Over the last month or so have developed a problem in which avast picks up on some win32Malware-gen whenever I open either Firefox/Internet Explorer. I’ve attached a screenshot of an example of what is being blocked in avast.
Webshield also picks up a win32Malware-gen with a URL along the lines of http://ytimg.biz/MCheck/VersionRequest.ashx?codename …
I also have Chrome which I use but have not encountered this problem
Logs attached
OTL logs attached here as well
Please download zoek.zip or zoek.rar by smeenk (
http://www.mcshield.net/personal/magna86/Images/Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive…
[*]Close any open browsers
[*] Temporarily disable your AntiVirus program. (If necessary)
If you are unsure how to do this please read this or this Instruction.
[*]Double click on zoek.exe to run the tool .
Please wait while the tool does not start…
[*]Copy the text present inside the code box below and paste it into the large window in the zoek tool:
createsrpoint;
StandardSearch;
installer-list;
installedprogs;
uninstall-list;
[*] Click on
http://www.mcshield.net/personal/magna86/Images/Run%20Script%20by%20zoek.png
button.
Please wait until a logreport will open (this can be after reboot)
[*]Save notepad to your Desktop and attach here zoek-results.log
Note: It will also create a log in the C:\ directory named “zoek-results.log”
log attached
@mc_crater
Run zoek as you did before but use this script:
emptyclsid;
nmmhkkegccagdldgiimedpiccmgmieda;chr
ipconfig /flushdns >> %temp%\log.txt;b
autoclean;
Wait for zoek to finish his work and post here fresh created zoek log report.
Zoek shall attempt to clean all that cache which may trigger avast. If problem stays, you may report files related to Windows Live Messanger and to Firefox (“D3C22d01” name) as FP. As they are not malware related.
ok here is that log
Ok, monitor computer behavior and tell me is how is computer running now? Is it avast pleased?