Infection blocked URL hxxps://codegv.ru Infection URL:Mal

Hi all,

I’ve installed Acestream recently and it seems to be the cause of my current problem. Whenever i surf using Chrome I’ll get the following warning from Avast

“Infection blocked
URL hxxps://codegv.ru
Infection URL:Mal”

I’ve removed the AS Magic Player extension on my chrome browser and uninstalled acestream as well. However I realize that the extension comes back into my extension list by itself randomly. Following that I’ll get the above warning from Avast again whenever I load a new page.

Could someone please teach me how to remove this particular malware? Thank you.

How to recive help instructions https://forum.avast.com/index.php?topic=53253.0
Attach the requested logs

Hi Pondus,

Thanks for the reply, I’ve attached the logs requested below. Just FYI the warnings isn’t popping up now, I’m just not sure if it will come back again, it came back a couple of times previously after I killed the AS Magic Player (Chrome Ext) and Acestream.

Hi :slight_smile:

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/warning.gif
SpyHunter warning!

I see that you are running SpyHunter. This software doesn’t have a good reputation here. Enigma Software vendor has been well-known for applying very aggressive advertising policy and misleading the users. You may read about it here. We consider this program as a dubious and ineffective one. My best advice would be to uninstall it.

https://sites.google.com/site/cannedfixes/junkware-removal-tool/JRTbythisisu.png
Fix with Junkware Removal Tool

Please download JRT by Thisisu and save the file to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/junkware-removal-tool/JRTbythisisu.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Follow the prompts and let this process run uninterrupted.
[*]This scan can take a while, depending on your System specs.
[*]Upon completion, a log (JRT.txt) will open on your desktop.

Please include the contents of that file in your reply.
Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.

Hi Naat,

Spyhunter is still showing up? I’ve already uninstalled it before I ran those logs…and its not showing up in my list of programs under control panel as well, anyway that I can completely remove it?

I’ve attached the JRT file below, thanks for your help!

Hi and sorry for the delay, family commitments.

https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.

[*]Right-click on
https://sites.google.com/site/cannedfixes/adwcleaner/adwcleaner_new.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]The program will begin to update the database (if internet connection is operational). Please wait a little bit.
[*]Follow the prompts and click Scan.
[*]When finished, please click Clean.
[*]Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.