Firefox getting blocked URL message.

Viruses and worms
1

When I start working on Firefox, I am getting malicious URL blocked.
OTL log is attached.
I also ran MBAM, that showed nothing.
I ran a boot-scan and had Win32:WinVNCbased-F [PUP]
and Win32:MalOb-CZ [Cryp] moved to the chest.

Any suggestions, as I am still having the Avast message.

Thanks!

2

Could you confirm that you get no alert with IE

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found. [2010/09/29 10:58:51 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Wlaniniyeta.dat [2010/09/29 10:58:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Mrewutibofepo.bin

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2

[*]Ensure all Firefox windows are closed.
[*]To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
[*]When prompted to run the scan, click Yes.
[*]GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

3

I think the message I was getting had to do with the Hotmail issues that so many people are posting about. I updated the VPS and no more message.

;D

Do you think I should still run OTL?

4

Yes, as they are old and inactive malware but it is worth killing them

5

I was victim of Epsilon security breach. Today tried to log into my hotmail acct & got
red flag from avast “malicious url blocked” Wasn’t able to copy the entire link but it was
css.wlxrs.com/ . Changed my password but still having problems. HELP

6

logs for OTL and GooredFix

Folder for GooredFix Backup is on the desktop, do I need to have that on the desktop. Can it be deleted after a certain amount of time?

7

Nope let me handle that for you

Run OTL and hit the cleanup button ;D

8

Not sure what I need to do. sorry, can you further explain. Is this a glitch you are working on. I’m not the tech savvy & need more help on this
thanks

9

I think essexboy meant the OP (cobroka)

Try updating your vps (or just restarting your computer if you don’t know how to update).

If that doesn’t sort things you’re probably best to start your own thread.

PS - and I suggest go to profile, account related settings, and check the box to hide your e-mail address from public - otherwise you may find you get some very unwelcome correspondence!

10

Ok, that cleaned up the OTL, what about the GooredFix?

:-\

Thanks!

11

thanks, i already updated all anti virus & spy ware & restarted pc. didn’t work but will tray again. will definitely take your advice & hide my email. thanks

12

Did it not go ??? Hmm maybe JP has changed some of the paths as OTS should remove it

Just delete it from your desktop

I think essexboy meant the OP (cobroka)

Try updating your vps (or just restarting your computer if you don’t know how to update).

If that doesn’t sort things you’re probably best to start your own thread.

Correct I di not notice your post in between 8)

13

Thank you!! ;D
Have a nice day!

14

And you young sir ;D