Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on February 03, 2017, 02:35:01 PM

Title: skegnessasc.org
Post by: REDACTED on February 03, 2017, 02:35:01 PM
Keep getting a threat alert: "threat blocked, Object: skegnessasc.org/accounts/restorefunction.css URL:Mal, Proces: C:\Windows\System32\svchost.exe".
When I scan, avast finds nothing.
Tried to handle this on my own, but it didn't work out.
Please help!
Title: Re: skegnessasc.org
Post by: Eddy on February 03, 2017, 02:40:10 PM
The log files you where told to provide are missing.
Attach them to your next post please.
Title: Re: skegnessasc.org
Post by: REDACTED on February 03, 2017, 03:05:28 PM
If only I knew which files do you mean... Any clue?
Title: Re: skegnessasc.org
Post by: Eddy on February 03, 2017, 03:09:55 PM
https://forum.avast.com/index.php?topic=194892.0
Title: Re: skegnessasc.org
Post by: REDACTED on February 03, 2017, 04:10:14 PM
Hope this is it.
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 02:58:24 PM
And?
Title: Re: skegnessasc.org
Post by: bob3160 on February 06, 2017, 06:56:13 PM
Quote from: duszol on February 06, 2017, 02:58:24 PM
And?
Patience :). A request for assistance has been passed along.
Title: Re: skegnessasc.org
Post by: dbrisendine on February 06, 2017, 07:10:18 PM
Why is AutoKMS.exe on your system?  Please explain if you know.
Title: Re: skegnessasc.org
Post by: dbrisendine on February 06, 2017, 07:15:36 PM


FIRST >>>>

Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):

Amazon 1Button App

To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window. 

Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software.


SECOND >>>>

(https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif) Fix with Farbar Recovery Scan Tool
(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) This fix was created for this user for use on that particular machine. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)
(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) Running it on another one may cause damage and render the system unstable. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

Please attach it to your reply.
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 08:21:51 PM
Quote from: dbrisendine on February 06, 2017, 07:10:18 PM
Why is AutoKMS.exe on your system?  Please explain if you know.

I really don't know. Is it bad? Should I get rid of it? And what is that?
Title: Re: skegnessasc.org
Post by: Eddy on February 06, 2017, 08:26:36 PM
Who installed the OS ?
Do you have a legal license for Windows ?
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 08:28:37 PM
It has already been installed on my PC. I bought it with Windows 10, then it upgraded (somehow automatically I guess) to Windows 10.
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 08:33:12 PM
Now, with this Amazon thing. I can't uninstall it. There is no such option. I can either change it or fix it. But both lead to nothing. Take a look at the print screens attached. Eventually both options end up with "critical failure".
I don't even know where does it come from. I heve never used Amazon...
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 08:34:49 PM
In previous post I meant that I bought it with Windows 8.
Title: Re: skegnessasc.org
Post by: REDACTED on February 06, 2017, 08:41:53 PM
Amazon 1Button App had actually been installed  before (30.07.2015) I bought this PC (Oct 2015).
This skegnessasc.org thing is bothering me for maybe a week.
Title: Re: skegnessasc.org
Post by: REDACTED on February 07, 2017, 11:23:54 AM
Threat alert that I have been getting disappeared... It is good but it is strange, since I haven't done anything. I tried to unistall Amazon 1Button App but I couldn't do it and it is still there, without any change... But the skegnessasc.org alert is gone, or at least it doesn't pop out right now.
I'm confused.
Anyway, thanks for your help. I don't know how and what actually worked, but it worked and that's what matters.
Title: Re: skegnessasc.org
Post by: dbrisendine on February 07, 2017, 04:30:05 PM
Did you run the Fixlist script in FRST?  (This was the second step in my previous posting)  If you did, please provide the Fixlog.txt file that FRST produces then.  Thank you.