Computer Support Forum

avast! Web Shield has blocked a harmful webpage or file - explorer.exe

Question: avast! Web Shield has blocked a harmful webpage or file - explorer.exe

Cleaning up my daughters computer - Dell Vostro 260 - Intel I5-2400, 4GB RAM, Windows 7 Home Premium 64bit.
 
Ran Malwarebytes, adwcleaner and CCleaner.  Installed avast free and ran boot time scan.   
 
Now receive continuing popups from avast stating:
 
avast! Web Shield has blocked a harmful webpage or file. 
Object:  hxxp://on-bend.com/b/opt/CB8F9...............
Infection:  URL:Mal  Process: c:\Windows\explorer.exe
 
Also appears that MS Update does not work and some downloads are being blocked.
 
Ran DDS as directed.  Only produced Attach.txt file (Below).  Rechecked and the DDS.txt box was checked - reran but did not produce this file.
 
Thanks in advance!!
 
********************************************
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 3/10/2012 10:44:31 AM
System Uptime: 1/7/2005 6:12:05 PM (83176 hours ago)
.
Motherboard: Dell Inc. |  | 0GDG8Y      
Processor: Intel® Core™ i5-2400 CPU @ 3.10GHz | CPU 1 | 3101/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 454 GiB total, 332.036 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Description: Photosmart C6300 series
Device ID: ROOT\IMAGE\0000
Manufacturer: HP
Name: Photosmart C6300 series
PNP Device ID: ROOT\IMAGE\0000
Service: StillCam
.
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Photosmart C6300 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C6300 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:
.
==== System Restore Points ===================
.
RP147: 6/8/2014 8:26:08 AM - Scheduled Checkpoint
RP148: 6/13/2014 3:00:48 AM - Windows Update
RP149: 6/21/2014 12:00:07 AM - Scheduled Checkpoint
RP150: 7/5/2014 5:23:35 AM - avast! antivirus system restore point
RP151: 7/5/2014 6:14:52 PM - Windows Update
.
==== Image File Execution Options =============
.
.
==== Installed Programs ======================
.
.
==== End Of File ===========================
 

Relevance 100%
Preferred Solution: avast! Web Shield has blocked a harmful webpage or file - explorer.exe

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: avast! Web Shield has blocked a harmful webpage or file - explorer.exe

Hi there,this is malware for sure. Please run the following scans:Step 1Please download TDSSKiller and save it to your Desktop.Start tdsskiller.exe with administrator privileges.Accept the EULA and the KSN Statement.Click on Change parameters.Make sure that all available options (except "Loaded modules") are checked and click OK.Click on Start scan.If any threats are found don't delete them but choose the Skip option for all of them.Click on Report to open the log file. (It is also saved at C:\TDSSKiller.<version_date_time>_log.txt).Copy and paste its contents in your next reply.Step 2Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

11 more replies
Relevance 117.45%

I get this specific error "avast! Web Shield has blocked a harmful webpage or file
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe"
 
Everytime I opened up google, I actually removed avast thinking malwarebytes would remove it, but it didn't. I did multiple threat runs on avast + malware, stuff showed up I got rid of it, yet it's still here. I don't see the error anymore only because I removed the avast, I want to get rid of it could someone help me.
 
I also get something called Nexxtcoup on my google extensions, everytime I remove it, I'll close google and then bam it's back there.

Answer:avast! Web Shield has blocked a harmful webpage or file

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkma... Read more

1 more replies
Relevance 117.45%

Hello I'm having problems with the Avast! web shield popping up very often and have no idea what to do. Pop ups go along the line of
 
Avast Web Shield has blocked a harmful webpage or file.
  Object:  htp://filesonlinehere.com/sync/?rmbs=...
Infection:  URL:Mal
Process:  C:\Program Files (x86)\...\chrome.exe
 
I have posted the DDS log below
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 10.67.2
Run by LEOLEOLEOLEO at 1:06:42 on 2015-01-11
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8141.4816 [GMT -8:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first t... Read more

11 more replies
Relevance 117.45%

I'm sure you've seen these topics before...
I need some help about the constant popups avast has given me FOR EXAMPLE
 
Avast Web Shield has blocked a harmful webpage or file.Object:  htp://filesonlinehere.com/sync/?rmbs=...Infection:  URL:MalProcess:  C:\Program Files (x86)\...\chrome.exe
 

 
If there is anything I need to provide, please elaborate and I will be grateful to supply it

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

18 more replies
Relevance 117.45%

Hello!
 
I installed Avast recently and have the premium trial version of it at the moment. Every so often, there's a notification that pops up with "Avast! Web Shield has blocked a harmful webpage or file", and some random website. It notifies that it's running through Chrome even when I'm not currently running it (I'm mostly using Firefox). I believe my computer may be infected because I started seeing ads that appear normally where they shouldn't (with a description like ads by deall2ddeualit), and some Firefox addons that enabled these ads that were installed without me knowing about it.
Somewhat related, I allowed a scan from Avast of the computer files while it was booting up and accidentally unplugged the power which turned off the computer mid scan. When I booted it up again, I was entered into something like a temporary account where all my saved documents were pretty much gone. After another reboot, it did the same thing except now it stated that the copy of windows was not genuine. And after a third reboot, everything seemed restored. However, it feels as though start up is somewhat slow now. I'm not quite sure what happened here.
I'm not quite sure where to start, but I believe I need to provide a log? How do I go about doing that?

 

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/545315 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 117.45%

For a week, I have been getting constant alerts from Avast!, and since I updated Malwarebytes, it is also giving me alerts.
 
Avast! Alert: 
Avast! Web Shield has blocked a harmful webpage or file.
Object: http://brozblagrom-c2.com/online/526 (This changes with ever new alert popup, usualy 6 or more will show up at once)
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe
 
Malwarebytes Alert: 
Malicious Website Blocked
Domain: forteen-meters7.me
IP: 5.45.6.199
Port: 50271
Type: Outbound
Process: C:\Windows\System32\svchost.exe
 
 

DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 9.0.8112.16457  BrowserJavaVersion: 10.45.2
Run by Kistoway at 16:17:04 on 2014-06-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3564.1531 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microso... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/539339 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

11 more replies
Relevance 117.45%

Good Day
 
I have an Avast Premier antivirus
and recently this pop-up has been coming up frequently(actualy starting to be annoying now)
I have done a full scan and nothing seems to help.
I have attached the logs i ran with DDS
help would be apreciated,
thanx
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.17207  BrowserJavaVersion: 10.67.2
Run by user at 9:02:46 on 2014-08-08
Microsoft Windows 7 Professional   6.1.7601.1.1252.44.1033.18.1954.340 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\BlueStacks\HD-LogRotatorService.exe
C:\Users\user\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe
C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explor... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello tonata I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

15 more replies
Relevance 116.29%

Hi, My laptop keeps getting a popup from avast stating this below Avast web shield has blocked a harmful webpage or file Object:  http://weath4us.info/qOxXS:f<GM///Infection:  URL:MalC:\users\joseph\AppData\Roaming\CrashRep\GUP.exe Joseph is the user of this laptop.  This popup come up whether I'm browsing the internet or just on my desktop in word or something similar.  I have run spybot and only thing it finds is Browser:cache for internet explorer.  I have windows 10 home on a Toshiba Satellite.  What do I need to do?  Do I have a virus on my laptop? Thanks,Joseph   Here is the log info  --------------------------------------------------------------------------- SecurityCheck by glax24 v.1.4.0.32 [01.11.15]WebSite: www.safezone.ccDateLog: 24.12.2015 00:27:43Path starting: C:\Users\Joseph\AppData\Local\Temp\SecurityCheck\SecurityCheck.exeLog directory: C:\SecurityCheck\IsAdmin: TrueUser: JosephVersionXML: 2.20is-21.12.2015___________________________________________________________________________Windows 10(6.3.10586) (x64) Core Lang: English(0409)Installation date OS: 21.12.2015 01:01:20LicenseStatus: Office 15, OfficeO365ProPlusR_Subscription1 edition Timebased activation will expire :84194 minutesLicenseStatus: Windows®, Core edition The machine is permanently activated.Boot Mode: NormalDefault Browser: C:\WINDOWS\system32\LaunchWinApp.exeSystemDrive: C: FS: [NTFS] Capacity: [... Read more

Answer:Avast Web Shield has blocked a harmful webpage or file.... am I infected

Uninstall Spybot from your machine. Then Download Security Check to your desktop, right click it run as administrator. When the program completes, the tool will automatically open a log file, please post that log here in your next post.
 
Adware Cleaner Scan.
 
Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
JRT Scan.
Please download Junkware Removal Tool and save it on your desktop.
 
Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log is saved to your desktop and will automatically open.
Please post the JRT log.
 
Adware Removal Tool Scan.
 
Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.
 
 

 
Hit Ok.
 

 
Hit next m... Read more

5 more replies
Relevance 116.29%

Hi there, My laptop and i are in deep trouble. 2 days ago, i was trying to download a game from the internet and it got me to this. i was opening a lot of links and pages, installing and uninstalling a lot of stuffs and right now, im in big trouble. There is an ads keep popping up on the bottom right corner of my desktop, and it keep on popping up throughout the day. at first it was a chinese game ads and then it becomes a chinese shopping ads and others. it pops up everytime i turn on my computer, and i wasnt even on the browser and it pops up. soon after that, my antivirus which is avast keep on giving this message 'Avast! Web Shield has blocked a harmful webpage or file URL: hxxttp://js.union001.com/PClick.aspx?AID=19927&KEY=CF3C8B99B339869B0A2895A79B102D884535DEAF40EC8624Infection: URL:MalProcess: C:\Program Files (x86)\t_201601210117\201601210117\lsas.exe.it is so annoying and i dont know how to fix this. I have read through some of the forum here, but still i do not understand what should i do first. would someone please help me. i do not wish to format my laptop please. im running windows 7 X64bit. im very grateful if someone could provide me steps by steps instruction so that i could catch up on what to do and im new here. thank you very much for any of your help.

Answer:'Avast! Web Shield has blocked a harmful webpage or file' with ads keep popping

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

6 more replies
Relevance 116.29%

I keep getting messages from avast saying it is blocking a webpage or file. My task manager shows there are a lot of processes running. My computer is acting really slow now, and it started making buzzing noises, and on startup the fan is making an incredible racket as well. Malwarebytes hasn't found anything. What should I do? I saw other people post, but there were warnings not to repeat these things. 
 
Each warning has three fields, object: infection: and Process: 
usually says http;//f0fff0...... or fa8072 or maybe go.wymedia
 
infection is always url mal
 and process is generally windows syswow64/dllhost or program files....iexplores/exe

Answer:Avast popup - web shield has blocked harmful webpage or file

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

20 more replies
Relevance 114.84%

I have a problem similar to this post ( http://www.bleepingcomputer.com/forums/t/531503/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-all-the-time/ ) and was hoping for some help.
 
2 or three days ago I started having frequent messages from Avast! about harmful pages. 
Ex. http://tinypic.com/view.php?pic=mt76m0&s=8#.U5n3YfldWSo
 
 
The gist of the message is:
 
Object: hxxp://getmeegan.info/?e=svon&publisher=1091&dd=4&country=US&ind=531952001116606
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe
 
Avast! takes me to this page when I click more details on the pop-up: http://tinypic.com/view.php?pic=epoho6&s=8#.U5n4VPldWSo
 
The messages information have been consistent, the same Object, Infection type, and Process.
 
 
My laptop has been fine except I get constant messages from Avast causing me to worry.
 
Thank you for reading this.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17126  BrowserJavaVersion: 10.55.2
Run by Mumsie at 12:14:48 on 2014-06-12
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Launch Manager\dsiwmis.exe
C:\Program Files (x86)\Launch Manag... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" coming up frequently

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

2 more replies
Relevance 114.84%

Just like what is described in these two topics (http://www.bleepingcomputer.com/forums/t/531503/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-all-the-time/ & http://www.bleepingcomputer.com/forums/t/537505/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-frequently/).
 
As in the other posts my laptop restarted itself last night and since then whenever I have been connected to the internet I keep receiving notifications from Avast saying that a threat was blocked:
 
Object:http://getmeegan.info/?e=svon&cht=2&dcu=1&cpatch=2&dcs=1&pf=1&publisher=1091&dd=4&country=AU&.....
 
Infection:URL:Mal
 
Process:C:\Windows\System32\svchost.exe
 
The notifications are all the same and come in pairs(two at a time), I have tried following this guide with no luck (http://necroneurology.hubpages.com/hub/How-to-EASILY-remove-the-svchostexe-Trojan)
 
 
If anyone has anytime to help out I would be really grateful.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17126  BrowserJavaVersion: 10.60.2
Run by k at 0:16:26 on 2014-06-25
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.64.1033.18.3986.1200 [GMT 10:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" constant notifications

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/538830 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

12 more replies
Relevance 114.84%

Hello! Hope I'm in the right place!
 
Last night I was just playing RuneScape and had two safe webpages open, when suddenly my computer restarted on its own for no reason. After restarting, I logged back in and now my Avast! keeps popping up saying that it has blocked a malicious URL, even when I'm not using the internet. Here is what it says:
 
avast! Web Shield has blocked a harmful webpage or file
 
Object: (Various, I will post pictures)
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe
 
I have ran Malwarebytes, Rkill, aswMBR, and Avast, all have come up clean except Malwarebytes, I will post my logs for aswMBR and Rkill as I do not know how for Avast! and every time I try to export my log for MBAM it keeps crashing. 
 
This isn't affecting my computer's performance, other than the MBAM thing, but it is very annoying and I hope someone can help me solve this issue. 
aswMBR log: aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software
Run date: 2014-04-17 22:32:39
-----------------------------
22:32:39.365    OS Version: Windows x64 6.1.7601 Service Pack 1
22:32:39.365    Number of processors: 4 586 0x2A07
22:32:39.366    ComputerName: DAVIDSIMON-PC  UserName: David Simon
22:32:41.122    Initialize success
22:32:43.930    AVAST engine defs: 14041703
22:32:56.680    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
22:32:56.... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" coming up all the time

Hello,
 
 
I think that you have Zekos (Pigeon) on board:
 
 * C:\Windows\System32\rpcss.dll : 515,072 : 11/20/2010 11:24 PM : d8d58144e133b0d429b69671f1300cb2 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll : 512,000 : 11/20/2010 11:24 PM : 5c627d1b1138676c0a7ab2c2c190d123 [Pos Repl]

 
Your topic should be moved to the MRT area where more tools are allowed.
 
 
Regards,
Georgi

18 more replies
Relevance 107.3%

Good day,
 
I've been getting a lot of alert from avast as per the topic title. The specifics of it are as below
 
Object: hxxp://69.65.5.105/ (Changed tt to xx in the URL for obvious reason)
Infection: URL:Mal
Process: C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
 
Avast will keep on alerting me at a very random interval. sometimes as often as once every 4-5 minutes. When I stop the FileZilla Server service, the alert will stop too. As soon as I start the service again, avast will immediately start alerting me again. One peculiar things I have noticed since avast started alerting me on this is that I cannot download any file directly from the browser (Chrome, Firefox) anymore. I started noticing this one when I wanted to download DDS. 
 
Anyway, I've got my hand on the DDS software from another PC. Unfortunately running the software gave me the following error message
 
"DDS is not meant to run in 'Compatibility Mode'. The program shall now exit."
 
Thus I'm not able to produce the logs to accompany this post. By the way, I'm using Windows 8.1 Pro (64-bit). I'm pretty sure I'm infected and any help will be much appreciated.

Answer:Avast web shield has blocked a harmful webpage

Hello and Welcome on board ,my Name is Machiavelli and I will assist you with your problem.If you booted into safe mode on your computer then print my instructions!I'm in the 'Malware Staff Team' and will provide you with advice:To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.Below are a few tips:Removing Malware is usually very difficult.We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!Please follow these instructionsIf you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!Please stay in contact with me until your problem is resolvedAs Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.Please don't run any other tools without consulting with me as this can complicate finding and removing all MalwareDon't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!Read my post completelyIf you don't do so, you may make mistakes that could result in your System crashing by your own ... Read more

4 more replies
Relevance 85.26%

Have to preface this all by saying that I am working on this for someone this is not my computer.Currently getting the avast! Web Shield pop up stating that it is blocking the website below.
 
Object: https://svadxbtuc8c.com
Infection: URL:Mal
Process: C:\Windows\explorer.exe
 
 
 
Below is the DDS log as requested per instructions.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17344  BrowserJavaVersion: 10.71.2
Run by Richard Reina at 0:20:54 on 2014-10-25
#Option Extended Search is enabled.
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.1950.930 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ar... Read more

Answer:Avast! web sheild blocked harmful webpage

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/553232 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 84.39%

Hello,
 
Today my Avast Antivirus diplayed several pop-ups notifying me that it had blocked several harmful files. My computer also prompted me numerous times to open a command prompt in Windows, but I kept denying/cancelling these prompts. After closing the messages, I began the process of discovering what was wrong, and I kept receiving Avast pop-ups every 30 seconds or so. These messages notify me that "Avast Web Shield has blocked a harmful webpage or file," and they all show the Infection "URL: Mal." The Process is usually located in C:\\Windows\explorer.exe.
 
I have run several Malware and virus removal tools, including my Avast Antivirus scanner, Malwarebytes, adwcleaner, HitmanPro, TFC, and JRT. However, the problem still persists. It does not matter if I have a web browser open (I use Firefox), and the pop-ups only stop once I disconnect from the internet.
 
Below I have pasted my FRST file, and I have attached the Addition file to this post. Your help would be greatly appreciated. Thank you.
--------------------------------------------------------------------------------------------------------------
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
Ran by pwarant (administrator) on POO (01-11-2015 23:38:27)
Running from C:\Users\pwarant\Desktop
Loaded Profiles: pwarant (Available Profiles: pwarant)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode:... Read more

Answer:Infection of URL:Mal & Avast "blocked harmful webpage" keeps displaying

hi,
 
If you still need help you can do this. Iam usually only on this site once or twice per day so you may not get a response back from me until the following day.
 
Copy paste whats below inside the box into notepad.
Save it as fixlist.txt in the same location you have FRST, your desktop.
Start FRST like you did before except this time click on the Fix button once. Machine may reboot to finish. After its down you will find a new log on the desktop called fixlog.txt.
Please copy/paste fixlog.txt in your reply

HKU\S-1-5-21-3255076510-885755254-634479317-1001\...\Run: [2112293204] => regsvr32.exe "C:\ProgramData\Ligdi\Juygim.dll"
C:\ProgramData\Ligdi\Juygim.dll
EmptyTemp:

4 more replies
Relevance 76.27%
Answer:repeated alerts from avast about blocking a harmful webpage or file

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

7 more replies
Relevance 96.35%

Hi
I keep getting the warning "Blocked harmful webpage" every 2 or 3 seconds from Avast and Malwarebyts, it's a real pain.
I have followed the Malware Removal/Cleaning Procedure and have attached logs except for Hitman because it said my license expired in 2014-02-01.

chubb3g114
 

Answer:Blocked harmful webpage.

Hello, chubb3g114

HitmanPro should still scan and produce a log, even with the expired license. What happened to the TDSSKiller log?
 

12 more replies
Relevance 95.12%

Hello, Thanks for being there for us.
I have a problem with my computer. After downloading a PDF file which instead of opening, suddenly disappeared and I cannot locate it. From there on whenever I open Firefox or iexplorer, Avast starts alerting me that it’s blocking a harmful website or file. Although these alerts stop when I go offline and so far the computer is running properly. Kindly assist me to fix this problem.
 
Thanks alot.
 
Taha

Answer:Avast web shield blocking harmful website whenever i go online

Hello Taha,please run a FRST scan to start with:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

9 more replies
Relevance 93.07%

Hi I am new to BleepingComputer but would like to thank you guys for the great work you do.  It's great to see you guys helping so many out!
 
My issue started with some music download through Soundcloud links (from artists I thought were big enough to be trusted).  Unfortunately the links would not work in firefox so I ended up using IE which had an update downlaoded but apparently not installed.  My power runs out after while and my computer restarts. 
 
Upon restarting I am greated by a pop-up for Java updates, which I started.  However, during the update I could hear an online ad or tv through my speakers but it was very glitchy and cutting out all the time.  The only thing I had open at this point was the java update and I could not see where the add was coming from.  At the same time Avast started sending pop-ups saying that a harfmul webpage was stopped with the process: C:\Windows\System32\Svchost.exe.  The java update failed with some error.  I ended another Java process in task manager and I have not heard the audio ads since.
 
I knew something was up and tried running my Avast, MalwareBytes, HitmanPro, SuperAntiSpyware, etc...
 
I went through a lot of running various virus/spyware programs and ended up following a bleepingcomputer incident from a while back (by Bleepin Gringo):
http://www.bleepingcomputer.com/forums/t/493755/avast-popup-malicious-url-blocked-and-malware-blocked-from-svchostexe/
... Read more

Answer:Harmful Webpage Blocked; Svchost.exe; Java-related?

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/531530 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 91.02%

My computer seems to be infected. I scanned it with my antivirus (avast) which found many infected
files. However it is still infected: avast detects threat frequently caused by attempts to go to some
malicious web pages coming from dllhost.exe and iedxplore.exe. I run mbam but it does not detect
anything (it detected one file the first time I run it). below I post the log files from the first and second run
and the dds files.

First run of mbam:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12/27/2014
Scan Time: 3:36:59 PM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.27.07
Rootkit Database: v2014.12.23.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8
CPU: x64
File System: NTFS
User: marcinm

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 317115
Time Elapsed: 14 min, 50 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
Trojan.Agent.ED, C:\Users\marcinm\AppData\Local\Temp\BC6.tmp, Quarantined, [ac27f7707ffd69cdc7ca52ac2ed36997],

Physical Sectors: 0
(No malicious items dete... Read more

Answer:Infection dllhost.exe causing avast to block harmful webpage very frequently

Welcome aboard

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

=========================================

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2
Close all the running programs
Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
Otherwise just double-click on RogueKiller.exe
Pre-scan will start. Let it finish.
Click on SCAN button.
Wait until the Status box shows Scan Finished
Click on Delete.
Wait until the Status box shows Dele... Read more

17 more replies
Relevance 90.61%

Hi all,
this is my first time posting here, thanks in advance for your help.

I keep getting a warning from Avast that it has blocked a harmful url. This happens when I dont even have the internet open. This is what I've done so far. The file source in the warning points to this file, docprop32.exe

I ran Malware bytes(dont have the logs from that)it found some stuff, I deleted and restarted. Didn't work.

I ran eset online scanner, found and eliminated some threats, restarted, didn't work.

I ran avast boot time scan which didnt find squat.

When I get the warning from avast I see this in the source file path docprop32.exe, i researched it and it appears to be some sort of virus.

here's my dds log
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_13
Run by Dave Edwards at 19:14:48 on 2011-08-21
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.473 [GMT -5:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\AVAST So... Read more

Answer:Avast randomly notifies me that it blocked a harmful url even when offline

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/415504 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 72.98%

Purchased avast internet security in November 2011. It's suddenly stopped working. "Fix Now" button not responding and unable to restart program as I'm being advised that the file system shield is unreachable! Any idea what's happened? Please help.
Angie.

Answer:avast internet security: file system shield

You have posted this twice - to avoid confusion:-
Please tick this thread as resolved (click the rigt hand column) and do as suggested in the other thread and reinstall avast.

1 more replies
Relevance 72.98%

Q. 1.There is a Heuristic Scale and Test Whole file box in File shield.
Should I Scale up it to high (from normal) and check the "Test whole File" box, for better protection?

Q 2. There are two tabs in File Shield settings, "Scan when opening" and "Scan when Writing"
Should I tick the Scan All files in both Opening and Writing for better Protection? (It will scan all files that are being opened or written in the system but there will be negative impact that IDC)

Q. 3. Should I tick "All Packers" or go with Default packers.

Q. 4. Should I activate Avast Aggressive Hardened mode because I don't like Voodooshield as it shows its Pro Version Advertisement in every Startup which is too much annoying for me.
 

More replies
Relevance 70.52%

I have looking at my network shield in Avast! Pro. I've noticed that whenever I open save file prompt I see http://127.0.0.1.:5357/767aa349-1aa1...-01eb939773ce/ spike.
It does not indicate infection and just goes on, is this stuff normal?

Malwarebytes doesn't see anything wrong. I generally get a http://192.168.1.1:5678/igd.xml spike precedes the 127... spike

Avast boot scan also finds nothing
Typing http://127.0.0.1.:5357/767aa349-1aa1...-01eb939773ce/ into Run gets "Bad Request - Invalid Hostname

HTTP Error 400. The request hostname is invalid."
Can anyone else on Win 7 Home Premium 64-bit try this for themselves?

Open a save file prompt and look at your network shield at the same time and see if that connection or a similar connection shows up.

I don't seem to have any weird issues otherwise.

I have attached the DDS stuff

Answer:Weird spike in Avast network shield whenever opening a save file prompt

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help


Quote:




NOTE: We are aware that users sometimes seek help from several Forums at the same time. Unfortunately, this can cause confusion and actually wastes time and resources - yours, ours and other Volunteers across the community. If you have already posted at another Forum, please advise us, or them, and choose just one.




As this issue is being addressed at the Avast forums, this topic is now closed.

1 more replies
Relevance 67.65%

I am having a problem in my sister's laptop. She does have antivirus installed (AVG Internet Security). However, its license expired, so I downgraded it to free version. After, downgrading it, I installed Avast! as it's antivirus and decided to uninstall AVG. Then, a few minutes ago after rebooting the laptop, a window opened saying that Trojan is infecting my computer, I heal it.. Then, another pops out. Heal and heal and heal..

After doing it, I rebooted the laptop thinking that it will refresh the system. Unfortunately, after rebooting, I cannot connect to Internet now. :cry :cry :cry Help me please? I already performed the Malware removing however, it did not help the laptop. I attached the files you asked me.. Please, help please? Thank you!
 

Answer:Avast error code 10050/No internet connection/Cannot start web shield in Avast

Welcome to Major Geeks!

Please attach the below log from Malwarebytes as requested:
Code:

"C:\Users\MSI\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\"
Oct 23 2012 11802 "mbam-log-2012-10-23 (21-32-26).txt"

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista or Win 7, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=101702
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.searchcompletion.com?si=29053&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.searchcompletion.com?si=29053&bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchcompletion.com?si=29053&home=true
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R1... Read more

1 more replies
Relevance 67.65%

End webcam spying ? for good ? with Webcam Shield and Avast Premier

Essentially, with Webcam Shield you have total control over what (and who!) uses your camera. This means you can now force any app to ask your permission before it can access your webcam.

Simply put, Webcam Shield promises to:
Protect Privacy
Give you total control over your webcam
Help prevent blackmail
With webcams now embedded in so many devices, it?s never been more important to protect yourself and your family from prying eyes and those with unknown motives.

& +

Automatically fix and update over 127,000 drivers for peak PC performance
Less crashing Faster browsing Better graphics Richer audio Fewer device problems

Print, scan, import files. Play crystal clear videos and make crackle-free voice calls. Avast Driver Updater auto-scans and updates your drivers to reduce and prevent problems with:

Printers and scanners, Photo and video cameras, Headphones and speakers, Mouse and keyboards, Monitors and Wifi routers, and other external devices.

MORE : Avast Driver Updater & Scanner | For Peak PC Performance
 

Answer:Avast have new tools: Webcam Shield feature & Avast Driver Updater.

Windows has webcam shield built-in. It works great!
 

0 more replies
Relevance 67.65%

 help me msiexec.exe is so annoying keeps alerting fme for harmful webpage or file. always alerting me for atleast 2 times in 5 minutes. help me.

Answer:help me msiexec.exe is so annoying keeps alerting fme for harmful webpage.

Avast is telling you that it has possibly found a fake msiexec.exe. Best not to ignore that. Suggest you scan using the programs below to find and remove the culprit.
EDIT: Avast is blocking access to a website known as malicious....possibly a botnet control one. See Scan report for http://differentia.ru/diff.php at 2015-08-10 06:31:56 UTC - VirusTotal
 
Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the
Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.
After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.
CCleaner - PC Optimization and Cleaning - Free Download
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
If you receive a message that updates are available, click the Update Now button (the update will be downl... Read more

21 more replies
Relevance 66.01%

Malwarebytes and the virus tool that comes with my isp keep blocking websites when I am not even browsing the internet. The block message refers to the process sysWOW64 dllhost. The websites that get block vary, but fff5see is one of them. It causes Internet Explorer to crash also even when I don't have a window open. It does it for IE 9, 10, and 11. (I only had one version installed at a time.) 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16584  BrowserJavaVersion: 10.71.2
Run by Wiggs at 19:41:35 on 2014-11-09
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8080.3494 [GMT -5:00]
.
AV: Computer Security *Enabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
SP: Computer Security *Enabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C... Read more

Answer:Harmful websites blocked when I am not even on the computer

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/555463 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 65.6%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Pentium(R) CPU 2127U @ 1.90GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 2
RAM: 3983 Mb
Graphics Card: Intel(R) HD Graphics, 1799 Mb
Hard Drives: C: Total - 460856 MB, Free - 385827 MB;
Motherboard: Dell Inc., 0FXP6Y
Antivirus: avast! Antivirus, Updated and Enabled
Of course after I just got help for my sister's laptop, now it seems I'm infected with something. Everytime I open my Google browser I keep getting popups from Avast saying it blocked a harmful webpage. Such as:
homedatastars.co
takethefilenow.co
yourdownloadplace.com
URL:mal
In programs files...chrome.exe

I installed Adware Cleaner and copied and pasted the following report.

# AdwCleaner v3.311 - Report created 10/10/2014 at 02:10:51
# Updated 30/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : smorovic - SMOROVIC-PC
# Running from : C:\Users\smorovic\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : 70e6ca8c

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\smorovic\Documents\Online

***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****

Key Deleted : HKCU\Software\BRS
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Dele... Read more

More replies
Relevance 63.55%

update the virus definitions

it really started to slow down while browsing after the last update, before that one, just a bit

but know its really hogging up my slow pc's power 8(

i have winxp 32bit
1.3gig processor
640mb total memory

Answer:will rolling back my avast program version be harmful for security, even tho i

In the long run it will.Newer versions of anti-virus products typically include improvements in technology, methodology, scanning engine, malware detection and removal, etc.Rather than using an older version of avast!, you could switch to another anti-virus solution which may perform better with your system....see Choosing an Anti-Virus Program.

0 more replies
Relevance 63.14%

Hello,
The avast has kept popping up saying "Malicious URL Blocked" and "Malware Blocked". These will show up about every 5 minutes and come in groups, if that makes since!
 
Thanks for your guys' help!
 

Answer:Avast popup "Malicious URL Blocked" and "Malware Blocked" from svchost.exe

Hello basinski I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same"... Read more

15 more replies
Relevance 61.91%

Hi Every1

I'm not talking about printing to PDF, where I send up with a different looking thing (because of a print.css file) with page breaks, but a real "Save as PDF" function.
i installed ADOBE ACROBAT 9 PRO AND 10 BUT BOTH OF THEM FAILED AT THE END

a message coming like this

THIS APPLICATION CANNOT BE INSTALL N THIS OPERATION SYSTEM
SETUP WILL NOW TERMINATE.PLEASE REFER TO MINIMUM SYSTEM REQUIREMENTS

PLZ HELP ME IN THIS

Answer:How do I save a webpage as a PDF file in Firefox or Internet Explorer?

I have several ideas. The first and most obvious is that your computer does not meet the minimum requirements to perform the task specified. Are you using minimum ram etc?
The second idea is to try this add on. I dont know the results or if they will be good or bad
Convert Web Page to PDF - #1 Web to PDF Converter
A third solution that I found in Google, which helped one person, was to uninstall and install the software again.
I wish you luck. This is not a problem that I have encountered or have helped others.

10 more replies
Relevance 61.91%

I can not save a webpage as pdf in Microsoft internet explorer. How can I save a webpage as pdf file in Microsoft internet explorer? please give me its solution.

More replies
Relevance 60.68%

I have installed the latest version of HSS recently. I have no idea why when i try to connect and my IE says cannot display the webpage.

OS: win 7 (32bit)

Any idea????

thanks

Answer:Hotspot Shield (IE cannot display the webpage)

  
Quote: Originally Posted by horizon3333


I have installed the latest version of HSS recently. I have no idea why when i try to connect and my IE says cannot display the webpage.

OS: win 7 (32bit)

Any idea????

thanks



Probably javascript is blocked in the browser

1 more replies
Relevance 60.68%

Hello!
I'm new to the forums and not very PC or tech savvy! Just bought a new Dell Inspiron and noticed a clicking sound every few seconds. It sounds very much like the sound Explorer uses when a new folder or webpage opens. However, I hear it even when I'm not connect to the internet, not opening anything, and even when the speaker volume is turned off. Seems like it's coming from the left side, underneath.

I did some online research that mentioned audio driver issues, interference and/or ISP issues with start-up. I've moved the laptop around and still hear it, to rule out interference.

I've only had this laptop for two weeks, just last week it ran its first update. I don't remember hearing the sound before that, but hadn't used it much. Hoping someone can help because it is driving me nuts.

Thank you!!!

Answer:Continuous clicking sound, like Explorer opening file/load webpage

Hi,
Welcome to the forum, have a look here:http://www.dell.com/support/article/...1/SLN145553/en

1 more replies
Relevance 60.27%

I have a Windows XP laptop that keeps poping up webpages that pretend to scan my machine and tell me I have multiple viruses. When You click anyware in the webpage another page is launched requesting to download anti virus software. It appears to be related to a RED SHIELD on the taskbar. Attached is the Hijack This Log file. Also, "task manager has been disabled by your administrator", but I think I got a fix for that.
Ad-Aware 2008 says the PC is clean.
 

More replies
Relevance 59.45%

I often unzip compressed folders sent to me by email containing several pdf files. When opened in file explorer the preview pane is blocked.

I have to right click and select properties, then click unblock button individually on each file if I want to preview them in the preview pane.

Does anyone know a way I can set an option either to not automatically block these files when transferred from compressed email attachment to the folder?

Or does anyone know a way I can use the parent directory and unblock all the files in all the subfolders at once?

Thanks in advance, I searched many hours and can't find the answer to this.

Tim

Answer:Unzipped files blocked from preview in file explorer?

As I understand it the Block option comes from a file having low integrity level (usual when dowloading from internet). It's part of the file permission system since Vista I think.

There are various utilities to modify those permissions, in your case the best bet is probably CHML, a little command-line app : chml: a tool to control Windows Integrity Levels

You can use it manually in a command prompt or make a .bat file to automatize, something like this should work :


Code:
D:
cd \PDF
for /r %%f in (*.*) do chml "%%f" -rl -b


This first line changes the current drive to D then the current working directory to \PDF, modify these lines as you see fit.
The last line removes integrity levels from all files in the folder (D:\PDF) and all its subfolders recursively (/r).
Copy the text in notepad then save as something.bat. Click on it to execute.

Note : I never noticed your problem when decompressing via 7-zip (7-Zip), maybe using that instead of the built-in windows zip might solve your problem...

2 more replies
Relevance 59.45%

when I use the twist as a tablet, and the auto rotate is on, I face two problems:first, webpage zoom (both chrome and firefox) changes randomly - sometimes every few seconds. second, when browsing files on my computer, the view options (list, details, tiles etc.) keeps changing randomly too.

More replies
Relevance 59.45%

There is a website that users login in to resolve remote issues,
The Login screen appears, they login. All is Fine.
They Logoof the Website.
Try to Login Again and just get a white screen.
I determined the issue is caused by a cookie the website drops into IE Temporary Folder.
As I delete that cookie and the login screen again appears and they can login, but process repeats when they logout.
I searched the Internet and found the following batch file that will delete all cookies....
@echo off
set Cookies=C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\
del /q /s /f "%Cookies%"

How do I change it to just delete 1 Cookie?
The cookie would be:
C:\Users\supcbn\AppData\Local\Microsoft\Windows\Temporary Internet Files\cookie:[email protected]/

More replies
Relevance 59.04%

I really like Avast AV very much. I have a question about the Web Shield part of the program. On the program itself, generally 6 of the 7 modules are running. I do not have Outlook or MS Exchange so for that area the program says, "The Program is Waiting for a Subsystem to Start." (or something like that.)

About once a month, maybe twice a month, I will notice 5 of the 7 providers running and the program will have one of the Web Shields running. However, it will say, "The Program is Waiting for a Subsystem to Start." (instead of saying, "The Provider is currently running." The funny part is that when I go to webpages and do a check, the Web Sheld is still scanning them. So on the Web Shield thing, what is Avast waiting for?

This is a common issue with the program based on Internet Searches. I don't know if this is a bug or the way that Avast 4.8 works. Can you also provide information about the two different shields that the program uses? One is the Web Shield, the other is called the P2P Shield.

The updates are working fine. Oh, it hasn't happend often enough, but so far the only way that I can get the Web Shield back to not saying, "The Program is Waiting for a Subsystem to Start." is to do a reboot.

Jack
 

Answer:Question About Avast 4.8 AV Web Shield?

Go to control panel and uninstall avast, when you try it it will display 4 choises choose repair.
Webshield scans scripts, cookies such stuff from yout browser.
And psp shield scans files downloaded from utorrent, limewire you can see them all if you right click avast icon choose on access protection contol psp program-customize.
 

2 more replies
Relevance 59.04%

Hello everyone I have a problem with my Toshiba laptop. Avast! Pro Antivirus keeps popping up from down right corner of my screen saying that Avast Web shield blocked malwarius web page or file. It's popping up literally every second and i need a solution how to stop this and remove viruses if I even have them. ( I already looked on web for solutions and everyone is saying different so i don't want to mess it all up).Edit: Topic moved from Windows 7 to AII ~ Computerxpds

Answer:Avast web shield problem, need help!

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

1 more replies
Relevance 59.04%

Now I can't access this site on another computer because I get the message: Avast Web Shield has blocked access to this page because the following certificate is invalid, SS1278353 Cloudflaressl.com. I've run the Avast software, Malwarebytes, Adwarecleaner, and 360 Total security to no avail.

What's up?
 

More replies
Relevance 58.22%

Hello,

My son got into some bad stuff which led me to this forum a few months back. After some research I went with Avast Anti Virus (free version), Malware Bytes (paid version), and Comodo Firewall (free version). I have had a lot of slow behavior when surfing and doing email. The cursor is unstable and I cannot type things without a long wait. I turned of the Avast Behavior Shield and everything is a lot better. What have I lost turing off this feature? There are still several other Avast Shields running along with the Malware Bytes and Comodo.

Any suggestions? Should I try a different AV program?

Thanks,

Dave

Answer:Avast 5 Behavior Shield Slows Down XP?

hello daveplaysbass,The behaviour shield is a bit of a mystery! There's quite a few questions about it on the Avast forums and no real answers. I think the guys on there have been waiting for months for a 'promised' explanation from an Avast official. Found out a few things tho. This is a quote from an interview with a Avast official ...."The Behavior Shield that we shipped in version 5.0 is a new component that is going to be further developed moving forward. For example, in version 5.1, we will be adding more sensors that will allow for even finer-grain filtering.For now, the Behavior Shield is focused on exploits coming via typical mechanisms (browser, PDF reader, and flash vulnerabilities, for example). It also closely monitors all kernel-mode code (drivers) loaded into the operating system, and is able to detect zero-day rootkits."So whilst it's new and not operating at it's fullest potential, it still is an important part of Avast!It's not supposed to use hardly any system resources, but a few people have had problems with it conflicting with other software. One person had the problem of it conflicting with the 'Payed' version of Malwarebytes. And thats interesting because my set up is the same as yours, Avast(free), Comodo firewall(free) but i have the Free version of Malwarebytes, and i have no problems with conflicts.Its worth checking to see if there's any information in the Behaviour Shield report( at the bottom of the Behaviour shield page) in th... Read more

1 more replies
Relevance 58.22%

Hi everyone,

new beta version 17.5.2298 is released.

What's new:
- Tiny Firewall for blocking EternalBlue exploit - (internal) It is a part of StreamFilter, turned ON/OFF by Online Shield
- internal fixes

As many of you are aware Avast and AVG are 1 company now. Cause development of 2 different UIs takes different time, in this beta we introduce Ransomware shield in AVG beta now. You can expect Ransomware shield in Avast in next betas.

If you wanna try Ransomware protection in AVG build, check this link:
- AVG Antivirus Beta 17.5.3017

Download links:
BETA testing - Overview & Download links
 

Answer:Finally,the ransomware shield in avast

Good, but why they need a whole new tiny shield for stopping an exploit and this has to go through beta and be delivered after tests!? There are firewalls for blocking ports like the Windows Firewall and the Avast one in paid solutions. Maybe it is a sign that they need something like Norton's IPS?
 

3 more replies
Relevance 58.22%

Hello!

Brand new computer (well, used, but new to me) and the same old virus problems.

The Avast Behavior Shield turns itself off every time I hit "Connect" on VZAccess manager during the last 24 hours. Avast does warn me that it's off and I click it back on manually. Says it's back on, but I have my doubts.

Particularly as when I tried to surf eBay, the website suddenly thought I lived in the Czech Republic. Yeah, I've changed my eBay password and my PayPal on a friend's clean computer already.

So here's the DDS log with the ATTACH, err, attached.

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.18377
Run by Lois at 19:58:07 on 2017-05-07
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2302.1316 [GMT -7:00]
.
AV: Avast Antivirus *Disabled/Updated* {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Avast Antivirus *Enabled/Updated* {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus *Disabled* {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\s... Read more

More replies
Relevance 58.22%

Greetings all! I apologize if this isn't the right place for this! I'm trying to help my boss get his computer squared away and I'm having issues with Avast Web Shield popping up constantly. As of the typing of this message, it seems to have slowed down a little bit, but I want to make sure the problem is solved and that there is not going to be any issues going forward for him!
 
I would try to do something myself, but every time I've searched anything online about this, it says that every case is different and that solutions only work in that particular situation.

Answer:Avast Web Shield Working Overtime

You have the option to turn off the Web Shield permanently according to the info in link below.
Turn Off (Disable, Pause) Avast Antivirus 2015
 

1 more replies
Relevance 58.22%

the behaviour shield is yet not improved....

i still see the shield is not yet fully operational on auto decide it should be able to block atleast 50% of malware beahviour atleast...

i see the behav shield records suspicious events but doesnt block them neither no alerts are displayed....why??

I saw all this in my tests...behav shield records suspicious events but doesnt display a pop-up and neither blocks it....

when avast sees something bad is suspicious is going on it should block it....what's the deal with that??
 

Answer:no improvement in avast 7 for behaviour shield.

Likely Behavior Shield uses heuristics analysis so therefore a file that's known to be malicious/suspicious will popup so for Sandbox feature too.

When its set to ask a behavior popup must shown with the option.
 

24 more replies
Relevance 58.22%

Last April, a gentle person from Europe helped someone with this same problem.  I tried to follow the advice, but find I need some help. What I've done: 1)  Run Malwarebytes software daily.2)  Uninstalled Avast and reinstalled it.3)  Installed IE 11.4)  Have trouble with downloads.  I get Current Security settings do not allow download.  I've gone into Internet Options and attempted to change all settings to allow file downloads.  I accomplished this once, but then it does not last.5)  I've run Tweaking.com, Windows Repair All-in-one. The Avast Web Shield is still popping up. Thanks for any help!Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

Answer:Avast Web Shield notifications appear constantly

Please run the following scans in the order they appear.
 
Please run Malwarebytes AntiMalware
 
Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 

 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 

 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 
 
3)  The scan will automatically run now.
 

 
 
4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions
 

 
 
5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes
 
 
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items. &... Read more

3 more replies
Relevance 58.22%

Every time I open firefox, a window or tab I get a frightfully well spoken lady telling me a threat has been detected. I've run malwarebytes (4 PUP detected and removed) and scanned with Avast (no problems detected). Only intrusion found recently is homepage hijacked by search engine which is OutBrowse sp4 but can't find it in programs (control Panel) to remove it. Any ideas pls?

Answer:Avast Web Shield threat detected

Take a read here - there is a LINK to download AdwCleaner which should be able to remove it.
outbrowse removal guide

2 more replies
Relevance 58.22%

I recently went from Avast 4.8 to Avast 5 and am pleased with the new version. I note that it has a Behavior Shield and can't recall if the earlier version also had. What I would like to know is this: does the Behavior Shield make Threatfire, which I also use, redundant?

Unfortunately, although I tried to glean an answer from Avast's Help Center, I do not know enough about computers to know what the description there of the Behavior Shield amounts to: it 'monitors all activity on your computer and detects and blocks any unusual activity that might indicate the presence of malware. It does this by continuously monitoring your computer's entry points using special sensors to identify anything suspicious.'

I have XP, SP 3.

Thanks in anticipation.

Answer:Avast 5's Behavior Shield and Threatfire

Behavior shield - monitors all activity on your computer and detects and bloxks any unusual activity that might indicate the presence of malware. It does this by continuously monitoring your computer's entry points using special sensors to identify anything suspicious.avast! 5.0 Quick User GuideThreatFire monitors your machines activity and uses an intelligent behavioral engine to alert you about malicious behavior rather than rely on signatures. - How ThreatFire WorksAs such there will be some redundancy using both but their technology is different and therefore, what is detected may vary.

2 more replies
Relevance 58.22%

Thanks for your time.

I just installed Antivir and felt naked without a web shield, so I reinstalled everything in Avast! except the standard shield.

In theory, this should work, however the apps froze on startup, so I set Avast! to launch after all other applications load and they seem to like each other now.

What I'm here to ask is whether this should theoretically cause any problems.

Please don't reply with, "OMG YOU ONLY NEED ONE ANTIVIRUS" because I am only running one antivirus. My reasoning for running both apps is so that the Avast! web shield will take effect during browsing, and Avira will handle everything locally. The issue I have with using Avast! for everything is that it seems to constantly scan all my files, without letting me set it to just "scan on application read/write" which causes major slowdowns.
 

Answer:Antivir + Avast (Web Shield Only) Compatibility

Wow no one has any experience with this pairing? That's amazing.
OK thanks anyway.
 

1 more replies
Relevance 58.22%

i'm having some problems with my broadband but have just notice that my avast is not running. whenever i try to start it up it says" unable to reach file system shield. shield unreachable. how can i get it going again, thanks

Answer:avast smart shield not running

an happen with a corrupt update. rmove avast with the removal tool click here and reinstall.

1 more replies
Relevance 57.81%

Please help I am trying to Setup Windows XP for a friend whose Windows won't boot.
Apparently it was switched straight off from the plug because Ctrl+Alt+Del wasn't working.

I tried to go on Safe Mode and to Repair but it won't let me it keeps failing and sending you on a loop. So I went to SetUp to change the boot location and from Hard Drive to CD ROM drive to boot from her CD, to install a new Windows.

But with 32 minutes left a box saying 'Hotspot Shield Helper Minipot' has not passed Windows Logo testing, this blocks all progress. If You click Yes Continue the box reappears, if you click No likewise. Esc does nothing. Switching off normally from the ON/OFF switch does nothing.

I'm stuck. What shall I do? About 20% of the installation seems to have finished and the bar is stuck at Installing Network.

Please any guesses or suggestions would be gratefuklly received.

Answer:Setup Windows XP blocked by Hotspot Shield - pls help

If you are trying to do a Repair Install then it is failing because it is looking for the Hotspot driver and not finding it. You are probably going to need to start again and format the partition and do a clean install of XP.

3 more replies
Relevance 57.81%

Hello,
For several days AVAST keeps popping up all the time messages like this one:
 
"MAIL SHIELD SECURITY EXCLUSION
Avast has indentified a problem with this site certificate.
You can add this certificate as an exclusion, if you are sure about it.
Click the 'View' button for more details about the certificate.
If you want to change your certificates/exclusions, please open the Windows Certificate browser and perform the required operations directly from within the system certificate storage.
Legitimate public sites and mail servers should not ask you to do this.
 
SERVER
Location: smtp.stcable.net
Process: C:\Windows\SysWOW64\regsvr32.exe
CERTIFICATE STATUS
This site attempts to identify itself with invalid information.
Problems:
The certificate is not trusted."

 
I either close it or select "CANCEL" but it starts to worry me. I saw another topic with the same problem but it's closed without solution. Here's the contents of the FRST.txt report:
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by USER (administrator) on ОЛЕГ-PC (14-11-2016 19:47:08)
Running from C:\Users\USER\Desktop
Loaded Profiles: USER & UpdatusUser (Available Profiles: USER & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser:... Read more

Answer:Avast keeps asking for Mail Shield Security Exclusions

I'm sorry for the second topic, the browser gave me internet error (or something) and I clicked refresh.

1 more replies
Relevance 57.81%

Hello,
For several days AVAST keeps popping up all the time messages like this one:
 
"MAIL SHIELD SECURITY EXCLUSION
Avast has indentified a problem with this site certificate.
You can add this certificate as an exclusion, if you are sure about it.
Click the 'View' button for more details about the certificate.
If you want to change your certificates/exclusions, please open the Windows Certificate browser and perform the required operations directly from within the system certificate storage.
Legitimate public sites and mail servers should not ask you to do this.
 
SERVER
Location: smtp.stcable.net
Process: C:\Windows\SysWOW64\regsvr32.exe
CERTIFICATE STATUS
This site attempts to identify itself with invalid information.
Problems:
The certificate is not trusted."

 
I either close it or select "CANCEL" but it starts to worry me. I saw another topic with the same problem but it's closed without solution. Here's the contents of the FRST.txt report:
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by USER (administrator) on ОЛЕГ-PC (14-11-2016 19:47:08)
Running from C:\Users\USER\Desktop
Loaded Profiles: USER & UpdatusUser (Available Profiles: USER & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser:... Read more

More replies
Relevance 57.81%

S y s t e m I n f o r m a t i o n

OS Name Microsoft Windows 7 Ultimate
Version 6.1.7600 Build 7600
System Manufacturer INTELR
System Model AWRDACPI
System Type X86-based PC
Processor Intel(R) Pentium(R) 4 CPU 2.40GHz, 2394 Mhz, 1 Core(s), 1 Logical Processor(s)
BIOS Version/Date Phoenix Technologies, LTD 6.00 PG, 27/01/2004
SMBIOS Version 2.2
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Hardware Abstraction Layer Version = "6.1.7600.16385"
Installed Physical Memory (RAM) 1.50 GB
Available Physical Memory 536 MB
Total Virtual Memory 3.00 GB
Available Virtual Memory 1.69 GB

I installed AVAST Free Antivirus Version 5.0.677

Enabled the REAL-TIME SHIELDS (which include 7 options) all listed below:

File System Shield
Mail Shield
Web Shield
P2P Shield
IM Shield
Network Shield
Behavior Shield

I'm only able to enable 6 of the 7 Shields without locking out all internet web page traffic loading.
Every time I enable the WEB SHIELD it prevents any pages loading.

My questions are why, how do I correct it & what exposure does it present not having it enabled???

Any help to resolve these issues would be really appreciated.!
 

More replies
Relevance 57.4%
Question: blocked webpage

hello i can not open webpage shotonline worked fine 2 days ago but now just times out
can anyone help running windows 7
 

Answer:blocked webpage

Are you referring to this site: http://shotonline.gamescampus.com/ ? Or another site? Shotonline.com for example doesn't exist.
 

3 more replies
Relevance 56.99%

Hello Guys,
My system:
Toshiba  / Satellite C55-A   /  Intel ® Celeron  ® N2820
64 bit Windows 8.1
I am at the end of my rope. I have tried everything. First, let me say I am not good at technical things on a computer, just enough to be dangerous. So if some things I say seem crazy, they probably are.  So here is the story. About a week ago I received a email on my go daddy webmail.  www.login.securserver.net. That is how I long into that email. Now, that is not my main email. My main email is gmail, which I use the most.
The email I received on the go daddy email was a Notice of Apperance in Court #00406341. It contained a zip file,  Court Notification 00406341.zip.   Of course being stupid, I unzipped the file, thinking it was something important, since I have some court cases ongoing for business.
With research  I think it is a Kuluoz or another one that starts with  A.  cant remember.
It put a zip file in my downloads folder  Court_Notification_00406341.doc, which shows as File Type: Java Script file, 8.84kb.  That is the only one I noticed, not sure if they are more somewhere.  Then things started getting a little weird. Nothing major, I still get emails, still send them, and my system seems to be running normally, except for Avast Mail Shield security exclusions ,  It keeps poping up at least 40 times a day, saying 
 
Now, here I used to get different info, like websit... Read more

Answer:Avast keeps giving me Mail Shield Security Exclusions

hi,
 
We will start with FRST to remove some items from the log.
 
Usually Iam only on this site once or twice per day so you may not get a reply from me until the next day.
 
Copy/paste whats below in the box into notepad. Save it as fixlist.txt in the same location you have FRST, your desktop. Click the FRST icon like before and this time click on the fix button just once. When done you will find a fixlog on your desktop. Please post the fixlog in your reply. Machine may reboot to finish the process.

HKLM\...\Run: [] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Philip\tmp2098815588907764838.exe
C:\Users\Philip\tmp3347511962698503720.exe
C:\Users\Philip\tmp7839474401173251832.exe
2014-03-10 16:57 - 2014-03-10 16:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
SearchScopes: HKU\S-1-5-21-2793440623-1628646824-2415799637-1001 -> {21A3F5B1-BB9E-458A-815D-54E44AA350A8} URL =
CHR HKU\S-1-5-21-2793440623-16286... Read more

5 more replies
Relevance 56.99%

Working on a computer with 32-bit Vista. Windows Updates appear to be stuck - any updates are rolled back with the error of them "not being configured properly". Tried Googling and trying individual update solutions, but no luck.
 
PC had Microsoft Security Essentials installed, I removed it and installed Avast. Although Avast installs, the Web shield appears to be permanently disabled.
 
I have run Adwcleaner, Malwarebytes Anti-malware and Eset online scanner.  A few low-level threats were found and cleaned, but nothing has changed with the symptoms above.
 
Thanks for the help!
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Shari (administrator) on P2JOFFICE (21-03-2016 11:16:46)
Running from J:\
Loaded Profiles: Shari (Available Profiles: Denise Pauls & Shari)
Platform: Windows Vista ™ Home Premium (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST ... Read more

Answer:Vista not accepting updates & blocking Avast web shield

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===I need more information. Please run this tool.Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Pleas... Read more

16 more replies
Relevance 56.99%

Can anyone suggest the most appropriate settings for COMODO HIPS so that it would work with Avast behavior shield in tandem?
 

Answer:Avast Behavior Shield with COMODO HIPS. Which settings should I use?

U can use safe mode in comodo hips. It should work realy nice with the behavour shield from avast. Well, i would turn off hips totaly if u use comodo firewall and avast. there is no need for hips.
 

5 more replies
Relevance 56.99%

Every time I click on the Account hyperlink to access my YouTube account on YouTube Avast Network Shield blocks the attempt. This is obviously a false alarm but I don't see a option to edit it's block list or to make a exception though I see it for the Web Shield. Is there anyway to fix this or do I have to pause it each time I want to access the account page on YouTube because thats the only thing that works.
 

Answer:Avast Network Shield Blocks YouTube/Account

Outlawstar15a2 said:





Every time I click on the Account hyperlink to access my YouTube account on YouTube Avast Network Shield blocks the attempt. This is obviously a false alarm but I don't see a option to edit it's block list or to make a exception though I see it for the Web Shield. Is there anyway to fix this or do I have to pause it each time I want to access the account page on YouTube because thats the only thing that works.Click to expand...

You're not alone, see Avast forum. Avast has acknowledged the problem and an update should be available soon.
 

1 more replies
Relevance 56.99%

So basically I only installed the behavior shield from the avast installation wizard. I was thinking having Kaspersky as my main AV along with avast's behavior blocker is a good set up. However, admittingly I am a novice, and I don't know if these two will clash. So far, everything seems to be going smoothly, but the WD notification icon is displaying that X and is saying I shouldn't have more than one AV installed. Thanks.
 

Answer:Using Kaspersky free with only Avast Behavior Shield installed.

I personally think it should work ok running these 2 programs if Avast is only enabled for behavior blocking.
 

20 more replies
Relevance 56.99%

Greetings:
Very recently, whenever I use Internet Explorer, a very annoying message popped up and states the following:
“To help protect your computer, IE blocked this site from downloading files to our computer. Click here for more options.”
One of the options given is downloading and saving the file. I have done this, but it is useless. The same, very irritating message simply pops up again and again every time I use IE.
The message comes with the following information:
Name: get-user-id
Type: Unknown File Type
From: ad.yieldmanger.com
File Name: get-user-id (0 bytes)
I suspect, but I am definitely not sure, that IE is blocking some type of cookie. I have no objection to this if it is doing its job. However, I don’t want to be informed of this function repeatedly while I am using IE. I suspect that the problem might be my security settings, but, although, I have attempted to adjust them, the message above still pops up again and again.
Basically, can anyone suggest to me how I stop this message from popping over again and over again every time I use IE. Any information given is greatly appreciated. Please note that the message is especially irritating because it blocks part of my screen. My eyes at my age aren’t that strong so I need to see as much information on the screen as possible. Any unnecessary information means that I get to see less important information on my screen. Any information given is greatly appreciated.

Answer:How do I stop a very irritating “blocked file download” message in Internet Explorer?

In the internet options on the security tab. In the Internet Zone. Click on
the custom level.
Now in this window. Scroll down where you see the Downloads.
Under which Automatic Prompting for file downloads which will be disabled by
default
Enable it and similarly under downloads option. Make sure that everything is
enabled.
This can enable you to download the file which you require

1 more replies
Relevance 56.58%

Hello everybody,

I am currently a student at the University of Nevada, Reno. And I have just recently been attacked by something, which ad-aware or spybot cannot find. What my current problem is, is that since last friday, today is the 15th of November, I have been having problems connecting to www.unr.edu, which is the University's website. Also I this problem is occuring with the main domain and any of subsequent affiliates, such as www.coba.unr.edu as well as its mail server, so I cannot access my main e-mail address. If anyone has had any problems like this in the past or has any ideas on how to solve this it would be very helpful. Also as another note the file is in my favorites bar, and I am having the same problems in FireFox browser and Netscape. I appreciate everybody's time and effort.

Thanks.
[email protected]
 

Answer:My University's webpage is being blocked

if it's all browsers then it's likely an entry in the hosts file blocking it or possibly one of your security softwares set too high & the site won't respond

go to here and download 'Hijack This!'.
First make a folder on your computer in my documents called Hijackthis and then Unzip it to that folder.
Then doubleclick the Hijackthis.exe.
Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.
It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required,
so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.
 

1 more replies
Relevance 56.58%

I believe my computer has some malware. The little red balloon with a white X in it keeps producing alerts and messages and then says to download antivirus software. All websites related to malware are either redirected or blocked. Norton and McAfee both show no connectivity. Smitfraudfix, highjack this,Malewarebytes Anti-Malware, and many other programs will not open. The Tech Support Guys site is blocked on infected computer. I am writing this on another computer. Often upon starting the computer, it freezes on a black screen.
 

Answer:Computer Freezes, Malware, Xp Shield Balloon, Blocked Sites

7 more replies
Relevance 56.58%

I recently had to restore from a system image (full restore of C:\ drive where my program and system files are kept, no changes to D:\ so my personal files weren't reset, and probably some temp files and preferences weren't either) and after doing so, and then reinstalling avast onto this system image (the image was made at a time when I had a different antivirus) I encountered a problem with firefox which seems to be something to do with conflicts with it and avast.
Immediately after the system imaging firefox worked fine, and immediately after avast's installation avast worked fine too. The I updated both of them to the latest state, restarted and logged back on. This time when I opened avast to go to google I got a warning about a certificate on google's page being unrecognised (Unfortunately I can't remember the exact wording), But I was able to follow some of the options on the dialogue brought up by firefox and see a certificate related to avast was causing the issues. I tested by temporarily disbaling avast's web and mail shields and opening firefox again, that time it went to google.co.uk without issues. I turned the web and mail shields of avast back on and I got the same certificate problem again.
Eventually I used the "I know the risks button" in firefox and created an exception, which I think might not have been the best way to solve this. Because I still had problems loading other https pages (for exmaple the links to google plus or gmail from the google home pa... Read more

Answer:Conflicts involving avast's web/mail shield certificates and firefox

It's a known issue with avast! from my experience, take a look.https://support.mozilla.org/fr/questions/981937https://forum.avast.com/index.php?topic=161376.0http://kb.mozillazine.org/SSL_Security_Errorhttps://support.mozilla.org/fr/questions/1032509I think the instructions you are looking for are in the first link.

16 more replies
Relevance 56.58%

I have gotten an error message from Avast when downloading email.

The message says that Avast mail shield cannot scan the emails because
I have an SSL secure connection configured in the mail client, Outlook Express 6.

Both incoming and outgoing server ports have "This server requires a secure connection (SSL)" ticked ON.

I think this setting may be required for att.yahoo.com servers. :confused

Should I just disable the mail guard in Avast?

Thanks
 

Answer:Avast Mail Shield not working with AT&T account and Outlook Express

Have you read this?
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458
 

1 more replies
Relevance 56.17%

I have three machines on our network. All three exhibit the same problem. When you try to navigate to Google or use the Google search toobar, it fails with "Cannot display the webpage" (similar behavior with Firefox). When I scan with Malwarebytes, it doesn't seem to find anything, but for a short period of time, you can use Google. But then the problem returns. It doesn't redirect to ad pages, it just deadends. I'm running the diagnostic tools on the cleanest machine (least amount of of software installed). The DDS results are below with Attach.txt and ark.txt attached. Thanks in advance!DDS (Ver_09-12-01.01) - NTFSx86 Run by Administrator at 21:13:40.17 on Mon 02/22/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.617 [GMT -6:00]FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\WINDOWS\System32\f23hse... Read more

Answer:Google blocked "Cannot display the webpage"

It seems when I first fire up my router and computer, I am able to access Google just fine. If the machine is up for awhile (being used or not), Google access is hosed again. I see one there was one download on ark.txt so maybe someone took a look at this, but I haven't heard anything back. Is it because there isn't much revealed in the logs? Or did I post something incorrectly? I'm also wondering if it's something in my HughesNet modem. Is that possible? That it might not even be my computers?Thank you for *any* help you can provide....===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated ... Read more

14 more replies
Relevance 55.76%

Is C:\WINDOWS\SYSTEM32\EZSIDMV.DAT harmful?

Answer:is ezsidmv.dat file harmful?

did you google it to see?http://www.computing.net/howtos/sho...The above link should help you.Some HELP in posting on Computing.net plus free progs and instructions Cheers

4 more replies
Relevance 55.76%

Avira picked up something this morning in my temporary internet files informing me with: this file contains an executable program that is disguised by a harmful file extension.
I ran superantispyware - found nothing but cookies and checked with malwarebytes nothing again. this happened despite my having macafee siteadvisor. It is the virus vault, should I just ignore it?

Answer:harmful file extensions

Hi, try running MalwareBytes AntiMalware from here- www.malwarebytes.org/mbam.php
If it doesn't detect anything, check the virus vault just to make sure

2 more replies
Relevance 55.76%

Hello everyone,
 
LighthouseParty had been trying to help me with my problem and suggested that I would post here as he did everything he could to help. Here is our threat link to see what he tried - http://www.bleepingcomputer.com/forums/t/558159/computer-running-slowly-antivirus-constantly-scanning/#entry3555990
 
I have posted my DDS info below. Thanks for anyone who can help.
 
Eric
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17420
Run by mark at 16:46:36 on 2014-12-02
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6051.4343 [GMT -5:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\windows\system32\WLANExt.exe
C:\windows\System32\spoolsv.exe
C:\windows\... Read more

Answer:Avast realtime shield constantly pops up infections when connected to internet

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

18 more replies
Relevance 55.35%

Hello,

I have a question regarding taking ownership of an executable that is in the WindowsApps folder in Program Files. I want to take ownership of it so I can make it launch at startup every time I boot up Windows. That's because for some reason, putting a shortcut of the executable in the Startup folder of Windows doesn't launch it at boot.

The current ownership of that executable is TrustedInstaller but I want to change that to myself. I am wondering however if this would lead to any problems or errors regarding automatic processes that Windows uses for that executable. Or if it would lead to problems if I want to uninstall or reinstall the app.

Answer:Is it harmful to change ownership of a file?

It might be disastrous. Or you might get away with it. I've had enough difficulty keeping my aging PC afloat that I stay away from such actions. That said, you might look at:

Add Take Ownership to Context Menu in Windows 10 - Windows 10 Customization Tutorials

11 more replies
Relevance 55.35%

I've got something screwy going on with my home WinXP box, and I'm hoping someone here can point me in the direction of a solution to the problem.
I'm running XP Home, Service Pack 2, on a machine with (according to the properties tag) 960MB RAM. I've been running Avast antivirus, and allowing it to update definitions automatically. At the time this incident happened, the most recent update it had acquired was from yesterday morning.
There was a power outage at my house yesterday morning, lasting for ~2 minutes. I powered the system back on after that, and everything appeared to be working; I mention this merely for completeness of information.
The first symptom of my problem occured yesterday afternoon. I heard the little 'ding' sound made by a download finishing, during a time where I had no downloads running, and within a few minutes of this, my system seemed to grind to a halt. Anything I already had running would continue to work, but I couldn't open anything new, including the windows task manager, nor could I get new pages to load in the copy of Firefox I was running. I was planning to visit my parents' house at that point, so I powered the system down and took it with me. I had to manually power the system down (done via the on/off switch just above the power cable socket); the attempt to shut the system down fell victim to the same halt as everything else.
For the record, I may have had Spider Solitare up when I heard the ding, an... Read more

More replies
Relevance 54.53%
Question: Avast blocked!

Earlier today, I was using my computer just fine. Then, Avast blocked something from columbia.myvnc.com multiple times as I opened harmless websites I frequent. Although it reported the infection blocked, I was still redirected to the site, with some images that were blocked. After that, I continued on to the site, where I tried to play a game, but it was not responding properly. The game is java. I then restarted the computer. When I did, Avast was disabled. I could not reenable it. Upon opening the UI, it said "unsecured". I clicked "fix now", but nothing. Under that, it said, Urgent: avast! service stopped. I clicked "start program", again, nothing. I tried scanning, but I get the error, "there are no more endpoints available from the endpoint mapper". I am not getting any popups, redirects, etc. I ran SuperAntiSpyware and Malwarebytes, but nothing came up.

I have a device called SlingBox, which allows me to watch my home tv streaming online. It's not working. It was working this morning.

Hopefully the myvnc thing is known enough that someone can shine some light on my problem.

Thanks for the help!

-David

Answer:Avast blocked!

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdatePress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti... Read more

1 more replies
Relevance 54.53%

Please help! Avast blocked an attack I don't know what happened but my bandwidth froze and when I checked avast is showed this under the Last Attack Tab in the Network Shield console:
13.01.2010 17:45:36 Network Shield: blocked access to malicious site ad.elitetraffic.net/in.cgi?2 [ C:\Program Files\Mozilla Firefox\firefox.exe ( 4868 ) ]
Thanx in advance.
 

Answer:What has Avast blocked

Hi

Is your PC and internet now running ok, as Avast seems to have done its job and blocked the malicious site advert?

If not and you are still having slow internet then first off delete temps and cookies (can use CCleaner for this) and reboot and try again, if not then you'll need to run THIS guide and then once finished post in our malware forum and attach the requested logs. (all instructions on what to run and how to attach logs are in the guide)
 

1 more replies
Relevance 54.53%

Whenever I try to open a certain .exe file, vista spits this out at me:

"Windows found that this file is potentially harmful.
To help protect your computer, Windows has blocked this file."

It doesnt give me the option to open it anyway, even though I know its perfectly safe. How can I disable this windows "feature"?
 

More replies
Relevance 54.53%

Hello i just got this error todayThere is a .net framework file missing due to some harmful virus.Debug malware error 895-system 32.exe failure.Please contact Microsoft technicians to rectify this issue.Please do not open internet browser for your security issue to avoid data corruption on your registry of your operating system.
and i think im infected can someone please help asap 
-ty
 

Answer:There is a .net framework file missing due to some harmful virus.

Welcome aboard
 
Microsoft will never post any message like that.
Are you presented with some phone number to call?

18 more replies
Relevance 54.53%

Just wondering what does it do and is it harmful in any ways to your computer health or personal files? Wasn't sure which section I should ask this question in.

Answer:What does a JScript Script File (.js) do and is it harmful to your computer

From Microsoft Technet:
 

JScript is the Microsoft implementation of the ECMA 262 language specification (ECMAScript Edition 3). With only a few minor exceptions (to maintain backwards compatibility),
JScript is a full implementation of the ECMA standard. This overview is intended to help you get started with JScript.
 
JScript is an interpreted, object-based scripting language. Although it has fewer capabilities than full-fledged object-oriented languages like C++, JScript is more than sufficiently powerful for its intended purposes.
 
Read more here : Click and Click

 
 
 
So, it is a "JavaScript" based on ECMAScript that use in internet browsers for using in websites, it can be call from any executable file (.exe) too.
 
And we all know that "scripts" can do harm to your computer. Mostly by malware or code exploit.(So this can be treated as dangerous one too.) Also if you are a website admin, please check code structure before use it, poorly made codes can make it easy to attack.
 
JScript is not a very easy thing to make but still chance, some worm use it to make a backdoor to HiJack mail server to spam mails. (Some can make 1000/hour.)
 
So, be careful at the script you got or made.
Thank you. Hope this helps!

3 more replies
Relevance 54.53%

I recently started receiving popups saying you need to download Virus protect and winsecure and others...and my homepage changed to a wierd warning page about how mycomputer is infected. So friend told me to download highjack this and post my log file so someone could help me clean it...Below is the log file...I greatly appreciate any help someone can give me...I have a hot stock tip if the helper would like it...thanksRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Java\jre1.6.0_01\bin\jusched.exeC:\WINDOWS\stsystra.exeC:\Program Files\Dell\Media Experience\DMXLauncher.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exeC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\WINDOWS\System32\DLA\DLACTRLW.EXEC:\P... Read more

Answer:Help On Deleting Harmful Stuff From My Highjack This Log File

Hello computerfan08,Welcome to Bleeping Computer Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Thanks,tea

2 more replies
Relevance 54.12%

Avast malicious url blocked keeps popping up on the screen. What do I need to do to get rid of it? It is annoying and it slows my computer down.
 
Edit: Moved from Windows XP to the more appropriate forum
Roger

Answer:avast malicious url blocked

avast! Web Shield acts as a transparent HTTP proxy which will monitor and intercept all outgoing connections from the HTTP proxy application. Web Shield is compatible with major web browsers (i.e. Internet Explorer, FireFox and Opera), monitors your Internet activity and blocks URLs of known dangerous sites before your browser loads them in order to prevent risk of infection from these sites. A malicious URL warning will usually interrupt you one time and then go away. If avast continually displays the same warning or provides an alert when not surfing the net, then your system may already be compromised and you will need to began checking for malware infection.Please perform a scan with AdwCleaner by Xplode and remove any unknown Toolbars, adware and potential unwanted programs (PUP). You can refer to these instructions: How To Use AdwCleanerPlease download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Double-click on the renamed file to install, then follow these instructions for doing a Quick Scan in normal mode.Don't forget to check for database definition updates through the program's interface (preferable method) before scanning.If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A.4. Issues.Malwarebytes may "make... Read more

1 more replies
Relevance 54.12%

How can I get rid of the malware Avast is supposedly blocking?And i did not the checkup.txt here it is... Results of screen317's Security Check version 0.99.42 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Trend Micro Titanium Antivirus out of date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Java™ 6 Update 31 Java version out of Date! Mozilla Firefox (13.0.1) Google Chrome 20.0.1132.47 Google Chrome 20.0.1132.57 ````````Process Check: objlist.exe by Laurent```````` AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 12% Defragment your hard drive soon!````````````````````End of Log``````````````````````

Answer:Avast Malware URL blocked

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/460990 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 54.12%

Hello,This is my first posting to this site. My problem is my pc is starting to run very slow. I did virus scan-AvastSpyware scan-Super Anti-SpywareMal-ware scan-MalwarebytesNothing works, I keep getting this pop up. This is what I've been getting:Avast Maiware BlockedWebShield has blocked a harmful web page.This pops up about every 10-15 minutes or soand when it pops up it keeps saying malware blocked 10-11 times. I'm running windows xp pro.Service pack 3 I believe. Any help here please, Thank-You,JohnEdit: Moved topic from Windows XP to the more appropriate forum. ~ Animal

Answer:Avast Malware Blocked

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

31 more replies
Relevance 54.12%

Malicious URL Blocked pop up by Avast seems to be an issue these days with many who are using Avast. Most online forums are flooded with questions regarding this mysterious pop up. Is this is a virus or a false positive alarm by Avast? An Avast glitch? If it is virus why is this not being detected by any of the antivirus/anti malware programs? Why is Avast so quiet about this?Edit: Moved topic from Breaking Virus & Security News to the more appropriate forum. ~ Animal

Answer:Malicious URL Blocked by Avast

More investigation is needed before it can be determined if avast is actually detecting a malicious web site and blocking access. Please download Sophos Virus Removal Tool and save it to your desktop.It is a large file so it may take some time to download.Be sure to read and follow the instructions on that same page for installing and performing a scan.If anything threats are detected, they will show in the Scan Results with an option to click a Details... button for more information.Click on the Start clean up button to allow removal of all threats found and reboot the computer when done.A log file should have been created...copy and paste the results in your next reply.Logs are automatically saved to the following locations:-- XP: C:\Documents and Settings\<Username>\Application Data\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log-- Vista, Windows 7, 2008: C:\Program Data\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.logPlease download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Double-click on the renamed file to install, then follow these instructions for doing a Quick Scan in normal mode. Don't forget to check for database definition updates through the program's interface (preferable method) before scanning.If you cannot ... Read more

3 more replies
Relevance 54.12%

Ok, so, I keep getting this messages from, avast about some, Malicious url blocked. 
 
I'm not really good on fixing computer or stuff like that, but I searched on google, and I read something telling me, to go on safe mode and run Malwarebytes and then the antivirus itself. 
I did, but as soon as I rebooted, the message comeback.
Some help would be very appreciated. 
 
 
Note. I really don't understand much or at all about fixing computers, so if you could be very specific about things I have to do, it would be very helpful.  
 

Answer:Avast malicious url blocked

Might as well remove avast and download MS Security Essentials.

8 more replies
Relevance 54.12%

I tried to post a H J T and MTB file but I think it lost it I didn't see where to attach it.
I'll try it again
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:07:02 PM, on 3/16/2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast Business\AvastSvc.exe
C:\Program Files\AVAST Software\Avast Business\afwServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVAST Software\Avast Business\AvastNet.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Common Files\AOL\1262632804\ee\AOLSoftware.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast Business\avastUI.exe
C:\... Read more

Answer:Avast says malicious url blocked?

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first ti... Read more

10 more replies
Relevance 54.12%

Hi.

Thank you in advance for all your help.

I had not used my Acer laptop for a month, and I guess my Avast was not up to date. I had visited my usual sites (crateand barrel, cb2, westelm, bank, hotmail etc), and this morning it took forever to get the computer going and then it said 'Avast has blocked a malicious URL'...
Infection: URL:MAL
C:windows/system32/svchost.exe

Then it said something like 'preparing for crash dump' and I got the black screen that says windows did not shut down succesfully and then after a while, it opened the sign in screen again.

Please help!

Answer:Avast says 'it blocked a malicious URL, but??

Here're the requested logs:

.
DDS (Ver_2011-08-26.01) - NTFSx86 NETWORK
Internet Explorer: 9.0.8112.16421
Run by aylin at 15:52:49 on 2012-06-01
Microsoft Windows 7 Starter 6.1.7600.0.1252.1.1033.18.1014.492 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://login.live.com/login.srf... Read more

2 more replies
Relevance 54.12%

Hey guys.

[17:54] <Lishy> something weeeeiiiiiiiirdddd just happened with avast
[17:54] <Lishy> I JUST GOT TWO "Malicious url blocked" messages, something about avast in the url
[17:55] <Lishy> WTF just happened? And how can I check the logs of that? I can't find it anywhere in the program
[17:57] <Lishy> network shield shows / 2 ofconnections infected
[17:57] <Lishy> specifically, last blocked connection says "http://download117.avast.com/iav5x/prod-ais.vpx"
[17:58] <Lishy> Anyone know WTF just happened, please!?
[18:04] <Lishy> avast's forum is also down.. Is it possible they were hacked? How do I investigate the details of what I blocked?

To clarify after my IRC logs, I was minding my own business working on something in wordpad, when randomly Avast popped up with a "malicious url blocked" at the bottom right. I'm not sure what happened, but the blocked URL had to do with Avast. Moments later, another blocked url occured. I do not know how to check Avast's network shield logs, but in the statistics it said the last url blocked was "http://download117.avast.com/iav5x/prod-ais.vpx", which makes me think Avast might be nothing more than freaking out over its own update. Still, I am paranoid.

I posted Hijackthis logs on irc, but they aren't allowed in this forum. If they are necessary to further investigate, I will post them however. Thanks!

Also, Avast's forum... Read more

Answer:Avast blocked amalicious url from itself?

Dont be worried, a lot of people are having this issue; as for their forums.. They are having database issues, SMF could just be messing up.

12 more replies
Relevance 54.12%

Hello, this is my first time using this site so bare with me. I've read over the rules and requirements and will try to stay on point.

Somehow I've encountered 2 viruses named win64:sirefef-A[TRJ] and win32:DNSChanger-VJ[TRJ] that have attached themselves to my Windows XP system and I can't remove them. I've tried Avast, HijackThis, Malwarebytes, etc... to no avail.

I've run the 3 scans and have the documents. The DDS.txt info is listed below. I've also attached a zip file containg the other 2 files needed for your analysis.

Please help...thanks!

-------------------------
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Owner at 17:44:49 on 2012-05-21
.
============== Running Processes ===============
.
.
============== Pseudo HJT Report ===============
.
uDefault_Search_URL = about:blank
uDefault_Page_URL = about:blank
uSearch Bar = about:blank
uStart Page = hxxp://xfinity.comcast.net/
mSearch Page = ${URL_SEARCHPAGE}
uInternet Settings,ProxyOverride = localhost;*.local
uCustomizeSearch = about:blank
uSearchAssistant = about:blank
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: {E0E899AB-F487-11D5-8D29-0050BA6940E3} - No File
TB: avast! WebRep: {8... Read more

Answer:Avast has blocked threats but i need help

Hello and welcome to TSF.

The system has a nasty infection commonly known as ZeroAccess, which is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Do not change passwords or do any transactions from the infected computer until it has been cleaned.

Please read this: How Do I Handle Possible Identity Theft, Internet Fraud, and CC Fraud?

============================

Please download ComboFix from one of these locations:

Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you need further help, see How to disable your security applications
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. ... Read more

2 more replies
Relevance 54.12%

 attach.zip   3.14KB
  0 downloadsThe wife has been ruuning her laptop with no antivirus software. As usual when she has problems she gives it to me to fix. I installed Avast, spybot, and malwarebytes. every 15 minutes or so avast blocks about 10 malicious URLs in a row. It's coming from \\.\globalroot\systemroot\svchost.exe. Spybot nor malwarebytes seem to be able to remove it. here are the dds logs:

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457
Run by nac at 16:26:37 on 2013-02-02
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2812.1515 [GMT -8:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Win... Read more

Answer:Avast - Malicious URL blocked

Please do the following:

Download the appropriate version for your system of the Farbar Recovery Scan Tool and save it to a flash drive.
Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.Use the arrow keys to select the Repair your computer menu item.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.Restart your computer.If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.Click Repair your computer.Choose your language settings, and then click Next.Select the operating system you want to repair, and then click Next.Select your user account an click Next.

On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command PromptSelect Command PromptIn the command window type in notepad and press Enter.The notepad opens. Under File menu select Open.Select "Computer" and find your flash drive letter and close the notepad.In the command window type e:\frst.exe (for x64... Read more

2 more replies
Relevance 54.12%

Hello,
I keep getting numerous (malicious url blocked) from Avast. I did Avast full scan and time boot scan. The full scan comes up with nothing and the boot scan says mal ware in my system restore and can't fix them. One more thing svchost.exe has to close when I connect to the internet. I had a bad virus that took over my desktop and by luck was able to get on the internet by using aol at the bottom next to the clock. I found your site and read how to gain control back with help from iexplore and unhide. I think Avast Pro took out the virus at this time.

Please go slow and explain why and what each step is that we're doing. It helps that I understand what is going on, Please, I would like to Thank You in advance for your help.
Best Regards,
Rudy

Answer:Avast- malicious url blocked

If Avast is reporting malware in system restore then delete your restore points and create a new one.Download the program below unzip it to your desktop and set it to run on the next boot.http://technet.microsoft.com/en-us/sysinternals/bb897426.aspxThen clear all of your restore points and create a new one you can do this by turning off system restore and rebooting and turning it back on and rebooting again.http://support.microsoft.com/kb/310405Then download Erunt and create a backup of your registry and then download ntregopt and run it and then reboot.http://www.larshederer.homepage.t-online.de/erunt/Now defrag your machine with auslogics select defrag and optimize just uncheck the boxes that suggest installing other software when installing auslogics disk defrag.http://www.auslogics.com/en/downloads/disk-defrag/disk-defrag-setup.exeDownload Ad-ware Cleaner Click the delete button allow it to run and post the log it creates.http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner Download Autoruns and Autorunsc unzip Autoruns to your desktop run it.See any entries that read file not found when you see them right click and select delete (or just simply uncheck if you do not feel comfy deleting)do this only for the entries that read file not found also uncheck any scheduled task that are set to run on your machine,close the program.http://download.sysinternals.com/files/Autoruns.zip 1. Right click on My Computer > Properties ... Read more

17 more replies