Author Topic: Avast notifications  (Read 1469 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast notifications
« on: November 21, 2015, 01:49:13 PM »
URL: http://differentia.ru/diff.php
Infekcja: URL:Mal
Proces: C:\Windows\SysWOW64\msiexec.exe

It shows over and over again. I used malwerebytes anti malwere, anti rootkit and adwcleaner. It found nothing.

I attached logs. Please help

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast notifications
« Reply #1 on: November 21, 2015, 01:52:27 PM »
Also attach the MBam log.
If you haven't done so already, install McShield and have it scan your usb stick(s).

REDACTED

  • Guest
Re: Avast notifications
« Reply #2 on: November 21, 2015, 02:02:17 PM »
I do so.

Below my MB log.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast notifications
« Reply #3 on: November 21, 2015, 02:07:08 PM »
Ok, now have some patience.

One of the malware removers will soon guide you.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast notifications
« Reply #4 on: November 21, 2015, 08:39:15 PM »
This will  stop it

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
2015-07-15 14:34 - 2015-06-15 22:16 - 67341440 ___SH () C:\ProgramData\msdojjboq.exe
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.