Author Topic: Threat has been detected URL:Mal  (Read 3608 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Threat has been detected URL:Mal
« on: December 12, 2014, 10:29:46 PM »
All of a sudden I keep getting pop-up notices from Avast stating that a threat has been detected.  It is always the exact same message and information.  I have attached a copy of what the pop-up says. 

I have run malware bytes and it did not find anything at all and I have not been downloading anything or clicking on strange links.  I also have not added any plugins to my browser than the one I have always used and that is click and clean and this did not start until a couple hours ago.

I don't understand what it is or what I am supposed to do.  It even popped up while logging in to this site

Any assistance would be so very much appreciated.

I am running windows 8.1 64bit home version and I use google chrome for my browser.


Thank You

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.

REDACTED

  • Guest
Re: Threat has been detected URL:Mal
« Reply #2 on: December 12, 2014, 11:28:32 PM »
I wasn't sure if this was actual malware or not since MalwarBytes showed the pc to be clean and the avast smart scan didn't come up with anything either.

I will go and check out that post.

Thanks :)

REDACTED

  • Guest
Re: Threat has been detected URL:Mal
« Reply #3 on: December 13, 2014, 12:18:26 AM »
I have followed the steps as suggested at https://forum.avast.com/index.php?topic=53253.0

Here are the results of those tests.

REDACTED

  • Guest
Re: Threat has been detected URL:Mal
« Reply #4 on: December 13, 2014, 12:26:19 AM »
just went to look at the malware bytes log since adding the check mark to scan for rootkits did find something (but it was in a program that I had not even had a chance to install yet.  Anyway, when I opened that log it was empty so I went back in and saved it again to my desktop and have attached it here (as well as the one that I ran before coming here about that popup notice.

(oddly enough that program that I have not installed yet, but was on my desktop has been there for about 2 weeks with no issues - just thought I would let you know - either way, I did allow malware bytes to take care of it.


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Threat has been detected URL:Mal
« Reply #5 on: December 13, 2014, 12:30:44 PM »
Could I have the main FRST.txt please

REDACTED

  • Guest
Re: Threat has been detected URL:Mal
« Reply #6 on: December 14, 2014, 10:55:58 PM »
I am sorry,  I could have sworn that I attached that one as well.
Have attached it now.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Threat has been detected URL:Mal
« Reply #7 on: December 14, 2014, 11:07:42 PM »
Let me know if this stops the alerts

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
HKLM-x32\...\Run: [] => [X]
2014-12-02 14:03 - 2014-12-02 14:03 - 00000000 ____D () C:\Users\lmrei_000\AppData\Roaming\83FFB300-2FD9-4904-80BD-3E0FEB43F962
C:\Users\lmrei_000\SystemRestore.vbs
CHR StartupUrls: Profile 2 -> "hxxp://www.google.com/", "hxxp://www.computerwisetv.com/", "hxxp://www.woot.com/", "hxxp://www.1saleaday.com/"
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.