Author Topic: Avast!Web Shield has blocked a harmful webpage or file.  (Read 8204 times)

0 Members and 1 Guest are viewing this topic.

johnluu

  • Guest
Avast!Web Shield has blocked a harmful webpage or file.
« on: April 20, 2014, 02:11:35 AM »
Avast keeps popping up every few seconds blocking a website.
Will post the logs after finishing scans.

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #1 on: April 20, 2014, 03:03:24 AM »
Here are the log files

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #2 on: April 23, 2014, 08:49:26 AM »
Is anyone helping me with this problem?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #3 on: April 23, 2014, 09:05:06 AM »
I'll try to get you some attention.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Valinorum

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #4 on: April 23, 2014, 09:07:21 AM »
Did you run ComboFix? If so, attach the C\ComboFix.txt file. It looks like another BlackBeard infection.

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #5 on: April 23, 2014, 11:20:03 AM »
Valinorum, thanks for responding. While he serves you. I have a warning. Which I'm sure Valinorum will cover later. I see you have BitComet installed. This can lead ti re-infection, and U strongly recommend you uninstall it. Valinorum should have some links for you regarding the risks of P2P
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #6 on: April 23, 2014, 02:34:32 PM »
Uninstalled Bitcomet and here is the Combofix log.

Valinorum

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #7 on: April 23, 2014, 04:45:18 PM »
Hi johnluu, :)

  • Step #1 Run ComboFix Script
    Make sure that you still have Combofix on your Desktop. If not, download it from here.
    • Open Notepad.exe. Do not use any other text editor software;
    • Copy and Paste the contents inside the code-box to your Notepad --
Code: [Select]
File::
C:\Windows\system32\wjnanph.wxf
C:\Windows\system32\ffiv.rif
C:\Windows\system32\mwvih.rmx
C:\Windows\system32\fpbtgyj.shj

FCopy::
C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7600.16385_none_c5bfcda3579104e3\rpcss.dll | C:\Windows\system32\rpcss.dll
    • Click on File > Save as...
      • Inside the File Name box type CFScript.txt
      • From the Save as type drop down list, choose All Files
    • Save the file to your Desktop;
    • Make sure your security programs are disabled while performing the actions. If you have difficulties, peruse this thread;
    • Drag CFScript.txt into ComboFix.exe as shown in the screenshot below --

    • ComboFix will now run a scan on your system. After the scan finishes, it will execute the script and reboot your computer automatically. Don't reboot your computer manually, let ComboFix do it. Once your computer is rebooted, ComboFix will start preparing a log. Please let it do so unhindered. After a few minutes, it shall produce a log for you.
    • Please attach the C:\ComboFix.txt in your next reply.



  • Required Log(s):
    • ComboFix Log
Regards,
Valinorum

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #8 on: April 23, 2014, 06:26:52 PM »
Here is the combofix log

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #9 on: April 23, 2014, 06:32:04 PM »
It looks like i stopped getting the Web Shield pop up. Am I in the clear?

Valinorum

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #10 on: April 23, 2014, 07:21:15 PM »
Almost. Await my next reply.

Valinorum

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #11 on: April 23, 2014, 08:33:04 PM »
Hi johnluu, :)

  • Step #2 Scan with Malwarebytes' Anti-Malware
    • Download Malwarebytes' Anti-Malware from the suitable link below --
    • Double-click mbam-setup.exe to install the application.
    • Before clicking Finish perform the following actions --
      • Un-check the box beside Enable free trial of Malwarebytes Anti-Malware Premium.
      • Check the box beside Launch Malwarebytes Anti-Malware
    • Once the program has loaded, The MBAM dashboard will appear with an alert to update - click the green button Update Now;
    • Click on Setting--
      • Navigate to the tab Detection and Protection and check all the boxes under Detection Options
    • From the Dashboard click on Scan Now;
    • If threats are detected click on Apply actions. If the program asks to reboot your PC, let it do so;
    • On completion of the scan click on View Detailed Log after that click on Export Button, select Text File and save the log to your Desktop;
    • Attach the log in your next reply.


  • Step #3 ESET Online Scanner
    Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information.
    • Go here from Internet Explorer and click on Run ESET Online Scanner.
      • Note: If you use any browser other than Internet Explorer, you will have to download and install esetsmartinstaller_enu.exe when prompt to run the scan.
    • Accept their terms and condition and proceed.
    • Install Add-On/Active X if prompted.
    • From the Computer Scan Setting --
      • Uncheck the box beside Remove Found Threats;
      • Check the box beside Scan archives
    • Click on Advanced Setting and check the following boxes--
      • Scan for potentially unwanted applications
      • Scan for potentially unsafe applications
      • Enable Anti-Stealth Technology
    • Click on Start and wait for the virus signature database to update.
    • The online scan will begin automatically and can take several hours.
      • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
    • After the Scan finishes --
      • If no threats were found:
        • Put a checkmark in Uninstall application on close.
        • Close the program and report that nothing was found
      • If threats were found:
        • Navigate to the log file located at C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
        • Attach the log file in your next reply.
    Note: Enable your security programs afterwards.


  • Required Log(s):
    • MBAM Log;
    • ESET Scan Log
Regards,
Valinorum

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #12 on: April 24, 2014, 03:08:40 AM »
Okay here are the logs

Valinorum

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #13 on: April 24, 2014, 06:18:12 AM »
Can you attach the ESET Log file again? Did ESET find anything while scanning?

johnluu

  • Guest
Re: Avast!Web Shield has blocked a harmful webpage or file.
« Reply #14 on: April 25, 2014, 11:41:00 PM »
Sorry for the wait. I've been busy. Here's the log again. It found some infections.