threat signing into AIM

Avast Free Antivirus / Premium Security
1

Starting yesterday when I log into AIM I frequently get a threat detected message
If I click on more info it display another screen.
tops of the screen

Infekce zablokována

URL hxxp://38.71.2.31/ad/u?token=e51c5a1ede72cd321589d5b1a00284ed&nw=10886&dpid=10886&gif=1&attr=20006,4001,5001,6002,7005,9009,241,350,378,380,381,382,383,384,385,387,777,784,1054,1055,1069,1080,1088,1089,1091,1093,1109,1113,1115,1143,1147,1149,1184,1608,1611,1768,1872,1927,1952,1954,10002,2671775,2671803,2679436,2675300,2673130,2675232,2673727,2673715,2674702,2673718,2678322,2673719,2678591,2674710,2675441,2676107,2674713,2675445,2673138,2673702,2673101,2674300,2678242,2674786,2675210,2677097,2677111,2678347,2678344,2673119,2675220,2678256,2678257,2678338,2675288,2678340,2671915,2671777,2671736,2671376,2671593,2671858

Infection URL:Mal
Relax, your avast! just saved you from a virus.
Protect yourself against other types of threats by upgrading now

and then a button to upgrade Now

I can go ahead and use AIM with no problem. But when I sign off sometimes it will happen again when I sign on again.

what is: Infekce zablokována

And what is going on. is this a real threat or a false positive of some kind.

2

Hi leona50,

“Infekce zablokována” means ‘infection blocked’ (Czech).

To diagnose and clear, please follow instructions here: https://forum.avast.com/index.php?topic=53253.0

Please attach logs gotten from running the first three programs in your next reply. Once that is done, a certified malware removal expert will be contacted to join your thread. Logs are needed to remove the bad culprit causing your issue(s).

3

I did not know what is going on. Yesterday and day before I got the problem I posted about - only when I signed into AIM but not every time I did that. I went ahead and downloaded and ran MalwareBytes as instructed. It did not find anything

And even stranger a day or 2 before I started getting this error, I had a couple of days when I was browsing internet it detected an quarantined a viruses js:pdfda -which was showing as coming form pagespeed.js which was located in a temporary file. After the 2nd virus updated in one day -that problem went away.

I have signed in and out of AIM several times today and the problem has not happened again. I am very confused as to what it going on. Since the problem is not longer occurring and since MalwareBtyes did not find anything, I did not run the other 2. If you feel I should still do that let me know and tomorrow I will continue.

4

Sounds like you had an issue with .js (javascript) files and avast! was detecting these two as malicious. Correct in assumption that once avast! got the 2nd major update, these detections (blocks) ceased?

I’d monitor for a bit and see if your issue returns. If it does, then re-run Malwarebytes again after updating to the latest definitions, and run the other two programs. Attach all three logs if you continue to have issues.

Correct in assuming it was avast! that quarantined these two files?

I’d keep Malwarebytes, as it is a good program that will detect what an a/v will miss.

We’ll always help you if you need it.

5

Thanks,

hope it does not hapen again