URL: MAL problems

Viruses and worms
1

Hi,

I’m trying to elminate a URL malware showing up as "hxxp://jsh37.net/r/ (the /r/ is new, used to be /k/).

I’m running avast free version and I get the avast pop-up warning be of the malicious url being blocked. Infection URL: mal, process: C:\Windows\System32\wscript.exe.

When I restart, my homepage gets changed to sftwred.info/

I’ve run the avast scan which doesn’t catch it.

I’ve run MBAM, quick & full scan which found a couple threats (logs attached). I’ve also run adaware.

Any suggestions?

2
wscript.exe
can you upload this to www.virustotal.com and test with 40+ malware scanners when you have the result post the scan link here for us to see
3

follow this guide and attach the logs…not copy and paste. http://forum.avast.com/index.php?topic=53253.0

AdwCleaner
Malwarebytes
OTL
aswMBR

4

https://www.virustotal.com/file/047f3c5a7ab0ea05f35b2ca8037bf62dd4228786d07707064dbd0d46569305d0/analysis/

no threat detected

5

Here are the adwcleaner & MBAM logs

6

And here are the OTL logs

7

OTL

8

Hi all - is there anyone who can have a look at my reports and provide some help on my malware issue? My wife is getting frustrated and I promised her I’d find a way to fix it. Thank you so much for the help!!!

9

Sorry, here is the MBR log which I forgot to include.