avast is unable to detect an ebay trojan - please help

Viruses and worms
1

hello everybody,

I am an avast user from germany. after using free avast, I decided to upgrade it to be safe from internet threats, especially because I use paypal from time to time.
well a few days ago I was on ebay and realized that a file called eBayISAPI.gz was automatically downloaded unto my pc. avast did not hinder it or warn me.
the link it was downloaded from was

[b]http://my.ebay.de/ws/eBayISAPI.dll?MyEbay&gbh=1&CurrentPage=MyeBayWon&ssPageName=STRK:ME:LNLK:MEWNX[/b]

I was confused what the file was about however I could not find it on my pc. I started a full scan with avast and malwarebytes but both programes did not find anything. I searched further and found out that the same day other files were downloaded unto my computer too:

[b]https_signin.ebay.de_0.localstorage-journal
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\Local Storage

https_signin.ebay.de_0.localstorage
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\Local Storage

Folder: http_a.affil.io_0
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\databases

Folder: https_signin.ebay.de_0
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\databases

Databases
Data Base File (.db)
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\databases

Databases.db-journal
DB-JOURNAL-File (.db-journal)
C:\Users\Seven\AppData\Local\Google\Chrome\User Data\Default\databases
[/b]

I scanned each of these files but the results were all negative. google searches were quite contradictory so I asked the ebay customer service what this strange ebaylSAPl.gz was about and they told me that it was a TROJAN. I am scanning my pc on and on but cannot find anything. in the meanhile the files above simply dissapread from my pc but I have no clue how or why. please could anyone help me? I am really desperate.:frowning:

thanks in advance.

2

follow this guide and attach the requested logs (not copy and paste). http://forum.avast.com/index.php?topic=53253.0

1. AdwCleaner
2. Malwarebytes
3. OTL
4. aswMBR

when done, removal specialists will be notified and help you later today

3

hello,

thanks for your reply. I just downloaded AdwCleaner and scanned the system , I will the log too however the log is in german:( I think this will be a problem.

4

not a problem …

5

these are the logfiles of

otl
adwcleaner
malwarebytes

thanks in advance to everybody.

6

and this is the log of aswmbr.

thanks in advance to everybody.

7

Hi that is an error on the E-Bay page… This is their response

It's an accident. Either you clicked a broken link or there was a glitch in transmission of the page. Instead of retrieving an item description, you got a chunk of eBay programming. It downloaded as a file because your browser didn't know what else to do with it. Delete the download or ignore it.

Otherwise the log looks clean :slight_smile:

8

hello essexboy,

thank you for the reply. I know that link and first also thought it might be an ebay glitch but in order to be completely sure, I asked the ebay customer service and they told me that the file ebaylSAPl.gz was a trojan produced by a fake link. this made me quite paranoid to be honest. I scanned my pc a zillion times with avast and malwarebytes and did not find anything. so I am quite desperate:)
thanks for checking the logs. I am reliefed that the logs seem to be okay. I really have no clue what else to do.
the ebay customer support says ‘you have a trojan’ but it’s not detectable. strange isn’t it?:slight_smile:
thanks again.

9

It is easier to say that than “our site is messed up” :slight_smile: