wpad infected

i’m getting popups saying:

Infecção Bloqueada
URL: http://wpad.NET/wpad.dat
Infecção: URL:Mal

Please follow this guide and attach logs:

http://forum.avast.com/index.php?topic=53253.0

attached the log

Also attach MBAM and OTL please… :wink:

sorry, attached!

Hi what version of Skype do you have ?

hi it is skype version 6.9.0.106 the latest one

Could you temporarily disable Skype from starting please and see if that stops the alerts

okay i will try, just to confirm disable skype from boot?

still getting the alerts

At the moment I am trying to determine the cause for this

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
O4 - HKU\S-1-5-21-1575356147-480963018-621542469-1000..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-1575356147-480963018-621542469-1000..\Run: [PlayNC Launcher] File not found

:Files
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\acaolmpphmfnffmelignomoddonoiphm
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

looks that it stoped, didn’t even used your fix… maybe fp?

Not sure as I run Skype and have had no alerts at all ?

How is the computer now