Need help with virus

Viruses and worms
1

/sigh

Hello Avast! forums.

So today I managed to get some sort of virus and cannot seem to rid my computer of it. Every few minutes a popup in the bottom right hand corner of my screen tells me of a couple of things. This seems to happen only when a browser is open but happens regardless of what browser is open. Here is what said popup says:

Object: hxxp://getusaaall.info/?e=pcho&cht=2&dcu=1&cpatch=2&dcs=1&pf=1&unp=Azm9CdOLv7DVD
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I have tried several anti-malware and anti-virus software to clean this out but to no solution. So basically I have given up and come to the forums for help. Since I am a massive noob at this I don’t really know what other information you guys need to help me solve this, but I can provide if necessary.

Thanks!

2

Please follow the steps here https://forum.avast.com/index.php?topic=53253.0

3

Okay, I added the logs as attachments in the op.

4

This should kill it

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

5

Thank you for your response. I have follow the instructions and will post the text files below.

So far the issue seems to have been taken care of. For the last thirty minutes the alerts have ceased, so hopefully the problem is gone. Thanks for the help!

(logs attached)

6

If all is well tomorrow let me know and I will tidy up