Numerous "Infection Blocked" Messages

I have been receiving numerous “Infection Blocked” messages from my Avast Antivirus program. Three in the last 24 hours. I was using the free version but signed up last week for a 30 day $19.99 trial for one computer. I still get these infection blocked notices, even more. When I scan there is no virus found - then I do a Malwayrebyte scan and no problem found. Also, last week my credit card was used at a nearby Walmart illicitly. I discovered later that it had been stored in my Google Chrome settings and have since deleted it. I had Zone Alarm firewall but removed it and am using Windows 8.1 firewall at present. I am concerned and unsure how to proceed or what to do about this. Any advice would be very much welcomed. Thank you for your help and being here. Obviously, I don’t know a lot about computers so bear with me. ~~

Hi could you attach a screenshot of the avast popup

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.

https://dl.dropboxusercontent.com/u/73555776/frst.JPG

[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.

Thanks for your help - I ran the scan you suggested and attached the two files generated. I am not able to retrieve the last Avast pop-up - I wrote down http://54.213.181.000 - Url: Mal - files, for what it is worth.

I just got another Infection Blocked pop-up. I do not know how to attach it to this message. It seems to be the same one as earlier today and maybe last night too. The process is: C:\Program Files (x86) .…\chrome.exe.

I was able to get that screen shot of the latest Avast pop-up. I will try to attach it.

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

I just want to be sure I do this right. FRST64 and fixlist.text are on my desktop - I am assuming this is the same location. Thanks.

if you see them both as the picture in essexboys instructions, then they are at same location, if not FRST will give a error, can not find fixlist

I put them in the same folder on desktop but FRST cannot find fixlist.text. Sorry to be so much trouble, but how do I save fixlist.text in the same location as FRST64?? Thank you again.

Lets try this

Download the attached fixlist.txt to your desktop
Start FRST and press Fix

Did that work

Yes, this worked. I am attaching the log it generated (I think) and will proceed with your instructions.

It was probably saved as fixlist.txt.txt hence FRST could not find it :slight_smile:

So far so good. You are right, I had misnamed that fixlist.txt (used text instead of txt). Sorry again. I am attaching the log from the Adwcleaner scan and cleaning. Can only hope I did it right. I have had at least 4 more infection blocked messages today - hopefully no more!! Thank you so much, hope I don’t have to bother you again!

I just got another “Infection Blocked” message. I will attach a screenshot of the details. Hmmm, what do you think I should do next?? Thank you for your patience. ~~ Mary

Could you run chrome in incognito mode and let me know if that stops the alerts https://support.google.com/chrome/answer/95464?hl=en-GB

OK, I’ll keep you posted.

I just noticed there was another Infection Blocked - I did not see the pop-up cause I wasn’t at my computer, I guess, but there are now 10 infections blocked in the last 30 days in my Avast program and there were 9 two hours ago. I was wondering if removing Google Chrome and just using Internet Explorer as my browser would solve my problem, or not. I will let you know if I get any more messages, I am still in Incognito on Chrome. Once again, thank you.

I just got another pop-up and now there are 13 infection blocked messages in the last 30 days.

I was in Chrome incognito but then I went offline and when I went back online, I guess I thought I was still incognito but I just found out I wasn’t and I got quite a few more infections blocked. I will be sure I am incognito from now on so I can give you a true report tomorrow. And I will try to be more precise and careful. Anyway, thanks again.

No problem, but it does sound as though one of the chrome files is infected. We may need to do a full uninstall/reinstall