THREAT HAS BEEN DETECTED!!! but Avast! finds NOTHING over and over again!

Viruses and worms
1

Just like the title of my post, i get on average 50 to 52 pop-ups back to back to back saying “threat has been detected”, as soon as I close it, within seconds it does it again!!! Have run full, quick and boot scans and NOTHING!!! Ran Malware bytes, found NOTHING!!! I wont even be surfing the web and I keep getting pop-ups!! plz help!!! Thanks!!!

2

Logs to assist in cleaning malware https://forum.avast.com/index.php?topic=53253.0

When done, help will arrive :wink:

3

Here are my logs…

4

After this fix has run could you confirm that the alerts have ceased

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKU\S-1-5-21-1059907062-673273473-1159870729-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml.dll,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf> (the data entry has 243 more characters). <==== Poweliks! SearchScopes: HKU\S-1-5-21-1059907062-673273473-1159870729-1000 -> {BFDAE457-7E08-45BC-AA27-46CC1813C74B} URL = http://www.mysearchresults.com/search?&c=4001&t=10&q={searchTerms} CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - No Path CustomCLSID: HKU\S-1-5-21-1059907062-673273473-1159870729-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml.dll,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf> (the data entry has 251 more characters). <==== Poweliks? Task: {279395BB-A307-48F4-9A9D-7B033E49A77C} - System32\Tasks\Test TimeTrigger => C:\Users\Kelly\AppData\Local\Temp\Runner.exe [2012-11-02] () <==== ATTENTION Task: {3487E9EA-5DE4-4677-B27A-ACD14A535CBB} - \PastaQuotes No Task File <==== ATTENTION Task: {83016FC3-61B5-40C9-8FE2-0B922861BC7F} - System32\Tasks\4694 => Wscript.exe C:\Users\Kelly\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION Task: {D2FE379C-1D1C-4E01-A597-55E1DE6BBE1E} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

5

ok here it is

6

Have the alerts ceased now ?