Same malware alerts as the rest, blackled, blackfight, etc.

system · 2015-04-25T13:44:35.000Z

tried to resolve the problem yesterday, but the pop-ups returned. did some fresh scans, here are the logs. thanks for any input! i also have logs from malwarebytes, but i dont know how to upload the file, unless im supposed to convert it from XML to a proper file extension.

essexboy · 2015-04-25T14:05:55.000Z

And as if by magic this should clear the problem

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · 2015-04-25T14:16:06.000Z

here you are

essexboy · 2015-04-25T14:17:42.000Z

Could you confirm the alerts have ceased

system · 2015-04-25T14:24:34.000Z

they do indeed seem to have subsided. i will wait 24 hours and report back to this thread tomorrow. thanks! the problem seemed to clear up yesterday, after removing and re-instaling chrome (where the issue seemed to be coming from) but came back an hour later with six fresh pop-ups. i have to wonder, where all of this is coming from? seems the malware board is swamped with this same bit of malware. old thread for reference, if it matters → https://forum.avast.com/index.php?topic=170034.0

essexboy · 2015-04-25T14:26:57.000Z

It was in here

========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Unable to cancel {5945A9D9-C2D3-4D1A-B911-E915CDBD7168}.
Unable to cancel {DB1FF0BA-FF66-450A-B550-E21552503A2A}.
Unable to cancel {F03D65BE-49A6-434C-9312-5127749CEEDB}.
Unable to cancel {FAFDAE9D-8AE4-4014-8A6F-43DB1166B463}.
Unable to cancel {1EF8E6F0-A793-4986-B0FB-6E7AFE36692B}.
Unable to cancel {0DF14A9B-A4E7-4F5A-9CFD-F55C2B93F1C9}.
Unable to cancel {B297829F-E3CB-4EDD-9B42-F244D1AED4BB}.
Unable to cancel {409BACA3-3ED7-4291-82B8-9296B6885D83}.
Unable to cancel {920F7E8B-30AD-4D1E-8875-3D2A34E7D9C3}.
Unable to cancel {CA975515-B16D-4ECF-AFAD-CF660D7D7389}.
Unable to cancel {00FB8357-C138-4896-A1CB-018105B573C0}.
Unable to cancel {4B290EE7-4E26-419B-83EC-19D912AC716F}.
Unable to cancel {976A72E1-B9A6-41A5-8E9A-0CA7DDC17E2E}.
Unable to cancel {F88402D3-1DD6-4B80-8266-7E07777FC140}.
Unable to cancel {9ADAE9F7-10C5-4F8A-AD68-ABB1E500D0EA}.
Unable to cancel {57F2655C-E8E7-4952-87D0-D36637153392}.
Unable to cancel {94A2FF4F-EEA1-477F-9066-11F9856DE449}.
Unable to cancel {74081B2B-0AA5-463C-9FA8-AFDE46A6DA45}.
Unable to cancel {0C230E21-4EB3-4B95-9FDD-1E760B5B9D38}.
Unable to cancel {63B4C07F-4962-4701-8BAE-38B5C441B108}.
Unable to cancel {0E0B534F-5F9D-4060-A15F-94AE194FA17E}.
Unable to cancel {FF603D3E-DDDE-46CE-B814-5384052B55EB}.
Unable to cancel {02F4480F-7FCB-4854-A020-5A227439E910}.
Unable to cancel {F66D9075-015A-47FB-991D-8D8E036CACF9}.
Unable to cancel {1F1AB462-4954-4808-B95F-30BABA7E083E}.
Unable to cancel {068A2AF3-0428-4BE1-8554-4985FCE27FE4}.
Unable to cancel {94998D91-DD61-4CC9-B9CC-BADA2D5C11AF}.
Unable to cancel {7A5E887B-F85D-40B2-9C85-A0FD106AA142}.
Unable to cancel {01082F57-D555-4A7E-8216-F8FE08B25B3F}.
Unable to cancel {ABDF8B69-BB87-42A4-9E98-A03B52310604}.
Unable to cancel {F470618A-C6A5-4F4E-BFC0-3D95AE808072}.
Unable to cancel {BC80830D-CAD4-4759-B658-5A20303262CC}.
Unable to cancel {F930A197-DA01-449C-811A-E895D360ED84}.
Unable to cancel {C5A63C9A-39C6-4128-9A95-42BE4DA8E3F4}.
Unable to cancel {D2DABBC6-51E3-4E5B-B7A9-4AE644FBAE02}.
Unable to cancel {878CA07E-B151-42F5-9001-D1C65F6DA18D}.
Unable to cancel {320ACB12-213C-4345-A911-763B6EDFAA96}.
Unable to cancel {6A55F91C-C399-475E-861D-E7211E5DD62A}.
Unable to cancel {DC9ABB60-2299-4727-B777-326876870027}.
Unable to cancel {CB5975C2-D736-4F4F-B01E-5F1E74A2464D}.
Unable to cancel {6EE58587-86B5-413E-93E0-FF7A1A6DE6E8}.
{106B37E3-9EBE-41DC-BAAC-4C45DD6A20A5} canceled.
{9592716A-9787-4ECA-83FC-F0C794091AF9} canceled.
{0B09E434-9065-4EA8-8CE8-490AAACAA976} canceled.
{36357D3C-D647-441D-B99E-43D351F8AED8} canceled.
{2855B531-57EA-459F-ABBF-562D32E59C4A} canceled.
5 out of 46 jobs canceled.

system · 2015-04-25T14:28:35.000Z

Good lord. excuse my lack of computer based info, what does all that mean? some sort of conflict in programs?

essexboy · 2015-04-25T14:33:11.000Z

Nope that is where windows queues the update jobs, the bad boy snuck in there

system · 2015-04-25T15:04:34.000Z

Ahhhh. thanks so much for the help! all seems clear, will report back tomorrow.

Announcements