I keep getting a popup from Avast Network Shield. This is the information it shows:
Infection Details
URL: hxxp://63.223.106.17/hvR3XtwX8g7JYhc4Y2xrPTQuNyZiaWQ9MzM4Y2NlNTYxYTE1NjQ3NmE5MmYxZjFmZjU5OGQ3YTA4OGU4ODZlZiZhaWQ9MzA0Mjgmc2lkPTEmcmQ9MCZ4ODY9MzImdHA9MCZmbD0x25Z
Process: C:\WINDOWS\System32\ping.exe
Infection: URL:Mal
Any idea on how to get rid of it? I have tried scanning and Avast finds nothing…thanks…Greg
Make that link non-click-through by giving in hxtp for http. This is a backdoor detection to install Worm Autorun. It involves this site that dishes out the following malware payload: TDSS, Worms, and Trojan Attacks. Well the attack works for not fully updated and patched Windows Systems, that can get infested with malware all sorts.
Wait for one of the qualified removers here to further assist you with eventual cleansing of additional malware, As long as the Network Shield blocked it, you probably had a lucky escape because of your avast av protection, and your OS came away unharmed,
Info on that particular IP:
http://malwaresurvival.net/2011/06/01/rogue-dhcp-routes-users-to-malware-attacks/ link author = malware survival
polonus
Hi gregoates1953,
First could you come up with the logs as given here by essexboy’s instructions: http://forum.avast.com/index.php?topic=53253.msg451454#msg451454
A qualified malware remover has been informed and we will go over your logfiles, that come with with your next posting,
polonus