« previous next »
Pages: [1] 2   Go Down

Author Topic: Avast keeps notifying me of a Malware block but scans come out clean  (Read 6334 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast keeps notifying me of a Malware block but scans come out clean
« on: February 22, 2017, 08:27:47 PM »
Hi,

I have been trying to get rid of the notification that comes up while I'm browsing the internet. Avast keeps saying that there is a threat blocked and refers to it as a malicious website block. It says the object is "sso.anbtr.cxm/domain/wpad.wds16.cxm" (I've replaced the o's with x's so nobody can click on it), and that the process is coming from "Windows\System32\svchost.exe". I've ran multiple scans on both Avast and Malwarebytes and they have come back clean, yet I continue to get the popups. I have attached all relevant logs and a picture of the message that pops up every once in a while. Thank you very much for your help!
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #1 on: February 22, 2017, 08:31:29 PM »
sso.anbtr.com/domain/wpad.wds16.cxm
https://www.virustotal.com/en/url/640997231bf66b9ae2bb440e22ce4ec0ff9b285ade43952a9d4d08809b453fbd/analysis/1487791794/

Malware expert is notified, he may not be online before tomorrow

Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #2 on: February 23, 2017, 07:27:07 AM »
Thank you for the logs (so far).  We also need the following to help remove all the problem.  Thanks.

Run a search with FRST.
  • Right click on FRST on your desktop and select "Run as Administrator..." When the tool opens click Yes to disclaimer.
  • Type wpad into the Search Box.
  • Press the Search Registry button.
  • It will produce a log called search.txt or SearchReg.txt in the same directory the tool is run from.
  • Please attach the log file back here.
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #3 on: February 23, 2017, 04:01:18 PM »
Attached is the log file.
Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #4 on: February 23, 2017, 05:25:00 PM »

Fix with Farbar Recovery Scan Tool
This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on icon and select Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.

How is your system running now?
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #5 on: February 23, 2017, 05:36:01 PM »
Attached is the log. The notification hasn't come up, but I will let you know if it does. Could you just walk me through what was wrong with the computer? Was there a keylogger? Just want to make sure I don't have to go back and change passwords and all that stuff. I greatly appreciate your help!
Logged

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #6 on: February 23, 2017, 06:57:24 PM »
Avast just reported another malware block. Same as in the original post.
Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #7 on: February 24, 2017, 07:04:15 AM »

Run a search with FRST.
  • Right click on FRST on your desktop and select "Run as Administrator..." When the tool opens click Yes to disclaimer.
  • Type sso.anbtr.cxm/domain/wpad.wds16.cxm;sso.anbtr.cxm;wpad.wds16.cxm into the Search Box.
  • Press the Search Registry button.
  • It will produce a log called search.txt or SearchReg.txt in the same directory the tool is run from.
  • Please attach the log file back here.
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #8 on: February 26, 2017, 03:28:11 AM »
Log is attached.
Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #9 on: February 26, 2017, 10:25:58 PM »
Thanks for the log and correcting the search string (good call on your part):



FIRST >>>>

Junkware Removal Tool
Please download JRT from here to your desktop.

Note: Temporarily disable/shut down your protection software now to avoid potential conflicts, how to do so can be read here.

Double click the JRT.exe file to run the application.

The application will open an Command Prompt window and run from there (this is normal for this program, so not to be alarmed).

When it is asked, press any key to allow the program to continue / run.

This will create a log on the desktop; please copy and paste the JRT.txt log text in your next post.

Note: After the log file is created, please enable your protection software / reboot your system and verify your protection software is enabled.


SECOND >>>>

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.

NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
You will see the following console:


Click the Scan button and wait for the scan to finish.

After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Waiting for action. Please uncheck elements you don't want to remove.

Click the Clean button.

Everything checked will be deleted.

When the program has finished cleaning a report appears.

Once done it will ask to reboot, allow this


On reboot (if one is needed) a log will be produced; please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C#].txt


Optional:
NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it.
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #10 on: February 27, 2017, 02:21:04 AM »
Logs are attached! Again, I greatly appreciate you helping me with this.
Logged

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #11 on: February 27, 2017, 05:16:42 PM »
Still getting the malware block notifications. How should I proceed?
Logged

Offline dbrisendine

  • Malware Fighter
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1258
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #12 on: February 28, 2017, 07:59:14 AM »

Please download Malwarebytes Anti-Rootkit from here
  • Unzip the contents to a folder in a convenient location.
  • Open the folder where the contents were unzipped and run mbar.exe
  • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
  • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
  • Wait while the system shuts down and the cleanup process is performed.
  • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  • When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
Logged
Win7 x32 Ult. SP1, Brain 2.0 / Win10 x64, Brain2.5
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #13 on: February 28, 2017, 04:09:55 PM »
Logs are attached.
Logged

REDACTED

  • Guest
Re: Avast keeps notifying me of a Malware block but scans come out clean
« Reply #14 on: February 28, 2017, 04:23:36 PM »
This is the log after the reboot. It seems I am in the clear! I will keep you updated. Also, would it be necessary to update passwords and all that good stuff? Or what do you recommend now that the computer has been cleaned?
Logged
Pages: [1] 2   Go Up
« previous next »