Avast Popup Invasion

Hello.

If these annoying advertising notifications appear at the bottom right of your screen, they are notifications that are saved in your internet browser; you just need to delete them, see this page.

If you can't do it, follow these steps:

Download FRST.

Once downloaded, save it to the desktop, then right-click on FRST and choose Run as administrator, you'll see this:

Wait for the message the tool is ready to operate to appear, then click Analyze

Note, wait for the messages indicating that the analysis is complete to appear.

At the end of the analysis, you will have two text files on the desktop: FRST and Addition.

Then send the FRST and ADDITION reports to https://www.cjoint.com/, then provide the two links generated by https://www.cjoint.com/ in your reply.

bazfile
Moderator/Security Contributor.
a hello, a response, a thank you are always appreciated.

OK, I'll take care of it. Thanks for your reply. Claude.

I can't load FRST. I get a file named nonconfirmed245850.crdownload, 2331 KB, and at the end of the download, I see a message saying FRST64.exe canceled. I tried again by disabling Windows Security, but it didn't work.

It's good, it works.

Hello, here are the 2 files. Thank you in advance for your attention. Claude.

https://www.cjoint.com/c/NBvkp2pXp1V

https://www.cjoint.com/c/NBvkrY5BCoV

Procedure to follow in the indicated order:

1- Open FRST as an administrator by right-clicking on FRST and choosing run as administrator
2 - Copy the entire script that is in the box below:

  Start:: CreateRestorePoint: CloseProcesses: HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION Task: {59020825-6793-448B-B433-16FE8D210B0C} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (File not found) Task: {2E02D097-2FBA-4DBD-A4A2-65CEBB13B575} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem123.0.6288.0{D80D336E-2D2A-46CF-9C46-25C5DFB6DF66} => C:\Program Files (x86)\Google\GoogleUpdater\123.0.6288.0\updater.exe [4682528 2024-02-08] (Google LLC -> Google LLC) S2 GoogleUpdaterInternalService123.0.6288.0; C:\Program Files (x86)\Google\GoogleUpdater\123.0.6288.0\updater.exe [4682528 2024-02-08] (Google LLC -> Google LLC) S2 GoogleUpdaterService123.0.6288.0; C:\Program Files (x86)\Google\GoogleUpdater\123.0.6288.0\updater.exe [4682528 2024-02-08] (Google LLC -> Google LLC U1 aswbdisk; no ImagePath CHR Notifications: Default -> hxxps://e.re-captha-version-3-58.top; hxxps://qltuh.earthheartsmith.top CustomCLSID: HKU\S-1-5-21-1242465943-2257920342-3060822183-1001_Classes\CLSID\{1c8f9add-7475-46ae-bf0a-1a91e8f3f4e4}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll => File not found CustomCLSID: HKU\S-1-5-21-1242465943-2257920342-3060822183-1001_Classes\CLSID\{E3D57E77-FE71-4D06-BD34-D48820074909}\InprocServer32 -> C:\Users\Admin\AppData\Local\Microsoft\EdgeUpdate\1.3.181.5\psuser_64.dll => File not found C:\Program Files (x86)\Google\GoogleUpdater\123.0.6288.0\updater.exe EmptyTemp: End::

3- Once the script is copied, click on Fix, FRST will automatically take the script from the clipboard.

Let the fix complete, once it’s done you will be asked to restart your PC, do it as soon as requested, see below.

Once your computer has restarted:
4- You will have a Fixlog file on your desktop, then send this fixlog report to https://www.cjoint.com/ and provide the link generated by https://www.cjoint.com/ in your reply.

5- CHECK AND LET ME KNOW IF YOUR ISSUE IS STILL PRESENT

bazfile
Moderator/Security Contributor.
A hello, a response, a thank you are always appreciated.

Here is the requested "fixlog" link.

Claude.

 https://www.cjoint.com/c/NBvoUNm4StV

The fixlog is OK, is your problem still present?

bazfile
Moderator/Security Contributor.
A hello, a response, a thank you are always appreciated.

Not at the moment, but this issue wasn't always present; it appeared about once a day. Once again, thank you for your help, and I will be sure to keep you informed if it returns. Question: is this operation valid whether it's with Edge or Chrome? I mainly use Edge, but I have both on my PC. Claude.

Good news: no more pop-up appearances. Screen clean!!!!

My sincere thanks to BAZFILE. Claude.