ww25.agedporntube.com

[veselin32]

Please help
Every few minutes my Avast premium security is annoying with messagge:

Threat secured
We've safely aborted connection on ww25.agedporntube.com because it was infected with URL:Blacklist.

Scan says no viruses at all. I found this app in common files, CryptwareTech, but no way to remove it.

[DavidR]

As I mentioned in your other topic, you need to run the tools and attach the logs in this new topic before anyone can begin to help you they need this information.

This is usually an indication of an underlying infection (hidden or undetected) and avast is preventing it from calling home, etc.

-  This needs further analysis by a malware removal specialist:
Go to this topic https://forum.avast.com/index.php?topic=194892.0 for information on Logs to assist in cleaning malware. <snip>

Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.

[veselin32]

OK, sorry, I am newbie here. This is a log after Malwarebytes scaning.

[DavidR]

No problem, continue with the other scans and attach the FRST logs (FRST.txt and Additions.txt).

[polonus]

Problem connection to site is insecure, no connection over https.
Then the openresty server has a disputed URI parameters access restriction bypass exploit.

Website is also ABP whitelisted for a.o.

/wXw.google dot com/adsense/domains/caf.js";DD.onerror=function(){if(azx.search!=='?z'){azx.href='/?z';}};DD.onload=DD.onreadystatechange=function(){if(!aAC&&LU){if(!window['googleNDT_']){}
LU(google dot ads dot domains dot Caf);}  etc.

polonus

[veselin32]

Two more logs.

[DavidR]

Two more logs.

Only one logs attached, no Additions.txt file attached.

[veselin32]

Now,sorry. Addition.txt

[DavidR]

There may be some delay due to differing time zones and availability of the volunteer malware removal specialists.

[veselin32]

New log after lot of healing and cleaning. After MalwareBytes asked to restart computer, it was not possible, windows was stucked, I had to make complete power off. After that, was booting normaly.

[DavidR]

Not sure what you meant by healing and cleaning as the FRST application is an analysis tool, only when a malware removal specialist analyses it and creates a fix only then does it do anything.

[veselin32]

I ran avast again, cc cleaner and malwarebytes, that I mean cleaning.