Hi, I regularly scan my pc and dont visit dangerous sites, so not sure how I got this,budt avast found HTML:Scam-P [Phish], on file or website or dont know what it is called game4853.firdayfun78.live .
For scanning I use Roguekiller, Avast, malwarebytes, Malwarebytes mbar (anti rootkit) and Eset Online Scanner (its a one time use scanner).
This keeps showing up only on avast and nowhere else.
And it keeps showing up even after deleting it after scan with Avast.
Sooo, I have not really logged in anywhere since previous scan (not this one), except for Steam (only on program and not on browser). Do I need to change my Steam password or not? Or doest this “virus” affect only webbrowser? I use mozilla. Thanks.
Uf, I dont have it in avast chest.
I noticed before when scan finished it was set to “auto” and it keptshowing up after another scans.
Last time I set it to “delete” and it deleted it.
It no longer shows up.
How dangerous is it? I dont even know of its virus,malware,or something else.
Does it do phising only on regular webbrowsers or also programs such as steam? Could it have stolen my log in credentials for steam? I suppose not, phishing I believe is only done on classic webbrowsers.
Thanks
Edit: so,it still shows up, I first used roguekiller, malwarebytes,malwarebytes anti rootkit and then avast.
I tried putting it in Avast Chest and guess what, it is not there.
Yes,sorry,its just that I think I used this once a few years back and anti virus reported that this was infected.
Ok, so, here are 3 attachments. third one is a screenshotwhat avast reported.
Avast detected it again, I chose to put it in avast chest, but it did not put it there even though it said everything is fixed.
Afterwards I downloaded farbar and produced logs.
Not sure if avast did something like previously or not, so not sure if this virus will show up on farbar. I hope it will :).
I think I became infected on October 27,1:27 AM because Avast in notification history reports “threat blocked” and that it safely aborted connection to that game4853 website. I suppose it did not abort anything since it keeps reporting this infection :/. I think back then I clicked accidentaly on one website on google where I received this report.
I dont think so.
This virus does not show up on avast all the time, only sometimes,I noticed that it shows up more often in the evening (european time).
Would farbar always report problem/virus?
Or only at time when avast reported an infection?
Has farbar command done something else apart from reporting how many accounts are created on pc?
Im trying to make it trigger to show up on avast without using removal or virus chest, and then using farbar and fixlist.
Maybe then it would show up? It may be that virus is not always active and therefore would not show up on farbar.
Farbar is a diagnostic program and dont detect anything, you need to know how to read those logs and that is where @Sass Drake comes in. He will reply when back online
Ok, performed another scan with avast and it still shows up. Problem is definitely not fixed.
However, without doing anything afterwards (putting it in a chest or deleting) I used farbar again.
Can you analyze please these new logs if anything different showed up?
I did the fixlist command after that as well.
Thanks.
I tested it right now, I had web browser opened. Avast found nothing.
It sometimes shows it up,sometimes doesnt.
I use mozilla firefox. I have the newest version, 70.0.
Then I tried scanning with roguekiller, malwarebytes and malwarebytes mbar. Afterwards avast was clean.
Then I opened a game (archeage) to test it, had both browser and game turned on and Avast again found game4853 virus.
Im starting to get suspicion that it is maybe caused by Archeage and it shows up only when I have launched game. I will have to test this further.
While I had archeage launched few hours ago, and scanned with avast, it showed.
Now I tried browser, and other online games, and nothing showed up.
