Just upgraded from Free Avast and things are worse.

[SpeedAgent]

Last week I upgraded when my "free" version of Avast expired.  It was only $30 for 3 PCs.  Immediately after activating the license I got a very odd spam email, one I have not seen before and is uncommon in my inbox.  I tried not to think much of it until other things started to work differently.  I now get pop ups on some website that I never got pop ups on before.  Also, this morning my scroll feature stopped working on my laptop pad.  I assumed some malware or virus had infected my system.  Avast updated itself this morning, but did not indicate any problems.  I ran SpyHunter and within 10 seconds it quarantined a pretty serious malware infection. 

My question is- What is going on here?  I have paid $30 for protection that seems to have no intent to protect and may not even have the ability to detect, let alone protect.

I'm considering just calling and asking for a refund.  Has anyone else experienced this?  I don't need this hassle if the product is ineffective.

Chris

[essexboy]

What did spyhunter detect ?

[Pondus]

I ran SpyHunter and within 10 seconds it quarantined a pretty serious malware infection. 

no security program have 100% detection

so as Essexboy said what file did spyhunter detect, and where was it located.... full file path

[SpeedAgent]

SpyHunter does not seem to have a quarantine history so I do not have the path, but it was a web traffic malware that was rated medium/high risk.  I have not had malware detected by SpyHunter for at least six months so with the various new issues I'm suspecting that Avast is not the right solution for me.  I was better off before I bought it.

[essexboy]

By that do you mean a PUP..  Ie some toolbar or the like ?  If it was web bound malware then webshield would have blocked it SpyHunter must have some sort of log

[SpeedAgent]

I have the path- the malware was removed yesterday by SpyHunter, but it is back this morning.  Avast still did not see it.  Here is the path:

C:\Users\ChrisM\Appdata\Local\Google\Chrome\UserData\Default\WebData:mywebsearch.com

If anyone can be of assistance it would be very helpful.  My pointer/scroll stopped working again so I assumed I had a bug and ran spyware- yep, it was back.

Chris

[Pondus]

C:\Users\ChrisM\Appdata\Local\Google\Chrome\UserData\Default\WebData:mywebsearch.com

browser hijacker, try this
run AdwCleaner..... click delete.... post log here
you find it here  http://forum.avast.com/index.php?topic=53253.0

to check for any leftovers, also attach a OTL diagnostic log

[essexboy]

Websearch is not classified as a virus but as a PUP, as believe it or not some people install that voluntarily, and they would get annoyed if Avast removed it

[SpeedAgent]

I did the AdwCleaner and restarted and the MyWebSearch.com came back.  I ran spyhunter again and it removed it then I sent Enigma (spyhunter developer) a support ticket to see if there was something they could do.  I'm assuming every time I open my browser it will return.

[essexboy]

I could have a look if you wish.. What browser is it in .. If FF are you synching it with an online backup ?

 Download OTL  to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

• Select All Users
  
• Under the Custom Scan box paste this in

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
winsock.*
/md5stop
CREATERESTOREPOINT

• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
  • Post  both logs

[Aventador]

Its a toolbar people. Not malware.  SpywareHunter is a joke of a program anyways. MBAM is far superior and FREE. Mywebsearch comes prepacked with other installers. You will find it in Add/Remove programs.

http://home.mywebsearch.com/

https://www.virustotal.com/en/url/381bfd0d85bd564913e7800d30a26f57356ca3a8b5f6cb1cfbafc548766b3011/analysis/

http://malwaretips.com/blogs/remove-mywebsearch/

[Pondus]

@Aventador 
yes we know what mywebsearch is, it is not the first time we see it.... search the forum

[Aventador]

@Aventador 
yes we know what mywebsearch is, it is not the first time we see it.... search the forum

Didn't say you or the forum. I was referring to SpeedAgent. Essexboy is good at what he knows but there is no reason to over do it and rush in with the OTL. Education goes a long way. Also if he enables "PUP" and does a scan the Avast will see it. Either way its not an infection or malware related.

[DavidR]

Sorry but SpeedAgent is trying to get rid of it.

Having tried a common tool AdwCleaner to remove the mywebsearch toolbar, it is back. So the suggestion to use OTL to try and find what is bring it back and eradicate that is more than justified.

If it is on your system and you didn't expressly want it then it is Unwanted and why SpeedAgent wants rid of it.

[Aventador]

The toolbar can be remove via Add/Remove programs. Also remove it from Firefox and or Chrome by going into your add ons and removing it. Then reset your homepage and search engine. Its that easy. Just like the Ask toolbar.