Hello,
I’ve recently been receiving a number of alerts from avast of a threat from multiple processes with the object always ending in /wpad.dat.
I’ve read some of the threads concerning this and have run Malware Bytes, FRST and aswmbr scans, the logs of which are attached.
Please help,
Thank you.
I will need a screenshot or the full name of the wpad file as that will need to be removed by a registry search
I thank you for your timely response. I backed up necessary files and ran a repair installation last night and it appears to have worked. I have re-installed avast and am no longer receiving alerts. I’m embarrassed I didn’t think to do that before asking for help. I apologize for wasting your time. I don’t remember the exact name but it was an ip address ending in /wpad.dat and something along the lines of webbrowsersecurity.info/wpad.dat, if that helps anyone else.
Although you are not receiving alerts it doesn’t mean by default that everything is removed.
I suggest to provide new log files.
No need as all the relevant registry keys are replaced when you re-install
It was a repair.
It can be there are files/folders etc that need to be removed.
As of now this infection is restricted to the registry
HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad