This page aims to help you remove URL:Mal. Our removal instructions work for Chrome, Firefox and Internet Explorer, as well as every version of Windows.
In this next article, we will tell you more about the malware detection warning known as URL:Mal. You might have already experienced this type of malware warning or this might be the first time you hear (read) about it. Regardless, it is important to know what it means and what you can or must do in case you encounter it in the future.
URL:Mal is a malware detection warning issued by Avast as well as by a number of other anti-virus software programs, applications and tools which alerts the user about the potentially hazardous nature of a given site. In most cases, one can experience the appearance of this warning when they are browsing the Internet and when they try to go to a certain site that might contain unreliable and potentially dangerous elements. In such a case, the antivirus on the PC would intercept the loading of the potentially hazardous site and would display the URL:Mal warning. This is supposed to notify the user that the oncoming site/page should be avoided due to its questionable reliability. Of course, one could choose to disregard such a warning and carry on in spite of it. In fact, there are indeed a lot of cases when a given site might get identified as hazardous without actually being such. No antivirus software is perfect and false-positives are indeed a commonplace when it comes to malware detection. This, however, certainly does not mean that you are encouraged or advised to ignore the URL:Mal warning. Should you happen to see it on your screen, it is advisable that you keep away from the site that you were about to visit since it might indeed put your computer at risk.
What if the warning keeps popping-up at all times?
There is a certain issue that some users might be facing where the URL:Mal alert keeps coming back regardless of what site you are trying to visit in your browser. Does this mean that each site you might try to go to is infected? Most likely not. If you, too, are experiencing a similar issue, know that the most likely reason for that is the contamination of your browser with some kind of malware or some other type of an undesirable software component (an Adware, a Browser Hijacker, a low-quality extension, etc.). Here is how you can get rid of such an unwanted software component:
If you have a Windows virus, continue with the guide below.
If you have a Mac virus, please use our How to remove Ads on Mac guide.
If you have an Android virus, please use our Android Malware Removal guide.
If you have an iPhone virus, please use our iPhone Virus Removal guide
Some of the steps will likely require you to exit the page. Bookmark it for later reference.
Reboot in Safe Mode (use this guide if you don’t know how to do it).
WARNING! READ CAREFULLY BEFORE PROCEEDING!
Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab (the “Details” Tab on Win 8 and 10). Try to determine which processes are dangerous.
Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:
This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/
After you open their folder, end the processes that are infected, then delete their folders.
Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections.
Hold together the Start Key and R. Type appwiz.cpl –> OK.
You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.
Type msconfig in the search field and hit enter. A window will pop-up:
Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.
Hold the Start Key and R – copy + paste the following and click OK:
A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:
If there are suspicious IPs below “Localhost” – write to us in the comments.
Open the start menu and search for Network Connections (On Windows 10 you just write it after clicking the Windows button), press enter.
- Right-click on the Network Adapter you are using —> Properties —> Internet Protocol Version 4 (ICP/IP), click Properties.
- The DNS line should be set to Obtain DNS server automatically. If it is not, set it yourself.
- Click on Advanced —> the DNS tab. Remove everything here (if there is something) —> OK.
- After you complete this step, the threat will be gone from your browsers. Finish the next step as well or it may reappear on a system reboot.
Right click on the browser’s shortcut —> Properties.
NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).
Properties —–> Shortcut. In Target, remove everything after .exe.
Remove URL:Mal from Internet Explorer:
Open IE, click —–> Manage Add-ons.
Find the threat —> Disable. Go to —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.
Remove URL:Mal from Firefox:
Open Firefox, click ——-> Add-ons —-> Extensions.
Find the adware/malware —> Remove.
Remove URL:Mal from Chrome:
Close Chrome. Navigate to:
C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:
Rename it to Backup Default. Restart Chrome.
Type Regedit in the windows search field and press Enter.
Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:
- HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random
If you keep getting the URL:Mal warning even though you aren’t attempting to visit any potentially insecure site, then you might want to consider cleaning your system and browser off of anything that might be undesirable. As we already said, the cause behind the constant appearance of the warning might be some adware or browser hijacker app that has recently latched onto your main browsing program and is thus triggering your antivirus, which, in turn, is showing you the warning. Now, most antivirus/anti-malware tools have their ways of automatically dealing with undesirable apps such as hijackers and adware but every now and then, a new such app might come that manages to bypass the security tools of your antivirus/anti-malware program. In such a case, what you should do is manually find the culprit behind the undesirable browser activity and uninstall it yourself. This would both make the intrusive warnings go away and only show when there’s indeed an actual danger in a site you’re trying to visit and it would also clean your browser and make it safer.
So, how can one find and clean any potentially unwanted software that might be triggering the warning?
Here, on this site, removing pesky and undesirable browser-related apps that might be causing disturbances to the user’s regular browsing experience is one of our specialties. You can find numerous articles on different hijackers, adware and other potentially unwanted programs and apps with exact instructions on how to quickly and easily uninstall them. However, in order to clean your browser and system, you’d first need to know what is messing with it and triggering the URL:Mal warnings.
In most cases, if there’s some unwanted piece of software attached to your browser, you are likely to experience irritating ads-generation and/or page redirects to random web locations that you didn’t necessarily want to visit. Take a careful look at the ads – is there anything that indicates who/what brings those ads to your screen? Is there any note on them that reads something along the lines of “Ads powered/brought to you by X”? Also, pay attention to your browser – has its search engine been altered and is its starting page still the same. Look for such clues in order to figure out the exact piece of software that is messing with your browser and Internet settings and then search for it on our site or maybe ask us in the comments if we can give you any guidance on how to get rid of it and, in turn, make the recurring warnings from your antivirus program cease to appear every time you try to browse the Internet.
|Danger Level||Medium (nowhere near threats like Ransomware, but still a security risk)|
|Symptoms||Frequent notifications that a certain page or site might be hazardous when browsing the Internet.|
|Distribution Method||Spam, software bundles, low-quality downloads, unreliable online advertisements and many others.|
Some threats reinstall themselves if you don't delete their core files. We recommend downloading SpyHunter to remove harmful programs for you. This may save you hours and ensure you don't harm your system by deleting the wrong files.
If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!