Good day! I recently had problems with Avast antivirus about popping threat secured every 10 mins. Here are the attachments about this problem. Hope it will be solved as soon as possible.
Hello mate,
The script below should remove avast warnings;
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
CreateRestorePoint:
CloseProcesses:
C:\Program Files\WinZip Smart Monitor
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {19BCAC81-687E-4BD7-8E57-8A4D76383450} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
AutoConfigURL: [S-1-5-21-2872495847-3613257816-3483760244-1001] => hxxp://web-ssblk.xyz/wpad.dat?38f73e64c387e50a3e9b1cc11d536a9938551706
ManualProxies: 0hxxp://web-ssblk.xyz/wpad.dat?38f73e64c387e50a3e9b1cc11d536a9938551706
HKU\S-1-5-21-2872495847-3613257816-3483760244-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10454__181014
SearchScopes: HKU\S-1-5-21-2872495847-3613257816-3483760244-1001 -> DefaultScope {02CD636F-5A97-495D-A8C2-556427D0B64A} URL =
SearchScopes: HKU\S-1-5-21-2872495847-3613257816-3483760244-1001 -> {02CD636F-5A97-495D-A8C2-556427D0B64A} URL =
SearchScopes: HKU\S-1-5-21-2872495847-3613257816-3483760244-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10454__181014&q={searchTerms}
BHO: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> No File
BHO-x32: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> No File
Toolbar: HKLM - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKLM-x32 - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
EmptyTemp:
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Then, just in case, let us check and remove any leftovers, please download AdwCleaner from the link below and perform the additional scanning;
https://downloads.malwarebytes.com/file/adwcleaner
- Right-click on the program and select Run as Administrator to start the tool.
Accept the Terms of use.
…wait until the database is updated…
Click Scan Now.
When finished, please click Clean & Repair.
Your PC should reboot now if any items were found.
After reboot, a log file will be opened. Please attach its content into your next reply.
Logs are located at C:\AdwCleaner\Logs
This should be it I believe. How’s system running now?
Hello.
So far, no warnings or notifications about that happened after I followed the instructions. It seems to be good for now.
Thank you very much! God bless.
![]()
Hoping that that problem won’t happen in my PC again.
np ![]()
To remove the main tool, rename FRST/FRST64.exe to uninstall.exe and run it. This will remove FRST related files from your PC.