Author Topic: Help, "Malicious URL blocked" pops up all the time  (Read 10640 times)

0 Members and 1 Guest are viewing this topic.

XhmX

  • Guest
Help, "Malicious URL blocked" pops up all the time
« on: June 24, 2012, 05:19:59 PM »
Hello, I have no idea what happened, but this message has been popping up since yesterday evening whenever I open a new IE9/Firefox window or Tab:

Object: hXXp://76.76.100.10/
Infection: URL:Mal
Process: C:\Windows\explorer.exe

I don't understand why. I didn't download anything suspicious, nor did I visit any potentially dangerous sites...
I'd appreciate any help.
I've attached a log created by Malwarebyte's Anti-Malware.


« Last Edit: June 24, 2012, 05:30:53 PM by XhmX »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89129
  • No support PMs thanks
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #1 on: June 24, 2012, 05:26:57 PM »
Please 'modify' your post change the URL from http to hXXp, to break the link and avoid accidental exposure to suspect sites, thanks.

This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #2 on: June 24, 2012, 05:27:16 PM »
Quote
I don't understand why. I didn't download anything suspicious, nor did I visit any potentially dangerous sites...
all websites are potentially dangerous......     
http://www.scmagazine.com/every-36-seconds-a-website-is-infected/article/140414/




XhmX

  • Guest
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #3 on: June 24, 2012, 05:33:28 PM »
Please 'modify' your post change the URL from http to hXXp, to break the link and avoid accidental exposure to suspect sites, thanks.

My apologies, you're totally right. Edited the message.

Quote
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.

I will do just that, thank you.

@Pondus
Food for thought... Well, what I meant is it was a normal day, I did nothing out of the ordinary, hence my surprise.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #4 on: June 24, 2012, 06:00:50 PM »
Quote
@Pondus
Food for thought... Well, what I meant is it was a normal day, I did nothing out of the ordinary, hence my surprise.
i know.....the bad guys fish in the pond that have most fish in it...since the chanse of somone taking the bait is bigger

example.... going to facebook is ordinary   ;)
http://www.pcworld.com/article/249287/facebook_malware_scam_takes_hold.html
or this
http://blogs.norman.com/2012/for-consumption/justin-bieber-naked-the-modern-malware
« Last Edit: June 24, 2012, 06:02:21 PM by Pondus »

XhmX

  • Guest
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #5 on: June 24, 2012, 07:30:53 PM »
I've attached all the logs the recommended programs have created.
For some reason, OTL did not create an Extras.txt file, however.  :-\ Will those logs suffice or do I have to run the program again (scanning took ages)?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Help, "Malicious URL blocked" pops up all the time
« Reply #6 on: June 24, 2012, 09:32:51 PM »
Do you use the Avant browser ?

Please RIGHT-CLICK HERE and Save As (in IE it's "Save Target As", in FF it's "Save Link As") to download Silent Runners.
  • Save it to the desktop.
  • Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.
  • You will receive a prompt:
    Do you want to skip supplementary searches?
    click NO
    [/list]
    • If you receive an error just click OK and double-click it to run it again - sometimes it won't run as it's supposed to the first time but will in subsequent runs.
    • You will see a text file appear on the desktop - it's not done, let it run (it won't appear to be doing anything!)
    • Once you receive the prompt All Done!, open the text file on the desktop, copy that entire log, and paste it here.
    *NOTE* If you receive any warning message about scripts, please choose to allow the script to run.

    XhmX

    • Guest
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #7 on: June 24, 2012, 11:54:52 PM »
    Do you use the Avant browser ?

    Absolutely not, I didn't even know such a thing exists!

    Here's the log:

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #8 on: June 24, 2012, 11:59:05 PM »
    Ta I will do some checking out on that file then

    Offline Pondus

    • Probably Bot
    • ****
    • Posts: 37547
    • Not a avast user
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #9 on: June 25, 2012, 12:06:30 AM »
    avant browser  -http://www.avantbrowser.com/

    review  -http://download.cnet.com/avant-browser/

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #10 on: June 25, 2012, 04:38:36 PM »
    OK lets try this please - let me know if you made any changes

    • Select Tools and then Internet Options.
    • Click the Connections tab.
    • If you are using a LAN, click the LAN Settings button. If you are using a Dial-up or Virtual Private Network connection, select the necessary connection and click the Settings button.
    • Make sure the 'automatically detect proxy settings' is checked
    • Make sure the 'use a proxy automatic configuration script' option is not checked
    • OK out .



    XhmX

    • Guest
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #11 on: June 25, 2012, 06:22:31 PM »
    Hello essexboy,
    No, I do not use LAN, but all the settings in the IE9 are just like you have described, I haven't made any changes. Are there any settings I should check in Firefox, too?

    By the way, fingers crossed, for some inexplicable reason, I had no pop-ups today. For the last past days, they have been driving me crazy, yesterday evening I ran all the tests, provided necessary logs, today I turned on the computer... and Avast has remained silent. Weird. Did those tests reset some settings or something like that?

    Offline essexboy

    • Malware removal instructor
    • Avast Überevangelist
    • Probably Bot
    • *****
    • Posts: 40589
    • Dragons by Sasha
      • Malware fixes
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #12 on: June 25, 2012, 07:47:07 PM »
    Not sure, I will await the results of the other threads first


    XhmX

    • Guest
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #13 on: June 27, 2012, 07:01:41 PM »
    I think I know when and where I caught that nasty malware:
    http://www.adventuregamers.com/forums/viewthread/350/

    It's sad you can't be sure that sites you like to visit aren't safe anymore.  :-\ Pondus was so right.

    Offline Pondus

    • Probably Bot
    • ****
    • Posts: 37547
    • Not a avast user
    Re: Help, "Malicious URL blocked" pops up all the time
    « Reply #14 on: June 27, 2012, 07:08:36 PM »
    I think I know when and where I caught that nasty malware:
    http://www.adventuregamers.com/forums/viewthread/350/

    It's sad you can't be sure that sites you like to visit aren't safe anymore.  :-\ Pondus was so right.
    Sucuri
    http://sitecheck.sucuri.net/results/www.adventuregamers.com/

    McAfee
    http://www.siteadvisor.com/sites/adventuregamers.com