avast! Webshield has blocked a harmful webpage or file

Viruses and worms
1

I keep getting the same message on my laptop saying: avast! Webshield has blocked a harmful webpage or file
Please help.
Thanks

2

Produce the logs demanded here: https://forum.avast.com/index.php?topic=53253.0
and wait for a qualified removal helper to guide you through the cleansing routine.
A qualified remover has been notified by me.

polonus

3

See attached log.
Thanks

4

I’ve attached the FRST san log and addition Scan log.
Thanks

5

I attached the aswMBR scan log. I really appreciate your help.
Thanks

6

Let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKU\S-1-5-21-198698907-49236215-1103578316-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml.dll,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf> (the data entry has 243 more characters). <==== Poweliks! 2015-01-24 16:09 - 2015-01-24 16:09 - 00000000 ____D () C:\Users\Gregg\AppData\Local\{DCC572BA-E4DD-447C-B67D-F5971114FE5C} CustomCLSID: HKU\S-1-5-21-198698907-49236215-1103578316-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml.dll,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf> (the data entry has 251 more characters). <==== Poweliks? EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

7

I searched for FRST.exe on my computer and I don’t have it. Am I missing something? I did send you the FRST scan log.
Thanks

8

That is because FRST was located in your temp internet files

Please download Farbar Recovery Scan Tool and save it to your Desktop.

9

I’ve completed the fix. Thank you for your help.
See attached fix log.

10

Could you confirm the alerts have now ceased