Since I let one of my nephews use my computer I get constant Avast! Web Shield alerts
Object: htxp://getusaaall.info?/e=pchocht=2dcu…
Infection:Mal
Process: C:Windows\System32\svchostexe
Malwarebytes finds and quarantines a few PUPs but can’t find the problem. Logs attached, all assistance appreciated before nephewcide is committed.
Let me know if this stops the alerts please
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Download the attached Fixlist.txt to the same location as FRST
Run FRST and press Fix
On completion a log will be generated please post that
I’m afraid the message reappeared the moment I finished the restart.
log attached - hope it’s the right one.
OK next step bigger hammer 
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png
http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png
[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.
Notes:
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Phew! That seems to have worked.
I attach the log for your information.
Thanks very very much, you have saved my bacon and my nephew’s hide
Regards and thanks
Catherine
Sometimes it just needs a good kicking
If all is well tomorrow let me know and I will tidy up
Good kicking very effective - all clean, all day
Many thanks and this one is fixed.
Catherine - with crossed fingers
The only problem is that we are unable to determine the launch point, with earlier versions of windows we can use combofix, but for windows 8.1 we are stuck. And looking at the combofix deletions I still cannot see what it is doing. This is a tad frustrating
Anyway, that is my problem
In that case methinks I will send you on your merry way
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe 
Spoke too soon - now I’m being hijacked by something called wxw.lpmxp2022.com which wants me to download something.
First - no
Second - what do I do now? Should I open a new thread?
Catherine
Nope continue here, did you download any programmes yesterday ?
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.
https://dl.dropboxusercontent.com/u/73555776/frst.JPG
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.
No, I didn’t download anything although I did watch a few youtube vids
Scans attached - nephew back in doghouse
Catherine
OK lets see if this clears it
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
FF Homepage: hxxp://thehungersite.greatergood.com/clickToGive/ths/home Task: {B73D600F-2BAA-475E-BCA1-AE623892EE22} - \{CB61F18F-319B-4A96-B09F-0BF31562DBC4} No Task File <==== ATTENTION CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
First log attached. Something called Avast Deep Screen popped up and said there was no problem found. However, just before I came here to check, I got redirected to an un-named “consumer survey”
Catherine
And here’s two more produced by adwcleaner
OK using FRST …
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CMD:ipconfig /release CMD:netsh int ip reset CMD:ipconfig /renew REBOOT: CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
Posting the log - so far all quiet but I haven’t been on-line for more than 5 mins yet
Catherine
Could you monitor it for a while please as this is becoming quite a pain to kill
Don’t worry, I will, and may I say, how much I appreciate your assistance
Almost as much as my nephew who might not now be written out of my will
Catherine
Well, it’s a couple of days later and it all seems quiet on the Western Front
Many thanks,
Catherine
In that case methinks I will send you on your merry way
Subject to no further problems
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Click Start then Run.
On Windows7 or Vista you may use Start Search field if Run is not available.
In the box copy/paste the following command:
ComboFix /Uninstall
Note that there is a space between " ComboFix " and " /Uninstall " .
Then click OK (or press Enter ).
Wait for the uninstall process to complete.
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe