Avast blocking sites with malware

[chumpchange]

Greetings,

This is my original post:
Recently (Thursday night) I was on ebuddy.com on my desktop, Avast thought it had malware, but I scanned with virustotal.com and nothing was found. The site is clean. I did a boot scan and it found nothing. It didn't go off except for when the browser stayed on ebuddy.com. I recently was on another reputable site and it found specificclick and blocked it, but I scanned the site with virustotal.com and nothing was found. It didn't go off once I went on that site again. I'm doing a boot scan on my desktop, and I scanned it with Superantispyware before. I also reinstalled Firefox. I went on, using my laptop, to ebuddy just now, and Avast responded the same way: claiming that the site had malware. I'm not sure if this is a false positive or what.

I completed the scan with AdwCleaner and it found nothing. Here is my Malware log

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.02.10.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Michelle :: MICHELLE-B6D1E7 [administrator]

2/10/2013 4:50:06 PM
mbam-log-2013-02-10 (16-50-06).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 226197
Time elapsed: 7 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

How should I proceed?

[jeffce]

Hi and welcome!!

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

• Disable any script blocking protection
• Right-click and Run as Administrator dds to run the tool.
  
• When done, two DDS.txt's will open.
  
• Save both reports to your desktop.
  

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
----------

Please download aswMBR to your desktop.

• Double click the aswMBR icon to run it.
• Click the Scan button to start scan.
  
• If you are asked to update the Avast Virus database please allow it to do so.
• When it finishes, press the save log button, save the logfile to your desktop and attach its contents in your next reply.

Click the image to enlarge it
----------

AdwCleaner

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
  
• Click on Delete.
  
• Confirm each time with Ok.
  
• You will be prompted to restart your computer. A text file will open after the restart.
• Please attach the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

----------

[Pondus]

you did not tell us what avast said about the website?

if it detected malware, then there will be a infection name?
if it said URL:mal.....it means the url is on a block list...... for whatever reason?

VirusTotal URL scan does not scan for infection......it check the url against several reputation/block lists

[chumpchange]

My DDS attachments. aswMBR seems to scan C:\Documents and Settings\Application Data\MicrosoftIdentity~ for over 10 minutes and does not go forward, not sure if I should leave it or save the log from that point.

[chumpchange]

It said URL:mal for both. It was specificclick and another similar site. In my original thread, a member told me to go post in the virus section as he didn't find anything when he visited the site.

[jeffce]

Try to run aswMBR from Safe Mode.  If you still are not able to get it to run please do the following:

Please download TDSSKiller

• Double click TDSSKiller.exe
  
• Press Start Scan
  
• If Malicious objects are found, select Skip[/b] by changing the Cure dropdown in the upper right.
  
• Do Not Attempt To Fix Anything Now.  We just need to look over the report and be sure we are removing the correct items. 
• Attach the log in your next reply
• A copy of the log will be saved automatically to the root of the drive (typically C:\)
  

----------