Virus help

Viruses and worms
1

Hi to all, I dont know if here is the apropiate place to post this, but I need your help a little bit more…

Its about UrLMAL virus continuation to this topic… http://forum.avast.com/index.php?topic=96594.0

Its closed, and I wanted to say clearly that my intention is not to use any cracked software,

The cksfile log its becouse I made a back up of my hardrive before reinstalling windows and copy it again on my clean windows, now its manually deleted. I copied the chrome download folder, and a very few more.

Wanted to say aswell that the logs erased by me is becouse I dont want to google index me with with virus, so I edited my artistic name and some logs, you have to understand that for me that thread is not anonymous as it is anonymous to most users of this forum, Its not good to make public my system configuration, folders and so on. The google indexes have injured me in the past with old artistics names… sorry if that caused any inconveniences wont happen again.

Also Wanted to thanks all the team working here, you are making such a good job…

And also wanted to ask you guys about the conclusions you have about it all the URL:MAL . I guess its not a virus from my computer, then what is it? Any though you have will be very helpfull. Could we reopen the topic?

Thanks alot again for your help and this wonderfull service you give here

2

deleted :slight_smile:

3

Could you guys help me a little bit more? 5.000 friends there

__
Thanks Anthony :wink:

4

removed

5

thanks alot mikaelrask.

the results are here:

URL Scanner Resultado Avira Clean site BitDefender Clean site CLEAN MX Clean site G-Data Clean site Google Safebrowsing Clean site Malc0de Database Clean site MalwareDomainList Clean site Opera Clean site ParetoLogic Clean site Phishtank Clean site SCUMWARE.org Clean site SpyEyeTracker Clean site TrendMicro Clean site URLQuery Clean site VX Vault Clean site Websense ThreatSeeker Clean site Wepawet Clean site Yandex Safebrowsing Clean site ZeusTracker Clean site

Seems clear there, but im still getting avast messages and malvabytes messages. And i format windows and installed a new fresh windows…
How com that be possible?

6

mikaelrask here is another process detected

thxs again

7

Hi 4444

Can you please tell me what the URL you geting URL:Mal For please, this is getting a bit confusing :slight_smile:

Anthony 8)

8

Its in the image, its called the object.

9

ok, sorry…

here is it :

Thanks alot for the help

10

Do you get your browser redirecting you may i ask?

Do you use the myspace music?

WHAT DOES AVAST GIVE YOU WHEN YOUR ON IT?

11

each time i enter to the site…

Here are 2 avast just detected now on the site…

No redirections, and yes i love and use myspace

Thanks for your time and effort

12

ONE MIN 8)

13

Hi 4444

Right trend micro is saying that one of them is Malicious site

Check here:

https://www.virustotal.com/url/bca1420dc4a1eb32854ccb96fa63c2d1350f23c96e452f5617d266135d087c90/analysis/1334087589/

Dangerous. The latest tests indicate that this site contains malicious software or could defraud visitors.

i think that link is opened when u visit YOUR site. 8)

CAN YOU ATTACH THE reverbnation CODE IN A .TXT FILE AS A ATTACHMENT PLEASE, DONT POST IT IN YOUR REPLY MESSAGE

I think it was in the coding off that

Anthony 8)

14

I see you have scan agrifarma not my site… cool…

Here are the reverbnation codes and the rest used in the web.
reverbnation codes are titled as:

MAILING LIST VIDEO EXCLUSIVE DOWN

Thnks for your time

15

Can you try something for me please

can you delete that code from your site if posible

then tell me if you get them popups from avast? :wink:

16

code deleted and coming the same popups after refreshing sometimes…

Avast popups comes after disabling malvarebytes web shield…

Thanks again for your effort adotd

17

can you visit www.google.com and tell me if you get any popups

18

no popups there…

I have to say that google redirects to google.es automaticly…

thxs again adotd

19

google.se weird

20

This is getting rather annoying. >:(

@adotd

What are you trying to do? The redirect is obvious. If you read original reply 1 from the locked topic, you can see the redirect and the malicious script that redirects to the site that redirects. See: http://forum.avast.com/index.php?topic=96594.msg770416#msg770416

You got it wrong. Google.es is the spanish version of google. Don’t post if you don’t know.

@4444

You use cracked software, yet we, despite knowing that, decide to help you in all matter. You took it upon yourself to reformat and reinstall when it the malicious url avast! was alerting on your website wasn’t even related to your system. Did you even follow the instructions in my post? Review it here: http://forum.avast.com/index.php?topic=96594.msg770482#msg770482 . Seriously, If you are not going to take the given help we provide and use it in a useful manner instead of re-posting the same images over and over that can be simply fixed by removing the given lines of malcode is just plain dumb. Your acting is like a little kid, so to speak.