Solved Possible Malware, Virus and Spyware Infections in My PC

[Windows7 User]

Hi, I am a new user in this forum and I really wish that this forum could help me. I'm not a computer guy and I have utterly no idea on how to keep my laptop healthy. It's been around 7 months since I did a complete wipe-out in this laptop and I experienced extreme slowness in its work. I suspect that this is because of some infections stated above.



I am currently using Avast Free Antivirus v 10.3.2225 and I ran a full-system scan yesterday. The result was "No threat detected". However, there has been a recent constant pop-up with time interval of approx 1.5 minutes from Avast stating that this:
Object: http: // disorderstatus.ru/order.php
Infection: URL:Mal
Process: C:\Windows\system32\msiexec.exe

and the other one is

Object: http:// differentia.ru/diff.php
Infection: URL:Mal
Process: C:\Windows\system32\msiexec.exe

Should I report this as a false positive? Furthermore, in the past, I've reported some files as false positive without even knowing what they were. Is this safe? If not, what is the solution?




I am also using Piriform CCleaner Professional v 4.17.4808 and I run it with the options Simple Overwrite (1Pass) option on. I also run the Registry Check which often shows me a few or sometimes loads of registry, and the solution is nearly always delete (which I always do).



I am using Toshiba, as for the code production (or whatever it is called), I do not know. I can take a look if you guys could let me know where I could find it. I have further problems regarding Windows Update, hard disk space, printer options etc., but I would like this to be fixed first. Thanks for the answers. If you need extra information, please do inform me because I've searched posts like this and they always ask for something like a script or something (which I don't understand at all).

 

[Brds7t7]

Hi Windows 7 user, welcome to SF.
The popups that are appearing are relating to the websites you're visiting. That's why the errors are saying it's a URL. It may be some ads infected with malware. Avast seems to be catching those before they infect your pc. Are those two sites that you use regularly?
I would advise avoiding those two sites and see if the popups stop.

Also try installing Malwarebytes free and do a scan with that too. https://www.malwarebytes.org/antimalware/

 

[Windows7 User]

Hi, I will try installing that software, and no, I have NEVER visited that website. How do I remove this item?

Also, the other porblems mentioned like me reporting some files as false positive in the past are jot answered Thanks.

 

[Brds7t7]

Hi, I will try installing that software, and no, I have NEVER visited that website. How do I remove this item?

Also, the other porblems mentioned like me reporting some files as false positive in the past are jot answered Thanks.

Concentrate on one thing first.
Reporting as false positive isn't necessary yet.
Have you been receiving these popups since you reinstalled Windows? Did you have an original install disc or was it an ISO downloaded from a website?

 

[Windows7 User]

No, I meant.... In the PAST, there WERE some pop-ups that Avast reported and I reported them as false positive. I never knew what they were so I think that this might be unsafe. If it is unsafe, how do I fix it and unreport it as false positive?

As for the solution you gave, I can't do anything now since my laptop is not with me currently.

I do not know, I wasn't the one who reinstalled Windows after the whole wipe-out. I asked a computer tehnician (is that the term?) to do a whole wipe-out. I can't contact him now because I have no contact information and I don't even remember where his place were.

I receive these pop-ups occasionally (but not when it was just completely wiped out) and some previous pop-ups were reported as false positive by me.

 

[Brds7t7]

If the popups have stopped then there is no need to worry about them anymore.
Do a scan with malwarebytes when you have your laptop back and see if it picks anything up.
You don't need to worry about un-reporting anything.
Once it's reported as false positive to Avast it just means they'll look into it. If they find malware they'll add it to their signatures, if not they'll just ignore it.

When you have your laptop back and have done a scan we can look into the other issues.

 

[Windows7 User]

Ahh ok, so I don't have to worry about the past pop-ups I reported as false positive.

Alright! Thanks! I'll get my lappy back asap, prolly another 20 minutes Thanks! I'll post more problems if there are still any after I scan it using the aforementioned software.

 

[Brds7t7]

Ahh ok, so I don't have to worry about the past pop-ups I reported as false positive.

Alright! Thanks! I'll get my lappy back asap, prolly another 20 minutes Thanks! I'll post more problems if there are still any after I scan it using the aforementioned software.

No, don't worry about the false positives. All it does is sends the files to Avast for them to check. If they don't find anything wrong, they'll just ignore those files.
Those earlier popups could have just been an ad that was appearing from a website. Some ads on the Web can occasionally be infected with Virus, malware. But if Avast is catching them there's no need to worry.
I use ad blockers in all my browsers anyway.

 

[Windows7 User]

Hi, I scanned using Malwarebytes as suggested, the result is 583 potential threats detected. It was successfully removed. However, the pop-ups on Avast is still ongoing even now. How do I fix these pop-ups?

Furthermore, I used full-system scan using Avast and it detected nothing ("No threats detected") yesterdat while using Malwarebytes..... Does this mean that my Avast is not working properly?

 

[Brds7t7]

Wow that is a LOT of items detected. Although those are classed as Potential Unwanted Programs (PUPS), not necessarily malware.
Try running the scan again it may pick up some more on a second scan. It may take more than one scan to clean everything out.

I will try to answer as quick as a I can but I'm not at my PC right now so may be a little delay.

 

[Windows7 User]

Alright, running a second scan now. And regarding my Avast?

 

[Brds7t7]

Alright, running a second scan now. And regarding my Avast?

I'm not sure yet, we need to make sure your PC is fully clean first.

I've been using Avast for years and never had any issues with it.

 

[Windows7 User]

Scan finished. Removed two more PUPs. Pop-ups from Avast are still here.

 

[Brds7t7]

Scan finished. Removed two more PUPs. Pop-ups from Avast are still here.

I'm a little confused though. You said the popups were in the past? But you're still getting them?

Could you post a picture of one of the popups when it next appears?

Also, download the newest version of Avast free from their website. https://www.avast.com/index

I would completely uninstall the version you're using, reboot the pc and install the newest version.
Choose custom install but only install the software you'll need.
I usually only install the main program and the browser protection. But you can choose which software you think are relevant to you.

 

[Windows7 User]

Huft.... In the past, Avast showed me some pop-ups which state that it blocked some harmful webpage or file. Those pop-ups WERE in the PAST, and I reported them as false positives. Now I asked whether it was safe for me to have done that in the PAST? If it was unsafe, is there any thing I could do to undo the mistakes I did?

NOW, in the PRESENT, I am having these pop-ups again and I am not willing to report them as false positives. The picture is attached.

Alright, I'll reinstall Avast now.

 

[Brds7t7]

"Huft?" Please have some patience as I'm trying to help you (from a smartphone, while I'm out).
Which browser are you using?
As it's the Webshield that is popping up, there could also be something lurking in your browsers temp files.
You can use Ccleaner to try and clearing out your browser temp files. You would need to completely close your browsers first.
If you're using a browser like chrome. Make sure Ccleaner isn't set to delete your user profile. You just need it to wipe your "Temp Internet files" you can also try deleting cookies too. Although this will remove your site preferences and logins.

 

[Windows7 User]

I apologise for the impoliteness I've shown. I was probably frustrated because I can't get it done with. I am truly sorry for even sending such inappropriate message when you are actually helping me a lot.

The problem has been solved. After I reinstalled my antivirus (Avast) as you suggested, the pop-ups stopped. However, does this mean that I'm safe? Should I run another scan from Avast and Malwarebytes?

Again, I am truly sorry for even not thinking about my courtesy when I shouldn't be taking my frustration out on anyone. I truly apologise and I'm sincerely asking for your forgiveness. I am terribly sorry, sorry.

 

[Windows7 User]

I am truly sorry, please have patience with me. I'm truly sorry for even thinking about doing that at all.

 

[Brds7t7]

Whoaaaa it's okay, no need for so many apologies. It was just a light hearted comment :roflmao:

I would wait a little while, let's just make sure those popups have completely gone first.
Do a little browsing for a day or two and see if the popups have completely stopped.
You can report back here if they do carry on and we'll look into more solutions.

 

[Windows7 User]

Thanks for the understanding. No, it is seriously my fault. To actually take out your emotions on someone who's helping you a lot? That's very immature and outrageous.

Alright, I'll do some scanning now with the two softwares. Thanks for the help. I'll report two days after this post. (I still have other issues, but I'll get these done with first [that is, making sure my computer is free form any kinds of infections].)