« previous next »
Pages: [1]   Go Down

Author Topic: Multiple web shield threat detected  (Read 4205 times)

0 Members and 1 Guest are viewing this topic.

wavebreak

  • Guest
Multiple web shield threat detected
« on: January 10, 2014, 11:13:21 PM »
Think this might be the same thing others are experiencing in other threads but just encase please see logs.

This is what I keep getting multiple times seemly at random when I change or refresh page on chrome (havent tried on other browsers).

Avast! Websheild blocked a harmful webpage or file...
object: hxtp://sql3.true-secure.com/?id=982839&bro=CH 
Infection: URL:MAL
Process: C:\Program Files\Google\Chrome\Application\chrome.exe
« Last Edit: January 14, 2014, 10:11:23 AM by Milos »
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Multiple web shield threat detected
« Reply #1 on: January 10, 2014, 11:18:12 PM »
Be glad avast has blocked it.
http://urlquery.net/report.php?id=8779590
http://zulu.zscaler.com/submission/show/f5f78f08bc2a73e90f5505372ca55833-1389392065

Now have a little patience, someone will look at the log files and help you with them shortly.
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Multiple web shield threat detected
« Reply #2 on: January 10, 2014, 11:18:41 PM »
Are you running Comodo INTERNET SECURITY and Avast together? If so please uninstall one those.
Avast and COMODO FIREWALL is OK.

You can safely uninstall Comodo GeekBuddy its just hugging up your RAM and CPU cycles.
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Multiple web shield threat detected
« Reply #3 on: January 10, 2014, 11:21:22 PM »
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Multiple web shield threat detected
« Reply #4 on: January 10, 2014, 11:26:54 PM »
Reported to mod for Link removal. Has someone PM'd the Removers?
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Multiple web shield threat detected
« Reply #5 on: January 10, 2014, 11:39:28 PM »
Let me know if this stops it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.

:Files
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34054
  • malware fighter
Re: Multiple web shield threat detected
« Reply #6 on: January 11, 2014, 02:14:17 AM »
Well at this moment earlier malware could  be down: Down:   NA   RIPE   DE   abuse at hetzner.de   176.9.255.136    to 176.9.255.136   true-secure dot com   htxp://sql3.true-secure.com/index.php?id=440317

pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

wavebreak

  • Guest
Re: Multiple web shield threat detected
« Reply #7 on: January 11, 2014, 04:47:14 AM »
Hi thank you soooo much for your help :). Just doing some of the scans now but in the meantime wanted to ask is it true i am using 2 avs I thought my comodo was purely a firewall that can do virus scan on demand (not that I do this often I use malewarebytes and avast) so it would not conflict with avast...and with geek buddy comodo keeps reinstalling it but I thought it wouldn't slow me down asking as I don't open the file?
Logged

wavebreak

  • Guest
Re: Multiple web shield threat detected
« Reply #8 on: January 11, 2014, 05:03:47 AM »
Ok well I have stopped getting the warnings from web shield :). Please see attachments and thanks once again for your help!

Any idea what the virus would have done like keylogger or comp destroyer?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Multiple web shield threat detected
« Reply #9 on: January 11, 2014, 01:41:18 PM »
CHR - Extension: VIS =  this was the problem and it appears to be an adware type programme :)

How is the computer behaving ?
Logged

wavebreak

  • Guest
Re: Multiple web shield threat detected
« Reply #10 on: January 11, 2014, 02:26:19 PM »
Normally as far as I can tell :) thank you so much, have a great day dude :)
Logged
Pages: [1]   Go Up
« previous next »