« previous next »
Pages: [1] 2   Go Down

Author Topic: URL: MAL pop up  (Read 7627 times)

0 Members and 1 Guest are viewing this topic.

Offline quad5

  • Newbie
  • *
  • Posts: 14
URL: MAL pop up
« on: February 11, 2013, 08:36:24 PM »
The pop up says "MALICIOUS URL BLOCKED" and the network shield has blocked the site.  When clicking for details, it states:

URL: hxxp://afe.specificclick.net/?l
Process:   C:\Program Files (x86)\Google\Chrome\App...
Infection:   URL:Mal

This started on either 2/4 or 2/5 and it happens using Chrome as well as Firefox.  Running Chrome in incognito mode still produces the warning.  The site is hxxp://meetme.com.  Neither Avast or MBAM scans are showing any infection on my computer.  I have included all the logs that are a prerequisite for taking a look at why this issue is occurring either with my system, browser, and/or the site itself.

I would appreciate any help in getting this issue resolved.
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37578
  • Not a avast user
Re: URL: MAL pop up
« Reply #1 on: February 12, 2013, 12:08:57 AM »
malware removers are notified....it may take hours before one arrive so be patient

Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #2 on: February 12, 2013, 12:30:43 AM »
Patience won't be a problem.  Thank you for notifying them Pondus.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL: MAL pop up
« Reply #3 on: February 12, 2013, 12:41:29 PM »
Hi I am going to delete all of your browser shortcuts so they will need to be replaced.  Once done let me know if the alerts still occur

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
[2013/02/08 16:29:42 | 000,002,279 | ---- | M] () -- C:\Users\JR\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/02/08 15:14:10 | 000,002,255 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013/02/08 15:07:34 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/02/08 14:53:31 | 000,001,254 | ---- | M] () -- C:\Users\JR\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/02/08 15:14:10 | 000,002,279 | ---- | C] () -- C:\Users\JR\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/02/08 15:14:10 | 000,002,255 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #4 on: February 12, 2013, 07:44:22 PM »
Essex, I see no pop up warnings on that site now and I did everything on the site that I normally do when I'm on there.  The desktop shortcut icons for Chrome and Firefox did not reappear after reboot.  Is that an issue or just something that happens sometimes from time to time?  The requested log is attached.  It also is occurring on a different computer of mine, but wanted to clear the issue up on this one (primary one used) before attaching logs on the other one.
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #5 on: February 12, 2013, 08:07:26 PM »
Never mind on the browser shortcuts.  Totally went brain dead on reading what was gonna take place.  :-[
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #6 on: February 12, 2013, 08:43:25 PM »
Update...the Avast pop up alert is back.  Only this time it's the site, my e-mail, and even reared it's head on here.  Details:

URL:   hxxp://cs.specificclick.net/sync/?bdid
Process:   C:\Program Files (x86)\Google\Chrome\App...
Infection:   URL:Mal

Which log do you want now?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL: MAL pop up
« Reply #7 on: February 12, 2013, 09:18:09 PM »
Is it just in chrome now ?  I deleted the shortcuts as that is where the redirect hides

You can now recreate them

Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #8 on: February 12, 2013, 09:42:23 PM »
As of this reply it just appears to be happening in Chrome.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL: MAL pop up
« Reply #9 on: February 12, 2013, 10:02:50 PM »
OK could you run Chrome in Incognito mode and then let me know if they cease

Incognito mode http://support.google.com/chrome/bin/answer.py?hl=en&answer=95464
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #10 on: February 12, 2013, 10:07:34 PM »
Happening in Incognito mode too.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL: MAL pop up
« Reply #11 on: February 12, 2013, 10:14:31 PM »
Do you have a chrome shortcut on the desktop or the quicklaunch bar ?  If so delete them and try again
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #12 on: February 12, 2013, 10:22:37 PM »
No shortcut icon or quicklaunch bar.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL: MAL pop up
« Reply #13 on: February 12, 2013, 11:21:37 PM »
OK unfortunately that means you will have to totally uninstall Chrome and then re-install it

Details are here http://support.google.com/chrome/bin/answer.py?hl=en&answer=111899
Logged

Offline quad5

  • Newbie
  • *
  • Posts: 14
Re: URL: MAL pop up
« Reply #14 on: February 13, 2013, 12:59:34 AM »
Uninstall/re-install done. So far, so good. Do I just give it a day or two and see if it happens again? As per it happening on my other computer, do I wait and make sure it's resolved on this one or go ahead and send you the logs for the other?
Logged
Pages: [1] 2   Go Up
« previous next »