I have attached the text files that are listed as needed.
I have been getting a network shield warning that a bad URL has been blocked but no internet programs are in use.
I can see that Avast is doing what it is meant to do and I have tried navigating to the path listed in the warning but the file doesn’t exist. Im no tech head but am I right to believe that something is on my system and trying to hijack my browser?
Warning states “Malicious URL detected”
Google and internet Explorer are not running so something has got on to my computer.
I have followed the path listed in the warning from Avast, but I
cant see the file.
Questions:
Threat is detected in background scan. It appears that network
shield is what is picking up the threat.It pops up every few minutes.
Threat is listed in warning popup
URL: http://nulio.ru/flowers.php
Process: c:/Users\Normal\dxqloqp.exe
Infection: URL:Mal
3.Unknown when downloaded, warning has begun occurring today (16/04/2013).
4.Unknown
5.Warning wording:
Malicious URL blocked
Avast Network Shield has blocked a harmful site.
URL: http://nulio.ru/flowers.php
Process: c:/Users\Normal\dxqloqp.exe
Infection: URL:Mal
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
I followed your instructions and OTL log is attached.
For a few minutes I thought it had worked but the same warning is popping up again.
I am starting to backup some bits and pieces that I have on the computer, would malware be in my pictures files or words docs, or does it try to hide in program files and out of reach places?
Download ComboFix from one of the following locations: Link 1 Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
Thank you very much Essexboy and Pondus, scans are showing nothing and no more pop ups. I have rebooted numerous times through the day and found all works perfectly. Run most of my GPU intensive programs and gone to all the websites I usually haunt.
I have been looking at the speed today and found that since the malware has been erased, my system has sped up to it’s usual. I will definitely book mark and be back if I have any problems. Very prompt and correct help is rare nowadays.