"Threat has been detected" message in every google search

Viruses and worms
1

Every time I am making a google search using Chrome, I get a “threat has been detecting message, Infetion URL:Mal” from avast. When I am using another browser, the problem disappears and google searches work fine. What’s the matter and what should I do?

Thanks,
Nikos Bizanis

2

what URL does it show in the message?

3

If for instance I try a google search for avast internet security, the URL is “hxxp://88.208.7.204/slog/index2.php?v3&sys=google&key=avast internet security&restype=0&resitems=0”

4

follow instructions here https://forum.avast.com/index.php?topic=53253.0
attach Malwarebytes and Farbar Recovery Scan Tool logs

5

These are the logs you asked for

6

removal team is notified

essexboy is on vacation and the rest has been busy with other stuff, so if you dont recive any help by tomorrow, attach your logs over at Geeks to Go forum http://www.geekstogo.com/forum/topic/2852-malware-and-spyware-cleaning-guide/

7

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system


CHR Extension: (No Name) - C:\Users\nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2014-09-17]
C:\Users\nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim
EmptyTemp:
CMD: bitsadmin /reset /allusers

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

8

Everything is back to normal now, thanks a lot!

9

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.