C:\Windows\explorer.exe virus

[REDACTED]

Hi!

Since the last few days there have been multiple Avast popups that blocked numerous webpages or files. They come up every 30 seconds.

URL: http://je4003y5qdv.com/ads.php?sid=1926
Infection: URL:Mal
Process: C:\Windows\explorer.exe

URL: http://j36yy3ldd4.com/ads.php?sid=1926
Infection: URL:Mal
Process: C:\Windows\explorer.exe

URL: http://nopnc0szs6nj.com/ads.php?sid=1926
Infection: URL:Mal
Process: C:\Windows\explorer.exe

URL: http://31.148.220.95/ads.php?sid=1926
Infection: URL:Mal
Process: C:\Windows\explorer.exe

URL: http://nopnc0szs6nj.com/ads.php?sid=1926
Infection: URL:Mal
Process: C:\Windows\explorer.exe

I've allready tried to run a few virusscanners, but none of them seem to fix this problem. Can anybody help me with this?
Thanks!!!

[TwinHeadedEagle]

Hello,


Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[REDACTED]

Hi!

Thanks for your fast reply! I've attached the txt files to this post!

[TwinHeadedEagle]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on icon and select Run as Administrator to start the tool.
  
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:

Code: [Select]

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
  
• Push Run Script and wait patiently. The scan may take a couple of minutes.
  
• When the scan completes, a zoek-results logfile should open in notepad.
  
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.