Author Topic: "Malicious URL Blocked" message pops up constantly  (Read 9452 times)

0 Members and 1 Guest are viewing this topic.

darkwriter626

  • Guest
"Malicious URL Blocked" message pops up constantly
« on: January 15, 2013, 11:41:20 PM »
I keep getting multiple "Malicious URL Blocked" messages on my computer. I did a full system scan with Avast and nothing was detected.
With Malwarebytes Anti-Malware, there have been two trojans which I can't seem to get rid of after several scans. Attached is the MBAM log.

I would greatly appreciate any assistance with this matter.
Thank you.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37605
  • Not a avast user
Re: "Malicious URL Blocked" message pops up constantly
« Reply #1 on: January 15, 2013, 11:54:33 PM »
your malwarebytes was not updated before you did the scan....always start a scan with a update  ;)

follow this guide and attach the requested logs...not copy and paste.   http://forum.avast.com/index.php?topic=53253.0

Adwcleaner
Malwarebytes
OTL
aswMBR


when done the removal specialists will be notified. it may take hours before one arrive so be patiens


jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #2 on: January 16, 2013, 01:18:58 AM »
Monitoring...

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #3 on: January 16, 2013, 04:11:00 AM »
Attached are the logs for Adwcleaner, Malwarebytes, and OTL.

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #4 on: January 16, 2013, 04:14:32 AM »
aswMBR log attached.

jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #5 on: January 16, 2013, 04:58:34 AM »
Please download TDSSKiller
  • Double click TDSSKiller.exe
  • Press Start Scan
  • If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
  • Do Not Attempt To Fix Anything Now.  We just need to look over the report and be sure we are removing the correct items. 
  • Attach the log in your next reply
    • A copy of the log will be saved automatically to the root of the drive (typically C:\)
----------

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #6 on: January 16, 2013, 05:14:54 AM »
TDSSKiller log attached.

jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #7 on: January 16, 2013, 01:43:13 PM »
Hi,

Good job!

Run TDSSKiller again.  When you see \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) be sure to select Cure this time and attach the new log.
-------------

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Right-click and Run as Administrator dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
----------

ComboFix

Download Combofix from the link below, and save it to your desktop. 
Link

**Note:  It is important that it is saved directly to your desktop**
 If you get a message saying "Illegal operation attempted on a registry key that has been marked for deletion", please restart your computer.

--------------------------------------------------------------------

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

--------------------------------------------------------------------

Right-Click and Run as Administrator on ComboFix.exe & follow the prompts.
    When finished, it will produce a report for you. 
  • Please post the C:\ComboFix.txt for further review.
----------

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #8 on: January 17, 2013, 12:07:43 AM »
TDSSKiller and DDS logs attached. Still waiting for Combofix to finish...

jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #9 on: January 17, 2013, 02:00:07 AM »
Quote
Still waiting for Combofix to finish...
Ok  :)

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #10 on: January 17, 2013, 04:14:18 AM »
So, Combofix has been running for a little over 4 hours now and is stuck at "Completed Stage 49". Should I keep it going or restart it?
I'm going to keep it running for now until it finishes or until I hear otherwise from you.

jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #11 on: January 17, 2013, 02:30:08 PM »
Go ahead and restart it.  If you still have problems let me know.  :)

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #12 on: January 17, 2013, 08:34:12 PM »
I'm still having the same problem after Stage 49... What should I do?

jeffce

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #13 on: January 18, 2013, 04:20:29 AM »
Boot to Safe Mode and try again. 

If you still have problems, run a new scan with OTL and post that.  :)

darkwriter626

  • Guest
Re: "Malicious URL Blocked" message pops up constantly
« Reply #14 on: January 18, 2013, 09:49:01 PM »
Still had issues with Combofix in Safe Mode.
OTL log attached.