avast svchost URL:Mal keeps popping up

Viruses and worms
1

Same problem as a previous user:

Avast is continuously popping up with:

avast! Web Shield has blocked a harmful webpage or file.
Object: http://getmuzicas.info/?e=pcho…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

AND

avast! Web Shield has blocked a harmful webpage or file.
Object: http://getusaall.info/?e=pcho…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

attached are logs from farbar recovery tools

please help, thank you

2

Let me know if this cures it ?

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CHR HKLM-x32\...\Chrome\Extension: [bicnnkjibmphdeigoodpjlcklcnaobdj] - C:\Program Files (x86)\TornTV.com\torntv10.crx [2013-09-02] CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% Folder: c:\Documents and Settings\User\Local Settings\Temp Folder: c:\WINDOWS\Prefetch REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

3

followed the procedures written above.
attached are the falbar fixlogs
couldnt find the combofix.txt in my C folder though (although a system file with random numbers as a name did appear)
so far no problems have arised and that annoying pop up msg hasnt appeared yet

4

If all is well in a few hours let me know and I will tidy up

5

I have the exact same problem with the popups. I downloaded ComboFix as it was suggested. When I tried to run it gave the error message “combofix is not meant to run in compatibility mode”. I run windows 8.1.

I read elsewhere the ComboFix for windows 8.1 has not been issued yet. So to save time, how can we solve the original problem with popups from Avast saying:

avast! Web Shield has blocked a harmful webpage or file.
Object: http://getusaall.info/?e=pcho…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

Thank you,
Sam