Author Topic: Constant urlmal-avast-process-cwindowssystem32svchostexe/ alert when browsing  (Read 26959 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
There wasn't a prompt or option, I used the "programs and features" to uninstall and it only prompted to remove browser history.

I tried a manual deletion of anything chrome related using the search function and that has seemed to work because when I reinstalled all the bookmarks and previous data seemed to have gone.

But on visiting 'www.imgur.com' the 'url:mal' still happens.


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Does this occur on any other site ?

REDACTED

  • Guest
No, not so far, only the imgur site

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
DO you have an imgur add on of any description ?

REDACTED

  • Guest
Nope only the standard google ones, skype and he Avast online security

REDACTED

  • Guest
Ok I've just deleted the skype addon because I think it started around the same time I installed it.

So far no alerts have happened.

I'll keep you guys posted.

Did the skype addon have the malware?

Was there any malware to begin with?

Thanks again for your help.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Very possibly as Chrome addons are very easy to subvert and from the logs show no difference to an unaffected one

Run it for a while and if all is good let me know and I will tidy up

REDACTED

  • Guest
Thanks again essexboy! I'll browse for a while and let you know tomo.

I did a bit of googling and its all probably paranoia but it might explain why my webcam doesn't work anymore?

http://www.v3.co.uk/v3-uk/news/2446268/skype-users-warned-of-t9000-malware-threat-that-records-video-and-text-chats

Would deleting the addon be enough? I'm becoming a bit worried now since I do a lot of online banking on this laptop too :S

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Yes delete the addon

REDACTED

  • Guest
Ok well I thought everything was ok.

but nope! alert again! -.-

It definitely only happens when im on imgur.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
So it is only that site and nowhere else ?

REDACTED

  • Guest
Yeh, just the imgur site

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
That would tend to suggest the site is at fault, is it a specific page on the site ? Is it before or after you login

REDACTED

  • Guest
Its usually when a GIF is playing

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
That would tend to suggest there is some form of infection there that Chrome is susceptible to