Log to solve avast web shield poping up constantly

Viruses and worms
1

Hi everyone,

My problem is as title.
Following steps in stick topic. i would like to post my log here.

Thank you for seeing and please help me.

2

Hello,

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Start
File: C:\Users\dat\AppData\Roaming\inst.exe
Folder: C:\Users\dat\AppData\Local\pangu
Reg: reg query "HKU\S-1-5-21-1084843911-865144924-1510179392-1001_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}" /s
Reg: reg query "HKU\S-1-5-21-1084843911-865144924-1510179392-1001_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}\localserver32" /s
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://chiplove.biz
C:\Users\dat\AppData\Local\Temp
Reboot:
End

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

.

Now, copy/paste the following into your Chrome browser address bar and press Enter:

chrome://settings/searchEngines

Remove any unwanted search engine (blekko.com) by clicking the X next to it.

Exit chrome://settings and re-launch Chrome. That’s it …

3

Thank you.

I already ran the fix and here’s the fixlog.

P/S: I also removed some search engine (including blekko).
Were those all the fix?
Thank you. The pop up may be gone now.

4

Hi,

This time create & run this FixList and tell me how are the things now?

Start
DeleteKey: HKU\S-1-5-21-1084843911-865144924-1510179392-1001_Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}
End
5

Thank you so much.

I ran the new fixlist.
This time no need to restart.
Attached file is fixlog.

I haven’t seen the pop up alert from the first fix. It’s magical.
:slight_smile:

6

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

7

Hi.

Already ran the delfix.
Here’s the log.

Thank you.