Blocked malware from CNET Cheapskate blog

system · 2015-11-23T19:12:00.000Z

I am getting an alert and blocked malware message when I go to the CNET Cheapskate site to read today’s blog. It lists the URL as http://d.pzkysq.pink/5ET3nslK.jpg?z=231412107914, which I assume might be a redirect. I am new, so I’m not sure if this is a false positive or infection. I am running a full scan on my computer, but it looks like Avast blocked it. Can anyone explain to me if I should be worried or what this means. Thanks.

Eddy · 2015-11-23T19:16:41.000Z

avast is showing a IP block (URL:MAL)
If you want your system check, provide the log files as instructed in the sticky on this forum.

system · 2015-11-23T20:18:04.000Z

Thanks for your help. Here is the log from my Avast scan: C:\Windows\Temp|WAXFBC6.tmp Medium Threat: Win32: Evo-gen {Susp}
C:\Windows\Temp|WAX9392.tmp Medium Threat: Win32: Evo-gen {Susp}

I performed the suggested fix and it said deleted, but I have had this show up before in a scan. Not every time, and I always perform the fix.

I then ran Malwarebytes after (which I have done in the past), and it came up clean. The alerts said that Avast had blocked the threat when I was at the website, so maybe I did not get infected. The Evo-gen has been going on for a while. I’m wondering if it is a fase positive. I have also run boot scans after cleaning it with Avast and nothing came up. Suggestions? Again, thanks for the help.

Asyn · 2015-11-24T07:16:43.000Z

See: https://forum.avast.com/index.php?topic=179539.msg1270645#msg1270645

Announcements