http://wpad.browserupdatecheck.in/wpad.dat

system · 2015-06-30T17:47:22.000Z

Alright then what?

system · 2015-06-30T18:02:36.000Z

Do you have a pop-up still?

system · 2015-06-30T19:27:54.000Z

No pop up windows has came up

system · 2015-07-01T03:54:53.000Z

reinstalled avast and all the pop up blocked notifications came flooding back. svchost.exe and avastUI.exe blocked.

system · 2015-07-01T03:57:24.000Z

actually more persistent than ever now with svchost.exe blocked URL:MAL

system · 2015-07-01T09:15:27.000Z

Re-run zoek and run this script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
bitsadmin /reset /allusers;b

system · 2015-07-02T00:18:45.000Z

ran it restarted computer 5 mins later after boot up multiple blocked svchost.exe issues. got anything else before I reformat?

system · 2015-07-02T00:54:57.000Z

please keep in mind that last part wasn’t meant to sound short with you. I apperciate your help through all this. Just getting frustrated with this issue. Btw is there any chance this might be a false positive issue on avast’s end. I don’t actually have any pop up issues and the computer runs fine and all cleaners come back clean. But the moment avast shields are on It says it blocked a URL:MAL from opening. No url mals have ever opened though when the shield is off or even when avast was uninstalled.

TwinHeadedEagle · 2015-07-02T01:10:46.000Z

Stand by, Avast team will need to check this, it is very possible that this is false detection.

system · 2015-07-02T09:13:40.000Z

Alright I’ll be on stand by to hear what is said about this issue.

system · 2015-07-03T06:11:54.000Z

Just as a heads up for this issue. my machine is clean all scanners say, and I double checked my windows updates and had 3 windows security updates that were optional I installed them, and restarted my machine. No more svchost.exe pop up blocks. I will report in over the next couple days if it has changed, but for now my avast block MAL:URL issue seems fixed from those updates.

system · 2015-07-03T12:30:15.000Z

after hours of no issues I opened up one new tab in fire fox and the svchost popped up again. lame… any word on false positive yet?

system · 2015-07-03T12:37:13.000Z

those security updates did make it happen less frequently though

system · 2015-07-05T15:25:47.000Z

Bump anyone else hear if this a false positive issue or found a fix

essexboy · 2015-07-05T15:39:23.000Z

Hi there, this is a genuine alert and we have found where it hides

We will use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

•Type browserupdatecheck.in;wpad.dat into the Search: field in FRST then click the Search Registry button.
•FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
•Please attach it to your reply.

system · 2015-07-05T15:42:38.000Z

ok awesome, sadly I’m at work for the next 7 hours. I will attach the required information tonight when I return home.

essexboy · 2015-07-05T15:44:06.000Z

OK

system · 2015-07-06T01:48:36.000Z

here is my Search.txt file from FRST

essexboy · 2015-07-06T14:09:02.000Z

Right click this link https://dl.dropboxusercontent.com/u/73555776/tcpip.reg and select Save target as…
Save TCPIP.reg to your desktop
Double click the file and allow to merge
Accept the warnings
Once done reboot and let me know if the alerts have ceased

system · 2015-07-06T17:26:14.000Z

All is looking well at the moment. Ran FRST again and searched the registry and didnt find anything about wpad.browersupdatecheck.in or wpad.dat. Is there any other steps I should take after this for clean up?

Announcements