Hello,
I have been getting a Web Shield pop up that threat has been detected via FIrefox.
URL hxxps://gvapp.ru
Infection URL:Mal
Logs attached
Can anyone help with this problem?
Hi sorry that we missed you
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac" FF NetworkProxy: "type", 2 FF Extension: AS Magic Player - C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\y8oozr9o.default\Extensions\magicplayer@acestream.org [2014-07-05] CHR Extension: (AS Magic Player) - C:\Users\Jeff\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2014-07-05] EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.