It pops up Every so often even when i’m not on a single browser it sends me 8 alerts saying that it has detected and blocked a trojan (8 different alerts) i’ve scanned my computer with TDSSkiller and Avast and have found nothing and since its happened multiple times without a browser being opened this virus must be hiding somewhere on my computer how can i find it and remove it? i’m not to computer savvy so thanks in advance
Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0
Running Malwarebytes now ill post the log when its done if that is what you mean i tried reading the post and got very confused like i said im not very computer friendly…
Infection Details
URL: http://urlfilter.vmn.net/vmnsbf/data/130…
Process: C:\ProgramData\Anti-phishing Domain Advi…
Infection: JS:Downloader-BLR [Trj]
That would be the what avast keeps showing me
yes…i see what your problem is…
you have this domain advicer toolbar that is powered by Panda…and they dont encrypt there signatures http://software.visicommedia.com/en/products/antiphishing/
run AdwCleaner…first program in the guide Asyn gave you… click delete…reboot, post log here
is the problem gone ?
Thank you very much pondus, i believe it has been removed along with plenty of other things as my cpu is running at 25% now rather than 65+ at all times and i didn’t get the 8 messages from avast when i rebooted!
your welcome.
if the problem continue, come back and we will have one of the malware experts look at it ![]()
if you check back here later, then maybe one of the removal experts will see additional crap files that need to be removed…so your CPU use may be even lower
i will send him a PM, it may take hours before he is here
I could take a quick look to ensure all is gone
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropbox.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
winsock.*
/md5stop
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs