Avast WEBforum

Other => Viruses and worms => Topic started by: REDACTED on May 28, 2015, 04:55:13 PM

Title: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 28, 2015, 04:55:13 PM
Avast keeps announcing a threat has been detect. It seems like it happens every couple minutes. It gives me these as the threats:

37.48.117.50/4141/AppendInit_142667197663784.dll

37.48.117.50/4141/SeekerFoobar_142667093444337.dll

37.48.117.50/4141/SystemInclude_142652930465496.dll

I was getting the following also, but it has stopped saying this threat replaced with the SeekerFoobar threat.
37.48.117.50/4141/CutterSystem_142669222898480.dll

I have run the avast boot scan and malwarebytes anti-malware scan, and I am still getting the messages.

Title: Re: Avast keeps announcing Threat has been detected
Post by: TwinHeadedEagle on May 28, 2015, 04:57:01 PM
Hello,


(https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif) Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool (http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/) and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 28, 2015, 05:07:23 PM
Thank you for replying. I have attached the .txt files as you said
Title: Re: Avast keeps announcing Threat has been detected
Post by: Eddy on May 28, 2015, 05:27:24 PM
Please make the malicious links not clickable.
Title: Re: Avast keeps announcing Threat has been detected
Post by: TwinHeadedEagle on May 28, 2015, 06:13:02 PM
(https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png) Scan with ZOEK

Please download ZOEK (http://hijackthis.nl/smeenk/) by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here (http://www.bleepingcomputer.com/forums/topic114351.html).

Code: [Select]
createsrpoint;
autoclean;
BITSADMIN /RESET /ALLUSERS;b
emptyalltemp;
ipconfig /flushdns;bPost its content into your next reply.
Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 28, 2015, 06:22:39 PM
I ran a scan with aswMBR and am posting the results. I will run Zoek now and post those results.
Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 28, 2015, 07:14:11 PM
I have scanned with Zoek and have attached the results to this post.
Title: Re: Avast keeps announcing Threat has been detected
Post by: TwinHeadedEagle on May 28, 2015, 08:48:06 PM
Let's run one more fix:


(https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png) Fix with ZOEK

(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) This fix was created for this user for use on that particular machine. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)
(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) Running it on another one may cause damage and render the system unstable. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)

Temporary disable your AntiVirus and AntiSpyware protection - instructions here (http://www.bleepingcomputer.com/forums/topic114351.html).

Code: [Select]
createsrpoint;
chrdefaults;
Post its content into your next reply.
Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 28, 2015, 09:52:04 PM
This is the results of the fix using Zoek as requested:

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by The Eclectic One on Thu 05/28/2015 at 15:41:47.70.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\The Eclectic One\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-05-28-170940.log   25724 bytes

==== System Restore Info ======================

5/28/2015 3:44:01 PM Zoek.exe System Restore Point Created Successfully.

==== Reset Google Chrome ======================

C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\The Eclectic One\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=54 folders=11 6360203 bytes)

==== EOF on Thu 05/28/2015 at 15:44:47.29 ======================

Avast has not popped up with the message in some time so hopefully this all worked. Thank you very much.
Title: Re: Avast keeps announcing Threat has been detected
Post by: TwinHeadedEagle on May 28, 2015, 09:54:59 PM
Very good. Anything else I can help with?
Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 29, 2015, 03:42:07 AM
Nope. Thank you so very much! You've been awesome!
Title: Re: Avast keeps announcing Threat has been detected
Post by: REDACTED on May 29, 2015, 03:42:06 PM
Can I play too?  I have the exact same issue.    :'(   Thanks
Title: Re: Avast keeps announcing Threat has been detected
Post by: TwinHeadedEagle on May 29, 2015, 08:52:17 PM
Open you own topic.

Follow this guide: https://forum.avast.com/index.php?topic=53253.0