Author Topic: Spontaneous malicious website blocked popup  (Read 1989 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Spontaneous malicious website blocked popup
« on: July 01, 2015, 03:43:01 AM »
It seems my desktop has acquired the malware/virus problem that's been going around lately, wherein Avast regularly blocks spontaneous attempts to visit malicious websites such as anythicago.com and alwaysisobar.com. I've also noticed that my desktop has been much slower than usual to load websites since the Avast popups regarding these blocks started appearing. Neither Avast nor Malwarebytes has been apparently able to detect or remove whatever this thing is so far, and I'd greatly appreciate some help in rooting it out of my computer.

I've attached my most recent Malwarebytes scan log to this message, as well as the Farbar FRST and Additions text files, as outlined in the malware cleaning sticky thread.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Spontaneous malicious website blocked popup
« Reply #1 on: July 01, 2015, 04:02:04 AM »
Hello,


Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
Code: [Select]
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Spontaneous malicious website blocked popup
« Reply #2 on: July 01, 2015, 04:46:34 AM »
Ok, I've downloaded and run Zoek. I've attached the results to this reply. Thank you for taking the time to help me out!

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Spontaneous malicious website blocked popup
« Reply #3 on: July 01, 2015, 08:38:15 AM »
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on icon and select Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition option is checked.
  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please include their content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Spontaneous malicious website blocked popup
« Reply #4 on: July 01, 2015, 10:10:01 PM »
Ok, here are my Farbar results.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Spontaneous malicious website blocked popup
« Reply #5 on: July 02, 2015, 03:08:50 AM »
How is your PC behaving now?
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Spontaneous malicious website blocked popup
« Reply #6 on: July 02, 2015, 04:04:20 AM »
Websites are still a little slow to load, but I suppose that could be my internet connection.

The spontaneous popups don't appear to be an issue anymore. Thank you very much for your help!

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: Spontaneous malicious website blocked popup
« Reply #7 on: July 02, 2015, 07:50:03 AM »
Cheers :)


Post-cleanup procedures:


Download DelFix by Xplode and save it to your desktop.
  • Run the tool by right click on the icon and Run as administrator option.
  • Make sure that these ones are checked:
    • Remove disinfection tools
    • Purge system restore
    • Reset system settings
  • Push Run and wait until the tool completes his work.
  • All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: Spontaneous malicious website blocked popup
« Reply #8 on: July 02, 2015, 03:20:24 PM »
I have the same issue and have attached the file from Zoek.