MAL:URL Popups every 15 minutes

Hi

For the past few days, I have been getting continual Avast Webshield pop ups warning of a blocked “harmful webpage or file”.

This happens as soon as I connect to the internet and before I even open my browser. There are anywhere from 2 to 20 popups.

The popups are similar to these (Same domain names, and file types, slightly different file names):

URL:http://anythicago.com/4141/RelayTurbo_142668814314552.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://simplesitescan.net/4141/LighterInit_142669556111830.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://alwaysisobar.com/4141/CutterGeneration_142669028208336.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://bestdriverstar.net/4141/CutterSystem_142669222915982.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://opticguardzip.net/4141/CutterSystem_142669222919983.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I have tried doing scans with Malwarebytes but have had no success.

Attached is my zoek scan results.

https://forum.avast.com/index.php?topic=53253.0

Here are the rest of the logs.

Let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: 2015-05-16 21:27 - 2015-06-07 01:50 - 00000000 ____D C:\ProgramData\18c90fd0000062dd EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Attached is the log that was generated.

I haven’t had any pop-ups since then.

Did you run the fixlist twice ?

Pretty sure I didn’t.

Hmm weird :slight_smile:

And the alerts have ceased