http://wpad.browserupdatecheck.in/wpad.dat

system · 2015-07-01T03:57:24.000Z

actually more persistent than ever now with svchost.exe blocked URL:MAL

system · 2015-07-01T09:15:27.000Z

Re-run zoek and run this script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
bitsadmin /reset /allusers;b

system · 2015-07-02T00:18:45.000Z

ran it restarted computer 5 mins later after boot up multiple blocked svchost.exe issues. got anything else before I reformat?

system · 2015-07-02T00:54:57.000Z

please keep in mind that last part wasn’t meant to sound short with you. I apperciate your help through all this. Just getting frustrated with this issue. Btw is there any chance this might be a false positive issue on avast’s end. I don’t actually have any pop up issues and the computer runs fine and all cleaners come back clean. But the moment avast shields are on It says it blocked a URL:MAL from opening. No url mals have ever opened though when the shield is off or even when avast was uninstalled.

TwinHeadedEagle · 2015-07-02T01:10:46.000Z

Stand by, Avast team will need to check this, it is very possible that this is false detection.

system · 2015-07-02T09:13:40.000Z

Alright I’ll be on stand by to hear what is said about this issue.

system · 2015-07-03T06:11:54.000Z

Just as a heads up for this issue. my machine is clean all scanners say, and I double checked my windows updates and had 3 windows security updates that were optional I installed them, and restarted my machine. No more svchost.exe pop up blocks. I will report in over the next couple days if it has changed, but for now my avast block MAL:URL issue seems fixed from those updates.

system · 2015-07-03T12:30:15.000Z

after hours of no issues I opened up one new tab in fire fox and the svchost popped up again. lame… any word on false positive yet?

system · 2015-07-03T12:37:13.000Z

those security updates did make it happen less frequently though

system · 2015-07-05T15:25:47.000Z

Bump anyone else hear if this a false positive issue or found a fix

essexboy · 2015-07-05T15:39:23.000Z

Hi there, this is a genuine alert and we have found where it hides

We will use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

•Type browserupdatecheck.in;wpad.dat into the Search: field in FRST then click the Search Registry button.
•FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
•Please attach it to your reply.

system · 2015-07-05T15:42:38.000Z

ok awesome, sadly I’m at work for the next 7 hours. I will attach the required information tonight when I return home.

essexboy · 2015-07-05T15:44:06.000Z

OK

system · 2015-07-06T01:48:36.000Z

here is my Search.txt file from FRST

essexboy · 2015-07-06T14:09:02.000Z

Right click this link https://dl.dropboxusercontent.com/u/73555776/tcpip.reg and select Save target as…
Save TCPIP.reg to your desktop
Double click the file and allow to merge
Accept the warnings
Once done reboot and let me know if the alerts have ceased

system · 2015-07-06T17:26:14.000Z

All is looking well at the moment. Ran FRST again and searched the registry and didnt find anything about wpad.browersupdatecheck.in or wpad.dat. Is there any other steps I should take after this for clean up?

system · 2015-07-06T18:08:38.000Z

Hello, im having the same problem, help would be appreciated

system · 2015-07-06T18:11:26.000Z

Ive been looking for a solution to this problem all day and this is the first helpful forum on this subject I have found. I included the results from the FRST registry search

essexboy · 2015-07-06T18:26:00.000Z

greatmuffin1 post:38:

All is looking well at the moment. Ran FRST again and searched the registry and didnt find anything about wpad.browersupdatecheck.in or wpad.dat. Is there any other steps I should take after this for clean up?

Subject to no further problems

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version

https://dl.dropboxusercontent.com/u/73555776/javara.JPG

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe

essexboy · 2015-07-06T18:27:02.000Z

Anvil1 could you start your own thread please

Announcements