Infection: URL:Mal (getmuzicas and getusaaal)

Viruses and worms
1

Good day!
Avast is continuously popping up with:

avast! Web Shield has blocked a harmful webpage or file.
Object: http://getmuzicas.info/?e=pcho…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

AND

avast! Web Shield has blocked a harmful webpage or file.
Object: http://getusaaall.info/?e=pcho…
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I have attached the logs from Farbar Recovery Scan Tool.

2

This is really nasty malware, the malware experts cannot find the loadpoints or the culprit at the moment.

3

Let me know if this stops the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION 2014-07-13 11:06 - 2014-07-13 11:05 - 152067760 _____ () C:\Users\VAIO\Downloads\g4iw1b7k.exe CMD: ipconfig /release CMD: netsh int ip reset CMD: ipconfig /renew CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

4

I have this as well. Getusaaal svchost flag keeps popping up. tried running the fix list…no dice. Is this thing likely to damage my install of win 7. If so i’ll just re install now…or should i wait for a cure?

5

Start a new topic.

6

Hi :slight_smile:

Sarah5, as you see the fixes are created for each machine individually. Do not take fixes that wasn’t prepared for your specific problem!

Please start your own topic in this forum and wait patiently for one of us to assist you. Follow the directions in the link below:
https://forum.avast.com/index.php?topic=53253.0