Malicious URL Blocked

Avast pops up every time a new page opens in Firefox. This just started happening this morning. Well, yesterday morning now. It doesn’t matter what site I am going to. The Avast support page when I click on “more details” just tells me avast saved me from crashing. I’ve run Adwcleaner and Malwarebytes and it still does it. Not sure what to do or where to look for the problem at this point.

Network shield log says:

01.10.2012 10:25:18 Network Shield: blocked access to malicious site http://top-humor-site.com/script.js [ C:\Program Files (x86)\Mozilla Firefox\firefox.exe ( 3780 ) ]
01.10.2012 10:25:18 Network Shield: blocked access to malicious site http://top-humor-site.com/script.js [ C:\Program Files (x86)\Mozilla Firefox\firefox.exe ( 3780 ) ]
01.10.2012 10:25:21 Network Shield: blocked access to malicious site http://top-humor-site.com/script.js [ C:\Program Files (x86)\Mozilla Firefox\firefox.exe ( 3780 ) ]
a whole bunch of times…

########## EOF - C:\AdwCleaner[S1].txt - [2340 octets] ##########

Follow this guide and attach the logs (not copy and paste) http://forum.avast.com/index.php?topic=53253.0

AdwCleaner
Malwarebytes
OTL
aswMBR

I’ll run the others now. I just didn’t do them because the first 2 seemed to indicate they didn’t find anything. The one I pasted from the Avast log was just to let you see the name as Avast puts it up. I also noticed while I was logged in to my school website doing some homework the alert popped up quite a few times without any clicking on my part. I’d be working in Word and not even on the website and it would pop up saying it blocked the URL.

I just didn't do them because the first 2 seemed to indicate they didn't find anything.
and no security program have 100% detection....so it does not mean nothing is there AdwCleaner removed lots of crap from your browser Malwarebytes is also a tool that targets mostly executable files so there is lots of infections it will not look fore

and aswMBR log ?

malware removers are notified. It may take hours before one arrive so be patient

I just finished the aswMBR scan, here is the log for it.

Do you get the same alert in Chrome and IE ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF

:OTL
[2012/09/26 02:29:16 | 000,008,001 | ---- | M] () (No name found) -- C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\vcxhc25b.default\extensions\tineye@ideeinc.com.xpi

:Files
C:\DOCUMENTS AND SETTINGS\JASE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\4FMKGC44.DEFAULT\EXTENSIONS\{3112CA9C-DE6D-4884-A869-9855DE68056C}
C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\GOOGLE-CJK@PARTNERS.MOZILLA.COM

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Is it only firefox ?

Please download GooredFix from one of the locations below and save it to your Desktop

Download Mirror #1
Download Mirror #2

[*]Ensure all Firefox windows are closed.
[*]To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
[*]When prompted to run the scan, click Yes.
[*]GooredFix will check for infections, and then a log will appear.

Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

Essex-
I didn’t get the same thing on IE or Chrome. I just got home from work, and downloaded GooredFix. I was about to post that the problem seemed to have been fixed at some point during the running of the other programs, but it just did it a minute ago. It is not on every single web page that loads now, so that is something.

That was fast. Log attached.
Also if you don’t mind, could you maybe look over my other logs and if it isn’t going to be dangerous to post them, maybe post some of the lines from the various logs that indicate infections found/fixed? I looked at the logs and frankly had a lot of trouble making heads or tails of them. I’m much more of a hardware person when it comes to PCs.

Looks like I got them on the first run… It was this bit in firefox:

C:\Users\Jason\AppData\Roaming\Mozilla\Firefox\Profiles\vcxhc25b.default\extensions\tineye@ideeinc.com.xpi

OTL is the main analysis log, that one needs a human eye

Nothing was apparent in that one apart from the FF stuff

How is it behaving now ?

I’m getting this popup anytime I go to a website or refresh the screen

Infection Details
URL: http://top-humor-site.com/script.js
Process: C:\Program Files\Mozilla Firefox\firefox…
Infection: URL:Mal

I have run all the info posted and three or four antivirus programs still there any help???

This is an old topic, luckily I am still subscribed to it.

Follow the steps here http://forum.avast.com/index.php?topic=53253.0

Then create your own topic and we will see about fixing you up