avast repors Infection: URL:Mal

Hi. I’ve got a user with a Win7 Pro system with Avast reporting in a popup:

Avast Web Shield has blocked a harmful webpage or file.

Object: http://109.236.91.206/index.php
Infection: URL:Mal
Process: C:\Windows\explorer.exe

We’ve tried Malwarebytes, avast, Adwcleaner and Hitman but no success so far. I did see other topics on the forum where this was solved so I hope you can help me, too.

Thanks in advance!

https://forum.avast.com/index.php?topic=53253.0

scanning with MWB, will post log. thanks.

Monitoring…

Should I download/run Farbar before posting the logs?

Thanks.

Yes, the two Farbar logs are the most important logs :slight_smile:

Greetz, Red.

Ok, will run Farbar and post both logs. MWB is chugging along, will probably take another 45min…

Thanks!

Ok, here are the 3 logs.

Thanks again!

Sorry, had to take Sunday off (Father’s Day), will check back in tomorrow.

Thanks.