Avast renewal August 2019
Behavior Shield is on.
Firefox 63.03
My Firefox browser has been infected with nuisance adware identified as " r.svrtrack.com ". I don’t know how it got on my PC, but I’m very careful to avoid such things. I just helped my sister in another state to remove similar adware from her laptop. It had already insinuated itself into many levels of the system, caused frequent unwanted notifications, and bogged down the computer.
A notification box pops up every time I enter a new URL in the browser, and asks me to enable a “monetization” add-on (see attachment). It claims to be a Mozilla extension, but there is no such thing in my Add-Ons. A Control Panel Remove Files search found no suspect programs. An internet search confirmed that it is a known malware.
I ran an Avast search and got an “all clear”. So I ran a search on the free version of MalwareBytes, and it quarantined an unrelated set of files. The adware continues to be a nuisance. Isn’t Behavior Shield supposed to catch such obvious unorthodox activity? Do I have to actually release the caged animal before Avast will catch it?
It seems to be crudely made software, so why didn’t Avast detect the popup behavior and block it? Avast claims to be protecting my browser from this kind of thing. Other than uninstalling Firefox, is there anything I can do to stop the harrassment?
Did you mean that “pcthreatskiller” is malware? Or that “r.svrtrack.com” is malware? Which one does Avast protect from?
The “r.svrtrack.com” popup seems to be a Re-direct, which should be a behavior that would trigger Avast to block it. If so, why doesn’t Avast find the cause of such behavior?
I found this website that claims to have an app to remove this specific adware. But the site seems a little suspect, so I passed it up. I’m hoping Avast can do the job.
Using spyhunter is indeed a bad proposition, do not fall for it. The link you gave is mainly scam & bloat.
Better it is is to wait for a qualified removal expert here, that will help you to deal with it in a specific and unique way,
suited to that specific malware on your unique device and with your specific configuration.
Do not copy what you read there as every victim needs his own cleansing routine under his or her specific situation.
By the way all qualified removal experts have their own “Hogwart” tools to do the job.
If window on screenshot is real window then culprit must be one of the extensions even if it doesn’t look it is. FRST logs are clear and extension you have should be legit. Now try with disabling/removing extensions on by one until you find culprit. Please report what you have found out.