Author Topic: Malicious URL Pop-up keeps appearing approximately every 30 mins.  (Read 2864 times)

0 Members and 1 Guest are viewing this topic.

searz

  • Guest
Hi there,
I keep getting a pop-up on avast while browsing Chrome that says something along the lines of "malicious URL detected."
I've attached the logs to the post, the Malware Bytes scan came out with no threat, any help is greatly appreciated!
Note: I'm not very savvy with computers so simple instructions would be great, thanks!
Update: The messages gave stopped popping up, however I still want to make sure I'm clean, thanks.
« Last Edit: January 23, 2013, 03:21:14 AM by searz »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Malicious URL Pop-up keeps appearing approximately every 30 mins.
« Reply #1 on: January 23, 2013, 01:53:25 AM »
malware removers are notified, check back tomorrow.  ;)

searz

  • Guest
Re: Malicious URL Pop-up keeps appearing approximately every 30 mins.
« Reply #2 on: January 23, 2013, 02:42:47 AM »
Great! Thank you very much.

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL Pop-up keeps appearing approximately every 30 mins.
« Reply #3 on: January 23, 2013, 06:47:28 AM »
Hi,

> Please go to systemroot ( C:\ ) partitions and attach AdwCleaner[S1].txt logreport.

> Also, on desktop you shuld have Extras.Txt logreport from OTL. Please attach it here too.

----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----


  Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----   ----


Re-run OTL.exe.

  • Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.

Code: [Select]

:Otl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.easylifeapp.com/
IE - HKLM\..\SearchScopes\%EasyLifeSearch_IESearchEngineGuid%: "URL" = http://search.easylifeapp.com/?q={searchTerms}
IE - HKU\S-1-5-21-2519709015-738426140-1624564586-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.easylifeapp.com/
IE - HKU\S-1-5-21-2519709015-738426140-1624564586-1000\..\SearchScopes\%EasyLifeSearch_IESearchEngineGuid%: "URL" = http://search.easylifeapp.com/?q={searchTerms}
O33 - MountPoints2\{6ace6e47-3685-11e2-90c0-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6ace6e47-3685-11e2-90c0-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Install.exe -- [2011/03/23 10:44:19 | 002,098,520 | R--- | M] (Logitech(c))

:files
dir C:\Users\Shane\AppData\Local\Deployment /c
dir C:\Program Files (x86)\EasyLife /c

:commands
[CREATERESTOREPOINT]
[emptytemp]

  • Then click the Run Fix button at the top.
  • Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.
ps: If notepad don't pop-up, then try to find fixreport in C:\_OTL folder. I need to see that report.

***************

How's your computer running now? Any new avast warnings?
« Last Edit: January 23, 2013, 06:50:40 AM by magna86 »

searz

  • Guest
Re: Malicious URL Pop-up keeps appearing approximately every 30 mins.
« Reply #4 on: January 23, 2013, 10:12:25 PM »
Hi there, I really appreciate you taking the time to help me out!
Unfortunately I could not find the OTL extras notepad on my desktop, where would the file be located?
I've attached the new OTL report, and the ADW (S1) along with the Junkware removal one. Fortunately I haven't gotten a warning since yesterday so hopefully that's a good sign!

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL Pop-up keeps appearing approximately every 30 mins.
« Reply #5 on: January 25, 2013, 06:58:34 PM »
Quote
I could not find the OTL extras notepad on my desktop
It does not matter...  :)

Quote
Fortunately I haven't gotten a warning since yesterday so hopefully that's a good sign!
Aha ...  :)

We will remove used tools. If later you get a certain malware problems, down&run fresh OTL.exe and aswMBR.exe tools and attach their reports here.



> Re-run OTL and click on CleanUp! button.
ps: follow this step, it is important to do it.
You will be asked to reboot the machine to finish the cleanup process, choose Yes.
After the reboot all the tools we used should be gone.
Note: Some more recently created tools may not yet be removed by OTL. Feel free to manually delete any tools it leaves behind.