Malware HavyTyler.Net in Avast Browswer

[Shawn124]

Nearly every time I search in the address bar of my Avast Secure Browser, I'm presented with the message: Threat secured -- We've safely aborted connection on havytyler.net because it was infected with Other:Malware-gen[Trj] -- Scan your computer for other issues, too?   If I scan or don't scan, if I close the browser and reopen, if I reboot the computer, I'm still getting this message when I search in my toolbar for anything. How do I get rid of the malware that is infecting my Avast "secure" browser? Why doesn't Avast get rid of this for me? How did it get infected in the first place when I'm using a paid version of this browser? Please help.

[Olga Fomicheva]

Hello!

Thank you for reporting the issue, I will try to help.
Could you please provide us with more details? Please, send us the screenshot of the notification that you receive after clicking on 'See details' option that is available in it.

Thank you!

[Shawn124]

I have an image and would love to post it, but this forum does not appear to allow me to attach an image. Using the "Insert Image" button only appears to insert empty img tags. I could not find an attach button. So sorry, please instruct me as to how I can send an image and I'll send the pop-up that appears when I search on Avast Browser.

[Asyn]

Hi, see screenshot.

[Shawn124]

Image attached.

[Jiří Malina]

Thanks for the screenshot. The problem was caught by AV not browser itself. It looks that the browser got infected. Can you please share your diagnostic info from secure://settings/help -> Diagnostic Information

Also try the same on other browsers if the warning will also be present so we can figure out where the source can be.

[Shawn124]

The warning appears only on the Avast Secure Browswer. It does not appear on Edge, Firefox, or even Chrome.
Here is the Diagnostics:
executable_path=C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
profile_path=C:\Users\penni\AppData\Local\AVAST Software\Browser\User Data\Default
os_version=Windows 10 v2009 (x64)
av_version=21.4.2464
urlscanner_version=1.7.0.287
host_prefix=
browser_version=91.0.10129.78 (Official Build (64-bit))
cgid=312
cid=3211
uid=af78bec304c048b48ff29126c5c2ea34

Channel: stable
OS language: en-us
Browser language: en-US
Search Engine URL: https://www.google.com/search?client={google:client}&q={searchTerms}&{google:originalQueryForSuggestion}{google:assistedQueryStats}ie={inputEncoding}
Omaha version: 1.8.1065.0

Enabled extensions:
ahfgeienlihckogmohjhadlkjgocpleb : Web Store : 0.2
dmfdacibleoapmpfdgonigdfinmekhgp : Avast SecureLine VPN : 1.5.1.839
ekmkelgimdicdgkflkakgmjcghgpdnji : Messaging : 1.6.0.274
glidbdbacfjioedheokaociibpcijiha : Docs Creator : 3.7.0
kdhipfbocahipinepiahppeionfbahlg : Avast Video Downloader : 2.5.149
kejbdjndbnbjgmefkgdddjlbokphdefk : Tag Assistant Legacy (by Google) : 21.11.16
kmediagceboldddnnajkcochbkfkedel : Avast Anti-Tracking : 1.23.0.675
kmendfapggjehodndflmmgagdbamhnfd : CryptoTokenExtension : 0.9.74
lhnnoklckomcfdlknmjaenoodlpfdclc : Avast Bank Mode : 1.3.0.39
mecokbmnofclapimmlnfegiohceoaocc : Avast Performance Manager : 1.2.220
mhjfbmdgcfjbbpaeojofohoefgiehjai : Chrome PDF Viewer : 1
nkeimhogjdpnpccoofpliimaahmaaome : Google Hangouts : 1.3.16
nmebbcjdbhgggcgohlnlgadkmjiedfbc : Avast Hack Check : 1.2.341
ooeobdingfeedklanlfcjhffgennflke : Avast Adblock : 2.5.127
pkedcjkdefgpdelpbcmbmeomcjbeemfm : Chrome Media Router : 9021.222.0.0

Disabled extensions:
beghmmhchncjignfbfnemngnlnjdmbcb : Avast Anti-Fingerprinting : 2.5.181

[Jiří Malina]

From diag info everything looks good but if the only Avast Secure Browser is affected I suggest to:

- Uninstall Avast Secure Browser
- Remove folder C:\Users\penni\AppData\Local\AVAST Software\Browser
- Install browser again and check if problem persist

[Libor Šlechta]

Hello,

Jiri is right.

My guess is that it may be caused by one of the extensions.

Most of the extensions are installed by Avast Secure Browser.

However there are 2 extensions that I do not recognize:
glidbdbacfjioedheokaociibpcijiha : Docs Creator : 3.7.0
kejbdjndbnbjgmefkgdddjlbokphdefk : Tag Assistant Legacy (by Google) : 21.11.16

If you did not uninstall the browser yet, could you please try to remove those extensions and try whether the issue persist?

If removing extensions or reinstalling browser will not solve your problem, you can try ask for help in one of the forums where community offers help with removing of malware. Here is a link to section of Avast forum where volunteers (non Avast employees) offer help https://forum.avast.com/index.php?board=4.0

[Shawn124]

Thanks for the responses. Sorry it took so long for me to get back to this. I had removed Google as my default search and instead used one of the others as they did not result in the malware report. However, I removed the docs extension as suggested, and the problem seems to have gone away, even when I switched back to Google as my primary search engine.

Thanks for the help. I'll report again if the warning returns, but so far so good.