Not even using the internet and Avast dings

Viruses and worms
1

So for the past day or two, Avast will ding “Threat detected” every so often regardless of what I’m doing. It says:

INFECTION BLOCKED
program: Internet Explorer (iexplore.exe)
http://93.190.138.192/click/?t=6ub46x23&i=823971e645add3b15c681699a9fedcd2&s=AA&p=0
Infection: URl:Mal

I don’t use Internet Explorer. At all. I didn’t even have Chrome open the first time it dinged. It kept dinging no matter what I was doing - even when I had no programs running at all except for VLC and Wordpad. So, that seems weird.

So far I’ve run a boot-time scan, a “smart scan”, and I just now downloaded MalwareBytes to see if that finds something. Mostly I’m just wondering, what the fuck? I assume that’s a virus or malware of some sort, but ??? that’s just a guess.

2

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

3

Done. MalwareBytes did in fact catch and delete a bunch of things.

4

we also need frst additional.txt log

5

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms} CHR DefaultSearchKeyword: Default -> search.ask.com CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms} CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that
THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

6

Followed instructions, here are logs. It hasn’t dinged since I started posting here, though.

7

Could you monitor for 24 hours and if all is well let me know and I will tidy up