Hello guys
I’ve been getting avast pop ups with the message “Web Shield has blocked a harmful webpage or file” every time I turn on the computer for the last 3 days, the pop ups show the same Infection and process but different URLs, here are three examples:
URL: http://anythicago.com/4141/SystemVisual_142669159175781.dll
Infection: URL:MAL
Process: C:\Windows\System32\svchost.exe
URL: http://alwaysisobar.com/4141/TroubleFix_142669689991445.dll
Infection: URL:MAL
Process: C:\Windows\System32\svchost.exe
URL: http://alwaysisobar.com/4141/CutterSystem_142669222937685.dll
Infection: URL:MAL
Process: C:\Windows\System32\svchost.exe
I ran rkill, adwcleaner, Junkware removal tool, hitman pro, tdss killer, MBAM, eset online scanner, Kaspersky virus removal tool and Avast scan, they found some threats which were deleted. But every time I reboot the computer the notifications keep popping up.
I’ve read other threads related to this issue and it seems that there is no universal solution for this problem.
I tried to solve this on my own but I’m lost now and I would greatly appreciate your help.
I ran MBAM again, FRST, asMBR and I have attached the logs to the post.
Hello,
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:
createsrpoint;
autoclean;
emptyalltemp;
bitsadmin /reset /allusers;b
ipconfig /flushdns;b
[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
Thanks for replying quickly, the zoek log is attached to the post.
How is your PC behaving now?
It seems ok now, I just rebooted the computer and no avast notification popped up.