does anyone know how to remove this “trojan”, hxxp://js.tongji.cn.yahoo.com
or file microSoft.vbs and microSoft.bat ?
Hi donisaurus,
Try a boot time scan with avast! Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested.
Try the usual free adware/spyware scanners.
Ad-Aware Free
Spybot Search & Destroy
SUPERAntiSpyware Free
Malwarebytes’ Anti-Malware
Download, install and update the programs. Disconnect from the internet (pull the plug) before running scans in Safe Mode if possible.
Always select the option to quarantine any malware found rather than delete it, then you will be able to restore files or registry entries wrongly identified as malware- a rare but not unknown event for any malware scanner.
Try some online scans. (Disable avast! while scanning.)
F-Secure
BitDefender
Trend Micro Housecall
ESET Online Scanner
If still having problems, post a HijackThis! log.
i have this sampel of MicroSoft.bat and MicroSoft.vbs… where should i put so alwil team can test it?
Upload the above files to VirusTotal for analysis.
If they are confirmed as malware, put them in a password-protected Zip file and send to virus[at]avast.com, mentioning the password in the body of the email.
Hello today this virus have new domain located here : hxxp://ad.userads.info/in.htm is avast free can cure this virus ? thanks
dudemjk
start your own thread
then you can follow the basic instructions in this one but post the results in your new thread
what os
what firewall
what antispyware apps do you have
For the MBAM scan
be sure to put a check next to all items to be removed
and then click
REMOVE CHECKED
post the SAS and MBAM logs
update these programs before running every scan as they update all the time