Hello, I have a virus in my PC. When I started PC today avast pop up a red window that said it blocked something called URL:MALL , i think it was in svchost file in windows directory somewhere.
Iam experiencing problems, my RAM is all used even when I dont have any programs started. I am pretty sure its the virus. Also my pages in chrome randomly crash. Malware bytes shown no infected files.
OTL only created one txt file after it finished - OTL.Txt . It did not create extras.txt file.
I followed your guide from the forum, here are my logs:
malware removers are notified, it may take some hours before they are online…
Hi,
Please download AdwCleaner by Xplode and save to your Desktop.
Double click on AdwCleaner.exe to run the tool.
[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.
=====================================================
Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Thank you a lot for trying to help me.
Logs attached.
Also Avast no longer shows red window at start of the system.
Step 1.
We need to enable hidden files and folders.
Note: Do not be affraid when you see unfamiliar files and folders, we’ll restore it later.
Download the following two files on Desktop:
http://goo.gl/Rp9XND
http://goo.gl/RgQqQK
Run them one by one. Screen will flash when you execute them, this is normal.
Step 2.
I need you to upload the file for verification. Go to this adress:
http://www.mycity.rs/ambulanta-upload.php
Click Choose File, and find the following file:
C:\Users\Mato\AppData\Roaming\Origin\update.vbe
After you find the file, click Upload. Inform me when you finish.
I already executed two files you said to add to desktop.
This link:
http://www.mycity.rs/ambulanta-upload.php
Wont open in my chrome.
No matter how many times I tried to reload the page it just stays plain white, nothing happens.
It is working for me, did you tried another browser?
Yes, it doesnt work in chrome, mozzila firefox or internet explorer. Could it be virus blocking it or something? Is there any way how to get on that site? Thank you.
Yes it doesnt work in chrome, mozilla or internet explorer. I can open site up to this http://www.mycity.rs/ambulanta
but not the whole link. Could it be that virus? Blocking it?
Did you tried to disable Anti-virus and to open this link?
If it is not working, archive that file, and upload it here
Copy the download link here…
Should I copy it to desktop and then pack it with winrar or should I only pack it as single file in the directory and then upload?
Site doesnt work even with disabled antivir.
Just pack it and upload…
Here it is:
Computer seems clean, how is it behaving now?
It does seem to be ok right now, no more crashes of tabs in chrome. Also could you check this, if my ram is supposed to show this:
http://www34.zippyshare.com/v/21227926/file.html
Under the tab"volná" (it means “free”) it shows only 100 MB of ram. Is it ok?
Otherwise the PC seems to be allright now, avast doesnt show the red warning when starting windows anymore.
If any problems occur I will inform you.
So far thank you very very much for your help.
That 100mb is normal, you can read here more about it
http://brandonlive.com/2010/02/21/measuring-memory-usage-in-windows-7/
We’re done here, only to remove used tools:
Please download DelFix by “Xplode” to your Desktop.
Run the tool and check the following boxes below;
[] Remove disinfection tools
[] Create registry backup
[*] Purge System Restore
Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt
I don’t need DelFix log report.
Thank you very much for your help. Keep up the good work. Have a nice day. 
One more question, how can I hide files and folders and “protected system files” .