Mutliple Alerts by Avast (Anythicago, etc)

[REDACTED]

Hi,  I'm having an issue with Avast and I can see that it is fairly common among the forums, but the solutions have been very user specific.  I'm working on a friends laptop that is having multiple alerts. (This time 16, it has been around 24 though.) The blocked URL's are as follows. 

-bestdrivestar.net
-alwaysisobar.com
-anythicago.com
-opticguardzip.net

Any help would be appreciated.

[REDACTED]

• Step #1 Fix with FRST
  Make sure that you still have FRST.exe on your Desktop. If you do not have it, download the suitable version from here to your Desktop.
  • Open Notepad.exe. Do not use any other text editor software;
    
  • Copy and Paste the contents inside the code-box to your Notepad --
    

Code: [Select]

Start
CreateRestorepoint:
CloseProcesses:
EmptyTemp:
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3802178543-1734266900-3131781900-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-3802178543-1734266900-3131781900-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3802178543-1734266900-3131781900-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3802178543-1734266900-3131781900-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [X]
C:\ProgramData\SetStretch.exe
C:\ProgramData\SetStretch.VBS
Task: {463A2A15-C8D9-4ABC-BE03-AA663A9A2BD4} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe <==== ATTENTION
C:\Program Files (x86)\Portable WeatherApp
Task: {B0F906C2-9F9F-493E-A538-4EF55713D184} - System32\Tasks\UpdaterEX => C:\Users\Ryan\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\Ryan\AppData\Roaming\UPDATE~1
Task: {EFF7F3FF-4DEC-4744-ABE7-B094A25C0B18} - System32\Tasks\HDNINSTSCHD => C:\Windows\PCBHDNW\hdnInstaller.exe <==== ATTENTION
C:\Windows\PCBHDNW\hdnInstaller.exe
Task: {FA60C15E-9C94-492F-A95C-642886CED215} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\Ryan\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
CMD: bitsadmin /reset /allusers
End

• Click on File > Save as...
  
  • Inside the File Name box type fixlist.txt
    
  • From the Save as type drop down list, choose All Files
• Save the file to your Desktop;
  
• Re-run FRST.exe and click Fix;
  
  • Note: If FRST advises there is a new updated version to be downloaded, do so/allow this.
• After the completion, a log will be produced;
• Attach the log in your next reply.

• Required Log(s):
  
  • FRST Fix Log

Regards,
Valinorum

[REDACTED]

Thanks for responding.  Attached is the log file.

[REDACTED]

Whoops thats my other account.  Sorry, the log file attached on that account is the right one. I'll attach it again.

[REDACTED]

How is the PC performing?