeattie\AppData\Roaming\BYAIAMUF.exe C:\Users\cbeattie\AppData\Roaming\GNOK.exe EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · 2015-05-30T16:00:57.000Z

Here you go…Thanks!

essexboy · 2015-05-30T16:18:17.000Z

Could you confirm the alerts have ceased

system · 2015-05-30T16:28:26.000Z

Sorry, yes, so far they have. I will let you know if they return, but for the time being they are gone. I really appreciate your help in this, as all other venues of repair seemed to come up empty. Thanks again!

Announcements