Avast WEBforum

Other => Viruses and worms => Topic started by: Kamov on November 28, 2010, 03:19:46 AM

Title: Malicious URL blocked
Post by: Kamov on November 28, 2010, 03:19:46 AM

This message keeps popping up over and over again even though i'm not accessing this site

Object: mnogofiilok.ru/public_htlm/baskov.bin
Infection: URL:Mal
Action: Blocked
Process: C:\Windows\system32\taskeng.exe

At first I just thought it was firefox so I just cleared the cache, history and basically everything I could. I restarted the computer and it was one of the first things to pop up. I haven't done a scan yet because I don't have enough time.

update: There's already a thread about it that I didn't notice. Sorry.

Title: Re: Malicious URL blocked
Post by: DavidR on November 28, 2010, 04:14:52 AM

Check your windows Task Scheduler as taskeng is what runs this, there are likely to be some tasks created that are trying to access these malicious sites.

It may be worth running some other tools:
If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).

• 1.  MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe (http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe), right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.
• 2. SUPERantispyware (http://www.superantispyware.com) (SAS). On-Demand only in free version.

Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie (http://en.wikipedia.org/wiki/HTTP_cookie).