constant alert avast web shield infection: url mal

Viruses and worms
1

I have a notebook, but it is not my
asked to remove virus, every time I connect to a wifi network or broadband connection, the module detects avast internet infection: url mal repeatedly warned, I realized one scans that I use to check and found infected objects, mainly security bars
this notebook has two antivirus, I have disabled the avg

http://i44.tinypic.com/2gt3dl2.png

logs attached

2

my english is very limited
more logs

3

What’s your native language?

Remover notified

4

Let me know if this stops it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O2:64bit: - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3 - HKU\S-1-5-21-2248233299-2352261652-3111112126-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2248233299-2352261652-3111112126-1000\..\Toolbar\WebBrowser: (no name) - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - No CLSID value found.
O3 - HKU\S-1-5-21-2248233299-2352261652-3111112126-500\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
O4 - HKU\S-1-5-21-2248233299-2352261652-3111112126-500..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB File not found
[2014/01/21 22:24:16 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Junkware Removal Tool to your desktop.

[]Right-mouse click JRT.exe and select “Run as Administrator” the tool will open and start scanning your system
[]please be patient as this can take a while to complete depending on your system’s specifications
[]On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
[]post the contents of JRT.txt into your next message.

5

Portuguese of Brazil

thanks.

still the warning when opening the browser
or try to access any site, for a few minutes to
but resumes again.

logs OTL and JRT.exe

6

OK lets have a look at the MBR

Download aswMBR.exe ( 4.5mb ) to your desktop.
Double click the aswMBR.exe to run it Click the “Scan” button to start scan

https://dl.dropboxusercontent.com/u/73555776/AswMBR%20scan.JPG

On completion of the scan click save log, save it to your desktop and post in your next reply

7

Okay

Scan finished successfully.

here logs aswMBR

8

Another new one ?

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

9

the warning still appears infection:url:mal
at least that was the problem the adapter miniport wifi virtual of microsoft drive with wifi
was solved, once the button to activate the wifi keyboard only worked before windows logon password.

the logs combofix

10

Hmm do you have the full address that Avast is blocking ? Also does it only occur in IE or is it all browsers

11

come thank no more alerts
I will uninstall combofix;I still have to do some cleaning this computer is a bit slow, especially at startup

everything went right

problem solved. :slight_smile: