URL:MAL Popups (Svchost.exe)

Viruses and worms
1

I get these pop ups from avast about URL:MAL.
They block attacks from Simplesitescan.net, Alwaysisobar.com and many others.
The popups usually comes whenever i load up my pc.
I have ran many Malwarebytes scans, Avast scans and even Avasts own browser cleaner.
I have checked for extensions on google chrome and even reinstalled it.
Still getting like 12-18 of these pop ups when i start my computer, without even having a browser open. They also comes randomly sometimes.

I really hope someone can help me… :confused:

2

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.

https://dl.dropboxusercontent.com/u/73555776/frst.JPG

[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.

3

Here u go.

4

Could you let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: IFEO\CCleaner64.exe: [Debugger] svchost.exe 2015-06-17 20:53 - 2015-05-08 08:08 - 00000080 _____ C:\Users\ztaxe_000.EMILS\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦 RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

5

hey, i am having same issues. tried googling and found nothing on it. could you be more descriptive on your solution so i could try to do the same manualy? thanks alot!

6

ignas777 could you start your own thread please

7

It worked! Great mate! Thanks!

8

maybe some other time. is it bitsadmin? i ran the cmd line, will see how it goes.

9

As long as there was nothing else on the system then that will cure it