Avast reply about URL malware warnings

Viruses and worms
1

I e-mailed Avast as too many of are getting the popups. How do I disable my plugins to see if the popups stop.

III) If you get any URL malware warnings

If you get these virus warnings only when your web browser is open, it means that there’s some plugin (add-on, extension) that’s not malicious itself, but tries to connect to some infected website. Try to start the web browser without any plugin and check if the problem persists, please.

If all the above fails, there’s probably some rootkit on the computer. The rootkit (http://en.wikipedia.org/wiki/Rootkit) detection is heuristic (it’s not using the known-bad signatures), it’s based on a difference between ‘the truth’ and ‘the lie’ - any ‘hidden’ item (file, registry entry, process…) in your computer should be detected. Due this, some legitimate applications/services using this techniques (i.e. the ‘virtual drives’ are mostly the rootkits…) can be reported. Please verify the warning first - not every rootkit is dangerous and should be deleted - it’s possible to use any rootkit scanner (i.e. Rootkit Revealer - http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx) to confirm the warning or search the Internet for the appropriate file (based on the name/path…).

2

Follow the steps in this thread http://forum.avast.com/index.php?topic=53253.0

And attach the logs here

3

I have already scanned with mailwarebytes and found nothing as well as a avast scan and found nothing. I see others are doing scan after scan and finding nothing also.

May I ask why I am doing the same ones over again?? I want to disable my plugins please?

Thank you!

4

is malwarebytes the only thing you see in that guide. ::slight_smile:

attach logs from
AdwCleaner
OTL
aswMBR

5

Thanks I ran the adwcleaner and clicked delete and it re booted but I found no log.

Thanks!

6

continue with OTL and aswMBR… they are the important logs

7

I only see one OTL txt.log in my system tray can I just copy and paste it here?

or do I proceed with this

To attach : Within the post select :
Additional options
Browse
Locate the OTL log
Select the OTL log

Please ensure that all logs are saved in the ANSI format

Thanks

8

it will take 10 post with copy and paste to do that…it will also complicate the work of the malware expert
if you surf this forum section you see how it is done

OTL log must be attached

9

thanks I only found one log. I hope I did it correctly.

10

Could you post a screen shot of the Avast popup please as it will give me more data

11

I would if I saw it again or knew how but this is what it said

Infection Details

URL:

http://afe.specificclick.net/?l

Process:

C:\Program Files\Mozilla Firefox\firefox…

Infection:

URL:Mal

others here have posted the same one.

Thanks so much!

12

Could you delete all shortcuts for all browsers on both the desktop and quick launch bar. Then let me know if the problem persists, also what browsers it appears in

13

Are you talking about my firefox icon on my desktop and I don’t have one in my system tray and log on
by going to start and finding firefox??

It appears when I use my firefox.
Do I delete my browser history too?

thanks for your patience.

14

No just delete the shortcut from the desktop … You can replace that later

15

I removed it and went to start and found firefox that way. I also went to the site I was getting the popup on mostly and it is gone. I thank you for helping me. I hope it is gone for good.

May I ask if the logs showed anything and if I need to remove them(How)

Also what was causing the popups?? and do I need to change any settings in Avast!

Thanks again!

16

This one attaches itself to the shortcut links for browsers apart from that nothing else showed

17

Thanks for the outstanding help all of you give us here. I hope all of you know how much you are appreciated.

May I now send a shortcut to my desktop for my firefox?

Thanks!

18

Yes you can now create a new one ;D

Run OTLL and press the cleanup button

19

do this before or after I create the shortcut again Run OTLL and press the cleanup button

and may I ask what is to prevent it from attaching itself to the shortcut again?

Thanks!

20

Pressing cleanup on OTL will remove the programme and it associated files

At the moment I am not sure how it attaches itself to the shortcut, still trying to figure that out ;D