I’m using Chrome, and everyitme I access a webpage, a pop up warns of a threat and states it’s a dangerous (infected) site. It reads.
URL: hxxp://mp3rep.com/js.php
This happens with ALL sites, even this forum…
Any help?
THX!
try a repair by running avast standard uninstaller via control panel
do report back.
note: please disable ur link asap. it might be malicious.
report from various web testing sites: http://sitecheck.sucuri.net/results/mp3rep.com/js.php (undetected)
http://www.urlvoid.com/scan/mp3rep.com/ (undetected)
https://www.virustotal.com/file/b136dadc47e391be4d1d227ab33eb30ccb5d2445ff499dc6e2d5277874185407/analysis/1335501249/ (detected 3/42)
on top of that, when i tried to upload to virustotal via its uploader, i got a network shield block from avast
(see the screenshot)
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware.
Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
There is iframe malware in a download from reported link js: frame src=“hxtp://resultsz.com/search/anticheat6.php?username=mc0011” mentioned in various blacklists, see: http://hosts-file.net/?s=resultsz.com Exploits, Severity High Risk → htxp://urlquery.net/queued.php?id=47614
from that IP there were Detected HTTP GET request related to Nikjju mass injection campaign (This is used to redirect anyone visiting the infected websites to Fake/Rogue AVs, so qualified malware remover should look through logs for Mikjju = lizamoon-like Fake/Rogue AV infections)
also see bad WOT rep http://www.mywot.com/en/scorecard/resultsz.com?src=addon-popup-donuts
polonus
Monitoring…