« previous next »
Pages: 1 2 [3] 4   Go Down

Author Topic: Malicious URL http://specrtop.org/a/  (Read 25689 times)

0 Members and 1 Guest are viewing this topic.

ndmd

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #30 on: May 05, 2013, 10:12:32 PM »
I also try to go to window update from start menu. The same message appears.
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Malicious URL http://specrtop.org/a/
« Reply #31 on: May 05, 2013, 10:56:36 PM »
Site was registered one month ago with a specific reason -> https://www.virustotal.com/en/domain/specrtop.org/information/
A Wscript infesting site -> https://www.virustotal.com/en/domain/specrtop.org/information/

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Malicious URL http://specrtop.org/a/
« Reply #32 on: May 05, 2013, 10:57:28 PM »
OK I do have a tool that should fix that

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
  • Accept the disclaimer and allow to update if it asks




  • When finished, it shall produce a log for you.
  • Please include the C:\ComboFix.txt in your next reply.[/b]
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Logged

ndmd

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #33 on: May 05, 2013, 11:11:03 PM »
Even though I've already disabled avast and other antimalware, I'm getting message showing 'real time scanner are still active'.

Actually I've already uninstalled AVG as well.
« Last Edit: May 06, 2013, 02:07:32 AM by ndmd »
Logged

ndmd

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #34 on: May 05, 2013, 11:12:34 PM »
I'm still at that point. Not sure if I can press Ok and dont know how to stop that scan.
Logged

ndmd

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #35 on: May 06, 2013, 02:06:03 AM »
I didn't press OK and I just restarted my computer from that point now.

I'll be awaiting your further instructions.

Thanks.
Logged

garima1588

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #36 on: May 06, 2013, 11:29:29 AM »
even i am getting the same message again and again

URL:   http://specrtop.org/a/
Process:   C:\Windows\System32\wscript.exe
Infection:   URL:Mal
 and i have done all possible scanning to delete this virus. kindly please help me to remove this from my laptop. it is very annoying that with avast antivirus installed on my system, i have got this Malware in my system.
please help
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Malicious URL http://specrtop.org/a/
« Reply #37 on: May 06, 2013, 11:35:06 AM »
Look for the downloaded file that is flagged: apexnew-bold.exe
see: https://www.virustotal.com/en/file/c87fb40fd6f090c9e023b1a883a8d1f1c934d5e9f58f7092df441a91b476371c/analysis/1367278465/
= FBI Moneypak virus

Damian
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

garima1588

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #38 on: May 06, 2013, 11:44:24 AM »
i am asking how to remove this malware??
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Malicious URL http://specrtop.org/a/
« Reply #39 on: May 06, 2013, 11:52:23 AM »
Hi garima1588,

That is why you have the help of a qualified removal expert here. I am just throwing in some additional info,

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

garima1588

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #40 on: May 06, 2013, 11:55:09 AM »
then assist me how to remove

URL:   http://specrtop.org/a/
Process:   C:\Windows\System32\wscript.exe
Infection:   URL:Mal
Logged

Offline magna86

  • Anti Malware Fighter
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4235
    • Ambulanta MyCity Forum - ASAP Member
Re: Malicious URL http://specrtop.org/a/
« Reply #41 on: May 06, 2013, 12:22:10 PM »
My apologize to essexboy for intrusion ...

@ garima1588
Quote
then assist me how to remove

Open new topic and attach log reports.
How and what to run...please read this:
http://forum.avast.com/index.php?topic=53253.0
« Last Edit: May 06, 2013, 12:23:48 PM by magna86 »
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Malicious URL http://specrtop.org/a/
« Reply #42 on: May 06, 2013, 05:49:11 PM »
@ndmd

Run combofix again please, if it still complains then press OK but do not allow Avast to quarantine or stop anything from running
Logged

ndmd

  • Guest
Re: Malicious URL http://specrtop.org/a/
« Reply #43 on: May 06, 2013, 07:58:40 PM »
I could run the scan without any warning message this time.

The log file is attached.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Malicious URL http://specrtop.org/a/
« Reply #44 on: May 06, 2013, 08:03:14 PM »
Is the control panel now available ?


Download AdwCleaner from here to your desktop
Run AdwCleaner and select Delete



Once done it will ask to reboot, allow this
On reboot a log will be produced please attach that
Logged
Pages: 1 2 [3] 4   Go Up
« previous next »