http://wpad.browserupdatecheck.in/wpad.dat

system · 2015-06-30T12:50:17.000Z

when the pop up for the blocked url comes up now it’s just the svchost.exe process over and over again. no signs of the chrome or IE process in the pop ups when I’m on my computer now.

system · 2015-06-30T16:37:01.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

system · 2015-06-30T17:20:40.000Z

when frst ran I got a ton of pop up’s saying process AvastUI.exe FRST64.exe chrome.exe and others were being blocked for URL:MAL now as my computer has rebooted I am just getting Chrome.exe blocked URL:MAL and svchost.exe is not popping up. I foresee a reinstall in my future.

system · 2015-06-30T17:28:54.000Z

Uninstall Avast in program features and then, download Avast Uninstall Utility and run.
https://www.avast.com/de-de/uninstall-utility

system · 2015-06-30T17:47:22.000Z

Alright then what?

system · 2015-06-30T18:02:36.000Z

Do you have a pop-up still?

system · 2015-06-30T19:27:54.000Z

No pop up windows has came up

system · 2015-07-01T03:54:53.000Z

reinstalled avast and all the pop up blocked notifications came flooding back. svchost.exe and avastUI.exe blocked.

system · 2015-07-01T03:57:24.000Z

actually more persistent than ever now with svchost.exe blocked URL:MAL

system · 2015-07-01T09:15:27.000Z

Re-run zoek and run this script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
bitsadmin /reset /allusers;b

system · 2015-07-02T00:18:45.000Z

ran it restarted computer 5 mins later after boot up multiple blocked svchost.exe issues. got anything else before I reformat?

system · 2015-07-02T00:54:57.000Z

please keep in mind that last part wasn’t meant to sound short with you. I apperciate your help through all this. Just getting frustrated with this issue. Btw is there any chance this might be a false positive issue on avast’s end. I don’t actually have any pop up issues and the computer runs fine and all cleaners come back clean. But the moment avast shields are on It says it blocked a URL:MAL from opening. No url mals have ever opened though when the shield is off or even when avast was uninstalled.

TwinHeadedEagle · 2015-07-02T01:10:46.000Z

Stand by, Avast team will need to check this, it is very possible that this is false detection.

system · 2015-07-02T09:13:40.000Z

Alright I’ll be on stand by to hear what is said about this issue.

system · 2015-07-03T06:11:54.000Z

Just as a heads up for this issue. my machine is clean all scanners say, and I double checked my windows updates and had 3 windows security updates that were optional I installed them, and restarted my machine. No more svchost.exe pop up blocks. I will report in over the next couple days if it has changed, but for now my avast block MAL:URL issue seems fixed from those updates.

system · 2015-07-03T12:30:15.000Z

after hours of no issues I opened up one new tab in fire fox and the svchost popped up again. lame… any word on false positive yet?

system · 2015-07-03T12:37:13.000Z

those security updates did make it happen less frequently though

system · 2015-07-05T15:25:47.000Z

Bump anyone else hear if this a false positive issue or found a fix

essexboy · 2015-07-05T15:39:23.000Z

Hi there, this is a genuine alert and we have found where it hides

We will use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

•Type browserupdatecheck.in;wpad.dat into the Search: field in FRST then click the Search Registry button.
•FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
•Please attach it to your reply.

system · 2015-07-05T15:42:38.000Z

ok awesome, sadly I’m at work for the next 7 hours. I will attach the required information tonight when I return home.

Announcements