Malacious URL Blocked

Viruses and worms
1

Hello,

Unfortunately I’m having the same problem that others have experienced here. Getting the recurring Avast “Malacious URL Blocked” pop-up when operating Google (Using Vista with Mozilla). However, Google itself seems to be running smoothly, with no redirects.

Infection Details
URL: zilebelywa.com/3LH3p9ex96fbufam15qEzqPUzcG4w4LK dCBxqTF2cS43Nzqtt2exL7egtT85KXr-PObyLTaksM
Process: file://C:\Program Files\Mozilla Firefox\firefox.exe
Infection: al

After perusing the forum, I went ahead and took the first steps recommended by Essex et al. Will post the results as I finish them. Thanks

2

MBAM Log:

Malwarebytes’ Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 7092

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

7/12/2011 3:05:29 PM
mbam-log-2011-07-12 (15-05-29).txt

Scan type: Quick scan
Objects scanned: 152758
Time elapsed: 8 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

3

Avast Antirootkit Log (attached)

4

It would be useful to make OTS log too from the essexboy manual
http://forum.avast.com/index.php?topic=53253.msg451454#msg451454
and attach this log to the raply

5

Oh, okay. Thanks for the heads up.

The OTS log should be attached.

Thanks in advance.

6

Hi there I would like to do a confirmation run before I fix the MBR

Please read carefully and follow these steps.

[*]Download TDSSKiller and save it to your Desktop.
[*]Extract its contents to your desktop.
[*]Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillermain.png

[*]If an infected file is detected, the default action will be Cure, click on Continue.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKillerMal-1.png

[*]If a suspicious file is detected, the default action will be Skip, click on Continue.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKillerSuspicious.png

[*]It may ask you to reboot the computer to complete the process. Click on Reboot Now.

http://i1224.photobucket.com/albums/ee362/Essexboy3/TDSSKillerCompleted.png

[*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
[*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of “TDSSKiller.[Version][Date][Time]_log.txt”. Please copy and paste the contents of that file here.