avast showing malware warning on every site I visit

Viruses and worms
1

Hi all,
I know I messed up because I downloaded some unsafe software (for ripping CDs because my (legally bought!) CD didnt work with WMP).
And now after uninstalling it I get these malware notifications from avast on every site I visit,
I already let avast make a search for viruses but it didn’t find anything, then I tried it with Malwarebytes Anti-Malware and it found 18 infected files, which I deleted, but it didn’t help and I still get the warning.

It seems I only get this on Chrome, because I tried right now and Internet Explorer didn’t seem to trigger one.
So I already tried deleting all temporary files of Chrome with CCleaner, but it didn’t help.

The warning is attached below and when I click on it I only get redirected to an useless promotion-site from avast to buy the upgrade…
i[/i].

I hope someone here can help me with that.

2

we need the requested logs http://forum.avast.com/index.php?topic=53253.0

Malwarebytes / OTL / aswMBR

malware expert are most likely in bed now… and will check your logs tomorrow

3

Ok I let all 3 run/scan, but I couldn’t save the final logs of aswmbr, since it just closes when it’s finishes, so I just tried to save the logs while it was running a few times and have a log of like 75% of the scan.
Malwarebytes Anti-Malware found one new infected file and I deleted it.

4
Malwarebytes Anti-Malware found one new infected file and I deleted it.
it was just a PUP = not virus / Possible Unwanted Program ..... usually crap that is bundled with freeware downloads

just so you know… there is a new version of Malwarebytes out …

5

Ah thanks, now that I updated it, it found 7 new things, but it was all just registry keys, except for one which was an actual file.
But since it contained something with “PUP” too, I guess it wasn’t all too important.

6

Hi,

This will preform some additional routines PUP cleaning …

Please download zoek.zip or zoek.rar by smeenk (
http://www.mcshield.net/personal/magna86/Images/Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive…

[*]Close any open browsers
[*] Temporarily disable your AntiVirus program. (If necessary)
If you are unsure how to do this please read this or this Instruction.

[*]Double click on zoek.exe to run the tool .
Please wait while the tool does not start…

[*]Copy the text present inside the code box below and paste it into the large window in the zoek tool:

Uninstall-List;
EmptyCLSID;
{21EAF666-26B3-4a3c-ABD0-CA2F5A326744};c
{02478D38-C3F9-4efb-9B51-7695ECA05670};c
C:\Windows\*.tmp;f
C:\Programme\V-bates;fs
CHRDefaults;
AutoClean;

[*] Click on
http://www.mcshield.net/personal/magna86/Images/Run%20Script%20by%20zoek.png
button.
Please wait until a logreport will open (this can be after reboot)

[*]Save notepad to your Desktop and attach here zoek-results.log
Note: It will also create a log in the C:\ directory named “zoek-results.log”

7

WinRAR says the file is corrupt and avast says it’s a high malware threat, it won’t even let me unpack it and I’m not sure I want to unpack this…

8

Related to WinRAR message, the file is not downloaded completely and avast! detections (NirCmd) are FP. Disable avast as stated in zoek’s instruction, download fresh copy of the tool and re-run.

I would not give you to run a malicious tool …

9

Ok sorry for not trusting this first,
now I let it run and hm, the warnings have stopped, was clearing the PUP’s enough already?

10

Hi,

Yes, zoek did a great job. Re-run zoek one more time but this time use this zoekscript:

V-bates;U
Reboot;

Zoek shall ask for reboot. Allow it … No need for posting the fresh zoek log.

After execution, I will remove zoek and all used tool using DelFix app.

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

11

Ok thank you.
Should I post the log from DelFix?
I’ll just do.