i am infected whit this trojan avast not detected

help my to remove this is virus total analiz http://www.virustotal.com/file-scan/report.html?id=72685096c17af710c474e0c31a89895091e6e15b5534380826c09e5fbba38193-1291346388

get malwarebytes


Welcome to the forums, Tony :slight_smile:

It seems you have NFOviewer.exe on your computer. MBAM might be able to get it and even if it does, make sure the below files are deleted.

NFOviewer.exe

7v146.exe

IbHr5IWpNw.ocx

2T101asy.exe

8AO.ocx

Actually, this may be a case for Essexboy as this one may have rootkit functions.
Please wait for him to reply.


Hi not a great deal showing there - what problems do you have at the moment ?

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL [2010/11/18 10:01:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vlad\AppData\Roaming\Mozilla\Firefox\Profiles\n9xnmyow.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66} [2010/11/16 03:42:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vlad\AppData\Roaming\Mozilla\Firefox\Profiles\n9xnmyow.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2010/11/16 03:23:40 | 000,000,000 | ---D | M] -- C:\Users\Vlad\AppData\Roaming\Mozilla\Firefox\Profiles\n9xnmyow.default\extensions\browserprotect@browserprotect.com

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

it seems that malwarebyte remuved

can you post the Malwarebytes scan log ?

Malwarebytes scan log

Any remaining problems ?