Avast blocking URL svchost.exe

[essexboy]

Was there no zip file in the AVZ folder ?

[REDACTED]

You can check this file, but I am not sure.

<a href=http://www.filedropper.com/virusinfosyscure><img src=http://www.filedropper.com/download_button.png width=127 height=145 border=0/></a><br /><div style=font-size:9px;font-family:Arial, Helvetica, sans-serif;width:127px;font-color:#44a854;> <a href=http://www.filedropper.com >upload files free</a></div>

http://www.filedropper.com/virusinfosyscure

[essexboy]

Could you temporarily disable the Astril VPN please



FIX

Open AVZ as before
Click "File" > "Custom scripts"


A dialogue will open
Copy and paste the following script into the marked space then press run


Script for insertion :

Code: [Select]

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 DeleteFile('C:\Users\Ronan\AppData\Roaming\duowan\YYExplorer\YYExplorerUpliveTrigger.exe','32');
 DeleteFile('C:\Windows\Tasks\YYEUpdate{C194A6FD-0158-4D03-9A8D-AED52E0588CB}.job','64');
 DeleteFile('C:\Windows\system32\Tasks\YYEUpdate{C194A6FD-0158-4D03-9A8D-AED52E0588CB}','64');
 DeleteFile('C:\Users\Ronan\Downloads\YYSetup-6.32.0.3-zh-CN.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\{202A373B-6B5D-4314-8BDA-D6D28EA4C4B5}','64');
ClearHostsFile;
ExecuteSysClean;
RebootWindows(true);
end.

Ensure that you copy from begin to end

[REDACTED]

Done, it rebooted properly. No log file was created.

Hed.

[essexboy]

Are you still receiving the alerts ?

[REDACTED]

Yes, and this time more from chrome.exe.

[essexboy]

Is it just Chrome now ?

[REDACTED]

I have only seen Chrome for the last 4 alerts.

[essexboy]

OK could you now uninstall Chrome fully and then reboot before re-installing

[REDACTED]

Done. A bit troublesome to lose all bookmarks, but I guess it had to be done.

[essexboy]

Have the alerts now ceased ?

[REDACTED]

Unfortunately not, I had an alert on Chrome.exe
But it seems alerts decreased a lot.

[essexboy]

Do you have synch enabled as it may be that it is downloading the bad stuff as soon as you sign in

How to disable and delete synch data http://www.howtogeek.com/103655/how-to-delete-your-google-chrome-browser-sync-data/

Re-install Chrome

1. If you have bookmarks, let's save them by exporting them - Export Bookmarks
2. Then I need you to go Google Sync and sign into your account
3. Scroll down until you see the "Stop and Clear" button and click on the button. At the prompt click on "Ok"
4. Now we need to uninstall chrome. Note: When asked about user data or settings you must remove this also so please check the box.
5. Restart the computer and reinstall chrome, You can download The latest version from here - Google Chrome
6. Import your bookmarks back into Chrome
7. Sign back in to your Chrome browser so that your bookmarks sync with your online account.
 

[REDACTED]

When going to the google.com/dashboard, it asks me to log in with my account. But I don't have one... Should I create one ?

[essexboy]

No if you do not have an account then it is not synching.   Once you have completed could I have a fresh FRST scan please