Author Topic: Help with URL:Mal svchost.exe  (Read 1851 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Help with URL:Mal svchost.exe
« on: July 17, 2015, 03:47:26 AM »
My sons computer was infected and I managed to clean out most of it using Avast, Malwarebytes, and AdwCleaner but Avast still shows alerts every so often about blocking URL:Mal. I wanted to post my FRST logs for someone to hopefully help me to put a stop to it. Thanks in advanced!

*EDIT* posted new logs forgot to run as admin
« Last Edit: July 17, 2015, 04:04:24 AM by michelles2boys »

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Help with URL:Mal svchost.exe
« Reply #1 on: July 17, 2015, 07:02:16 AM »
Hello,


Fix with Junkware Removal Tool

Please download JRT by Thisisu and save the file to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Follow the prompts and let this process run uninterrupted.
  • This scan can take a while, depending on your System specs.
  • Upon completion, a log (JRT.txt) will open on your desktop.
Please include the contents of that file in your reply.

Do not forget to re-enable your previously switched off protection software!
Please also manually reboot your machine after this procedure.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Help with URL:Mal svchost.exe
« Reply #2 on: July 17, 2015, 07:18:35 AM »
Here is the output. Thanks for the help.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Help with URL:Mal svchost.exe
« Reply #3 on: July 17, 2015, 08:06:58 AM »
How is the situation now?
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Help with URL:Mal svchost.exe
« Reply #4 on: July 17, 2015, 08:18:41 AM »
After following your instruction and rebooting the virus alerts were still present but I noticed they changed from svchost.exe to chrome.exe so I uninstalled chrome and delete all files and folders related to chrome.  Since removing chrome I haven't seen any virus notifications yet.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Help with URL:Mal svchost.exe
« Reply #5 on: July 17, 2015, 08:25:00 AM »
Very good. Then we will consider this as solved :)



Post-cleanup procedures:


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE