- AVAST EXPLORER EXE LAUNCHING MALICIOUS URL BLOCKED WINDOWS 7
- AVAST EXPLORER EXE LAUNCHING MALICIOUS URL BLOCKED FREE
I have Avira Anti-virus, free version.Spybot S&D.CCleaner.Ad-Aware SE.and recently got Kaspersky Internet Security 8.free trial.than I downloaded AVG Anti-virus and installed it.after that I started getting problems.when I opened MY COMPUTER.CONTROL PANEL.or anything that uses WINDOWS works fine after opening it.BUT.after I close the window.I get a message saying that windows explorer stopped working.than it automatically restarts. O2 - BHO: AcroIEHelperStub - C:\Program Files\Messenger\msmsgs.OK.I'm having a problem.I'm using Windows Vista Home Premium SP1 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
AVAST EXPLORER EXE LAUNCHING MALICIOUS URL BLOCKED WINDOWS 7
But despite being old this laptop runs a couple applications that are extremely important to me that I cannot get running with the proper response time on windows 7 and vista machines.Ĭ:\Program Files\Intel\Wireless\Bin\EvtEng.exeĬ:\Program Files\Intel\Wireless\Bin\S24EvMon.exeĬ:\Program Files\Alwil Software\Avast5\AvastSvc.exeĬ:\Program Files\SUPERAntiSpyware\SASCORE.EXEĬ:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeĬ:\Program Files\Intel\Wireless\Bin\RegSrvc.exeĬ:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exeĬ:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exeĬ:\Program Files\Synaptics\SynTP\SynTPEnh.exeĬ:\Program Files\Toshiba\Toshiba Applet\thotkey.exeĬ:\Program Files\Synaptics\SynTP\SynTPLpr.exeĬ:\Program Files\Synaptics\SynTP\SynToshiba.exeĬ:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exeĬ:\Program Files\Intel\Wireless\bin\ZCfgSvc.exeĬ:\Program Files\Intel\Wireless\Bin\ifrmewrk.exeĬ:\Program Files\Common Files\Java\Java Update\jusched.exeĬ:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exeĬ:\WINDOWS\system32\M-AudioTaskBarIcon.exeĬ:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeĬ:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exeĬ:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exeĬ:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeĬ:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe I just wanted to say I'm not worried about the "some systems not working" in the log because my laptop is fairly old and some of the on-board motherboard connections are broken. I'm still getting constant url blocks no matter what I have done, all scanners (MWB, Avast, SAS) turn up nothing, but running the logs required before posting explained a possible rootkit. I've tried disabling this whenever possible.
I'm suspicious because I've tried deleting it, manually and automatically, and whenever I try to delete the entire Microsoft Office folder this one set of files (the groovemonitor dll's) will not let me delete the folder. I tried to get rid of all unwanted processes & services, & I came upon one which I couldn't get rid of- groovemonitor, associated with Microsoft Office. I replaced it with a different version of SVChost (in all windows folder locations) and whatever is using it to do the bad stuff isn't the file itself because it resumed causing trouble.Ģ. I'm getting issues with SVChost where it is sometimes taking up nearly my entire CPU. I did some digging, a lot more scanning (all turned up clean), and I noticed a couple things.ġ. MWB just started constantly reporting outgoing connections being blocked. Obviously I didn't, and I got Malwarebytes which I scanned with and again thought I might be good. Obviously I scanned and it did pick up some things, and I thought I had gotten the problem. Process:file://C:\WINDOWS\System32\svchost.exe Infection:url:Mal A couple days ago I was looking at the weather online on my Toshiba laptop (XP Media, SP3) when I got a report from Avast stating it had blocked a connection to a malware site, just like this, which popped up when I was typing.