http://wpad.browserupdatecheck.in/wpad.dat

system · 2015-06-30T17:20:40.000Z

when frst ran I got a ton of pop up’s saying process AvastUI.exe FRST64.exe chrome.exe and others were being blocked for URL:MAL now as my computer has rebooted I am just getting Chrome.exe blocked URL:MAL and svchost.exe is not popping up. I foresee a reinstall in my future.

system · 2015-06-30T17:28:54.000Z

Uninstall Avast in program features and then, download Avast Uninstall Utility and run.
https://www.avast.com/de-de/uninstall-utility

system · 2015-06-30T17:47:22.000Z

Alright then what?

system · 2015-06-30T18:02:36.000Z

Do you have a pop-up still?

system · 2015-06-30T19:27:54.000Z

No pop up windows has came up

system · 2015-07-01T03:54:53.000Z

reinstalled avast and all the pop up blocked notifications came flooding back. svchost.exe and avastUI.exe blocked.

system · 2015-07-01T03:57:24.000Z

actually more persistent than ever now with svchost.exe blocked URL:MAL

system · 2015-07-01T09:15:27.000Z

Re-run zoek and run this script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
bitsadmin /reset /allusers;b

system · 2015-07-02T00:18:45.000Z

ran it restarted computer 5 mins later after boot up multiple blocked svchost.exe issues. got anything else before I reformat?

system · 2015-07-02T00:54:57.000Z

please keep in mind that last part wasn’t meant to sound short with you. I apperciate your help through all this. Just getting frustrated with this issue. Btw is there any chance this might be a false positive issue on avast’s end. I don’t actually have any pop up issues and the computer runs fine and all cleaners come back clean. But the moment avast shields are on It says it blocked a URL:MAL from opening. No url mals have ever opened though when the shield is off or even when avast was uninstalled.

TwinHeadedEagle · 2015-07-02T01:10:46.000Z

Stand by, Avast team will need to check this, it is very possible that this is false detection.

system · 2015-07-02T09:13:40.000Z

Alright I’ll be on stand by to hear what is said about this issue.

system · 2015-07-03T06:11:54.000Z

Just as a heads up for this issue. my machine is clean all scanners say, and I double checked my windows updates and had 3 windows security updates that were optional I installed them, and restarted my machine. No more svchost.exe pop up blocks. I will report in over the next couple days if it has changed, but for now my avast block MAL:URL issue seems fixed from those updates.

system · 2015-07-03T12:30:15.000Z

after hours of no issues I opened up one new tab in fire fox and the svchost popped up again. lame… any word on false positive yet?

system · 2015-07-03T12:37:13.000Z

those security updates did make it happen less frequently though

system · 2015-07-05T15:25:47.000Z

Bump anyone else hear if this a false positive issue or found a fix

essexboy · 2015-07-05T15:39:23.000Z

Hi there, this is a genuine alert and we have found where it hides

We will use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

•Type browserupdatecheck.in;wpad.dat into the Search: field in FRST then click the Search Registry button.
•FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
•Please attach it to your reply.

system · 2015-07-05T15:42:38.000Z

ok awesome, sadly I’m at work for the next 7 hours. I will attach the required information tonight when I return home.

essexboy · 2015-07-05T15:44:06.000Z

OK

system · 2015-07-06T01:48:36.000Z

here is my Search.txt file from FRST

Announcements