Author Topic: URL:Mal  (Read 17089 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #45 on: June 16, 2012, 07:48:17 PM »
OK lets see if it located in the registry

For 32bit systems, please download SystemLook from one of the links below and save it to your Desktop.
 
Download Mirror #1
Download Mirror #2

 
For 64bit systems, download SystemLook from here.
 
 
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
Code: [Select]
:regfind
includeit
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

 
Note: The log can also be found on your Desktop entitled SystemLook.txt

rbabyak

  • Guest
Re: URL:Mal
« Reply #46 on: June 16, 2012, 08:13:48 PM »
Results from system Look...nothing.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #47 on: June 16, 2012, 08:45:57 PM »
OK back to the drawing board

rbabyak

  • Guest
Re: URL:Mal
« Reply #48 on: June 16, 2012, 08:49:23 PM »
The biggest problem I'm having is that Avast's rules engine is throwing this error. It has to be based on a condition or some set of conditions. There are many people experiencing this problem and Avast has no solution to provide. It should be one that's cross the board.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #49 on: June 16, 2012, 08:58:12 PM »
It must be related to some specific programme or file as I am not experiencing it

The problem is trying to determine what is triggering it

I will visit all the logs that I can find related to this and see if there is a common denominator

rbabyak

  • Guest
Re: URL:Mal
« Reply #50 on: June 17, 2012, 12:59:27 AM »
I solved the problem with the URL:Mal popups. In IE, we have the V Share Toolbar installed. It's been there for months and we have experienced no problem. It's apparent that Avast is not managing the toolbar code at this point and is popping up the alerts. I simply made it inactive and then blocked it.

The result is no more popups.

Whoever you are, it's been a pleasure dealing with you the past three days, but that is time I can't recuperate. I'm still not thrilled with Avast. Here's the details regarding the toolbar:

Name:                   vshare.tv Toolbar
Publisher:              Conduit Ltd.
Type:                   Browser Helper Object
Version:                6.4.0.0
File date:             
Date last accessed:     Today, June 16, 2012, 4 minutes ago
Class ID:               {7AEB3EFD-E564-43F1-B658-5058A7C5743B}
Use count:              3103
Block count:            1780
File:                   prxtbvsh0.dll
Folder:                 C:\Program Files\vshare.tv_Bar

I figure it could be the vShare toolbar on my machine but it may be different toolbars on other machines. I think Avast needs to look into this to resolve it for all the users of their software.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #51 on: June 17, 2012, 01:05:20 PM »
The site that the toolbar is going to though is suspect, but thank you for that information.  The alert still stands even though it is a known toolbar 

are you happy for me to remove my tools ?

rbabyak

  • Guest
Re: URL:Mal
« Reply #52 on: June 17, 2012, 02:44:13 PM »
Yes, please.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #53 on: June 17, 2012, 04:21:18 PM »
Subject to no further problems   :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Quote
    :Commands
    [resethosts]
    [emptytemp]
    [CLEARALLRESTOREPOINTS]
     [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
Remove ComboFix
  • Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
  • In the Run box, type in ComboFix /Uninstall
     (Notice the space between the "x" and "/")
    then click OK



  • Follow the prompts on the screen
  • A message should appear confirming that ComboFix was uninstalled
Run OTL and hit the cleanup button.  It will remove all the programmes we have used plus itself. 

We will now confirm that your hidden files are set to that, as some of the tools I use will change that
  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Do not show hidden files and folders.
  • Click Yes to confirm.
  • Click OK.
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

Malwarebytes.

Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit To learn more about how to protect yourself while on the internet read our little guide  How did I get infected in the first place ?Keep safe  :wave:

rbabyak

  • Guest
Re: URL:Mal
« Reply #54 on: June 17, 2012, 04:59:27 PM »
Did everything...Thanks!

I guess I have a question as to what Malwarebytes protects that Avast doesn't? They are both free anti-virus programs.

rbabyak

  • Guest
Re: URL:Mal
« Reply #55 on: June 17, 2012, 05:41:57 PM »
One more question...should Avast and Malwarebytes both be run?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: URL:Mal
« Reply #56 on: June 17, 2012, 06:02:00 PM »
They are complimentary, Avast concentrates on true viruses whilst MBAM is  biased towards adware/rogue scanner type thing

They can both be run together

rbabyak

  • Guest
Re: URL:Mal
« Reply #57 on: June 17, 2012, 09:48:11 PM »
Just for clarification...they can be run simultaneously or one after the other?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37619
  • Not a avast user
Re: URL:Mal
« Reply #58 on: June 17, 2012, 09:57:04 PM »
they can run active at the same time....avast and malwarebytes pro protection module

but doing a manual scan, i would do one at the time  ;)