MAL:URL Popups every 15 minutes

[REDACTED]

Hi

For the past few days, I have been getting continual Avast Webshield pop ups warning of a blocked "harmful webpage or file".

This happens as soon as I connect to the internet and before I even open my browser. There are anywhere from 2 to 20 popups.

The popups are similar to these (Same domain names, and file types, slightly different file names):

URL:http://anythicago.com/4141/RelayTurbo_142668814314552.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://simplesitescan.net/4141/LighterInit_142669556111830.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://alwaysisobar.com/4141/CutterGeneration_142669028208336.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://bestdriverstar.net/4141/CutterSystem_142669222915982.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

URL:http://opticguardzip.net/4141/CutterSystem_142669222919983.dll
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe

I have tried doing scans with Malwarebytes but have had no success.

Attached is my zoek scan results.

[Eddy]

https://forum.avast.com/index.php?topic=53253.0

[REDACTED]

Here are the rest of the logs.

[essexboy]

Let me know if this stops it

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
2015-05-16 21:27 - 2015-06-07 01:50 - 00000000 ____D C:\ProgramData\18c90fd0000062dd
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

[REDACTED]

Attached is the log that was generated.

I haven't had any pop-ups since then.

[essexboy]

Did you run the fixlist twice ?

[REDACTED]

Pretty sure I didn't.

[essexboy]

Hmm weird

And the alerts have ceased