anythicago popups threat detected

[REDACTED]

Lately I have been getting "threat detected" popups from avast (usually two at once) from various sources like anythicago and others.  Usually the process is svchost.exe or chrome.exe.  What should I run to fix this?

Thanks

[TwinHeadedEagle]

Monitoring...

[Eddy]

https://forum.avast.com/index.php?topic=53253.0

[REDACTED]

Thanks,  I am running MBAM and then FRST and will post the logs when they are done.

[REDACTED]

Here are the results of MBAM and FRST.

[TwinHeadedEagle]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on icon and select Run as Administrator to start the tool.
  
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:

Code: [Select]

createsrpoint;
autoclean;
chrdefaults;
bitsadmin /reset /allusers;b
emptyalltemp;
ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
  
• Push Run Script and wait patiently. The scan may take a couple of minutes.
  
• When the scan completes, a zoek-results logfile should open in notepad.
  
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

[REDACTED]

Here are the results of zoek

[TwinHeadedEagle]

Good. How is the situation now?

[REDACTED]

Nothing has popped up yet, but there was a pop up this morning before I ran zoek.  Something like easydriverstar was the source.  I'll post again if another comes up.

[TwinHeadedEagle]

Okay, let me know, so we can continue or close this case.