So a friend of mine gives me their laptop because she claims its loaded with viruses. After running Malwarebytes, it only finds one potentially infected file. So I uninstall her expired norton and install my trusty Avast! and let it do its thing. It finds a bunch of suspicious files, and deletes them. But now, since Avast is running, it keeps giving me the popup in the lower left corner of a URL:Mal to various websites. The kicker is, no web browser is open, the laptop is just idling on the desktop. What gives?

Hi,

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

I sure hope you completely uninstalled Norton befor installing avast.
The remove in control panel is not enough.
NORTON REMOVAL TOOL

It could be something on the laptop that is trying to access the web.
Follow the instructions and ATTACH the logs to you next post.
https://forum.avast.com/index.php?topic=53253.0

I just used the windows uninstall. So when I get home today, should I uninstall Avast and norton using ur tool? or just whats left of norton? I will try the farbar tool as well.

Update: I used the norton removal tool, then the Farbar tool. I was still getting the alerts from Avast though, and what ended up solving the issue was downloading and running Hitman Pro. It ended up being a virus in the MBR. Once it was done with its scan and rebooted, no more problem. Thanks for the help guys.

you should still attach the farbar logs so that TwinHeadedeagle can check for leftovers and other issues

what did hitman detect and remove?.. post log or screenshot

Unfortunately its long gone.

farbar logs can be created anytime you want… just run the tool