[5.178.43.24, 90.84.60.81 AVG, Windows Update.]

These were akamai blocks and are being fixed shortly. Shouldnt be detected any longer in 022804 and later

Wait, even 5.178.43.24 and 90.84.60.81?

If so, then I was paranoid for no reason... Oh well.

[5.178.43.24, 90.84.60.81 AVG, Windows Update.]

aa.avg.com resolves to: 23.62.6.57 (neither are blocked)

ctldl.windowsupdate.com resolved to: 23.62.6.66 (neither are blocked)

 

5.178.43.24 was blocked due to exploits and browlock being identifed on the range. (/28)

90.84.60.81 was blocked due to browlock being identifed on that IP. (/32)

 

I suspect you may have an infection so please follow: I'm infected - What do I do now?

I changed my DNS over to google's and now I'm getting 23.74.9.154 (aa.avg.com) and 23.74.8.130 (ctldl.windowsupdate.com) while pinging them on both of my pcs.

Should I still be afraid of Malware?

[Possible infection?]

I was installing avg when malwarebytes blocked what I thought was AVG's update server so I excluded it and reported it here:

https://forums.malwarebytes.org/index.php?/topic/165438-51784324-90846081-avg-windows-update/

But as you can see in the reply, I have a suspected infection on both this Notebook and my Main PC...

I posted the required attatchments...

I have no issue reinstalling Windows, if it'd be faster...

FRST.txt

Addition.txt

[5.178.43.24, 90.84.60.81 AVG, Windows Update.]

I am getting constant "Website Blocked" While trying to install AVG and run Windows Update.

The domains are:

aa.avg.com

and

ctldl.windowsupdate.com