URL:MAL Attack.

Hi there,

I’ve been getting this Mal attack, it started Yesterday evening. didn’t think much of it
until today, I’ve been getting almost 10 alert from Avast.

URL: http://cnc.cedexis.com.wscdns.com/img/36a/r20.gif?rnd=1-1-13960-0-0-36-1061944992-xNqkaMO0ebmyacifcaeqIg0OOp2V@GmWUysiRqu4UOsiRqva3p@tOafkeaGeelWbgkjkiaaO1y@aOarqafOkcaaqabGaiaaOagaaAHnIDxr0B24YlMnKzY5ODI5WCM9Kaaaa

Infection: URL:Mal

Process: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Any help you can provide will be appreciated :wink:

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

Monitoring…

Hi There,

I hope this helps.

Thanks a lot for your amazing work.

Tom

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Please find enclosed the fixlog file.

How is your PC behaving now?

Support @Avast - as you see above, Avast Internet Security keeps displaying malware warnings for a cnc.cedexis.com object. We validated the object is valid and not infected. Theses impacting our customers,

Please could you update your definitions or let me know what should we do ?

thanks

Rony
cedexis.com
mobile 949.874.0770