I’m having an issue with my Surface Pro 3. Anytime I start-up the device, upon boot-up, Avast is telling me “Infection Blocked” with a URL that changes every time I start-up. It also tells me Infection URL: MAL and Process: C:\Windows\System32\svchost.exe.
I went through one of the pinned topics on this page to get the required information that you guys require to fix these types of problem. Hopefully I did everything correctly!
Any and all help is appreciated, because this is annoying the heck out of me!
While you are waiting for the qualified removal expert to appear and check out your logs.
You were most likely victim of Adware.Zusy, it comes in most cases bundled or blend with some software you have downloaded.
I think they will perform a “zoek” and “DelFix” on your computer, but be patient and follow up the malware remover’s advice to the dot.
You should wait until to-morrow, because at the moment the removers have "gone to the Swan mountains’ so to say,
(that is they are asleep).
Rather than start a new thread, I too am getting the same problem on reawakening (i.e. not browser specific),…
…BUT I have more than one site come up (but not simultaneously). The other website is ‘epictory’, not ‘reduled’ and the rest of the warning is precisely as in the screenshot above.
I’ve googled both (epictory and reduled) and it seem nobody is sure if they’re bad or not: however they do seem to be sneaking past my firewall. Local searches don’t seem to be able to find them on my PC.
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
Here’s my log. I am no longer receiving any alerts from Avast. Thank you all so much for all of your help, it is truly appreciated as I would not have been able to do any of this!
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-01-2015
Ran by Jordan at 2015-01-18 09:44:49 Run:1
Running from C:\Users\Jordan\Downloads
Loaded Profiles: Jordan (Available profiles: Jordan)
Boot Mode: Normal
Restore point was successfully created.
C:\Users\Jordan\AppData\Local\EmieUserList => Moved successfully.
C:\Users\Jordan\AppData\Local\EmieSiteList => Moved successfully.
C:\Users\Jordan\AppData\Local\EmieBrowserModeList => Moved successfully.
C:\Program Files\File Association Helper => Moved successfully.
C:\ProgramData\DP45977C.lfl => Moved successfully.
C:\Users\Jordan\jagex_cl_oldschool_LIVE.dat => Moved successfully.
C:\Users\Jordan\random.dat => Moved successfully.
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
Unable to cancel {95084CA4-17B8-4466-B50D-6DA98D8F16FE}.
Unable to cancel {EE4113A2-3CA9-4FA2-9D1E-5D5FE3A446A7}.
{0B2FE671-41A1-4CD8-AA27-D82B0CB2567F} canceled.
1 out of 3 jobs canceled.
WARNING:Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disableJava in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version
Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe
