JS:Agent-CDN [Trj]

Hi,
Avast is blocking me from youtube. This is infection:JS:Agent-CDN [Trj]
What can I do? A few hours ago I listend to music from yt - for ex this: http://www.youtube.com/watch?v=NwIZdh6MqIo
There wasn’t a problem.
Now - Avast is blocking this and almost every youtube film.
Thanks in advance:)

Hi,
I will be working on your Malware issues. During this case I will use multiple tools for the best possible analysis and malware removal.

Please download Farbar Recovery Scan Tool and Zoek.exe and save both tools to your Desktop.

[color=green] Note for Farbar Recovery Scan Tool (aka FRST):
You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[color=green] Note for Zoek.exe:
Do not launch Zoek.exe yet! We shall use it later.

http://www.mcshield.net/personal/magna86/Images/FRST.gif
FRST Scan:

[*]Double-click on FRST/FRST64 to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

I dont’ know…like this?:slight_smile:

And this…?

Yes, that’s right. You’ve done it right. :wink:

What is uncrear to you in instruction given above , tell me so I may correct that for the future?

I will give you a fix as soon as I review posted logs.

Hi

I got the same pop-up from avast about an hour ago, now like ola i cannot view youtube vids. could i attach my logs for you to look at aswell please magna?

Thx, in instruction everything is clear:)
I had a problem with Attachments and other options …I couldn’t find it :-[ :wink:

Hi,

You have been unticked all checkboxes in FRST and so you’re disable whitelisting.

Re-run FRST, do not change anything and click on Scan button and attach here fresh created FRST.txt log.

Indeed…sorry.

http://www.mcshield.net/personal/magna86/Images/Zoek_icon.png
ZOEKScript:

  1. Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.

  2. Double-click on zoek.exe to run it;
    Please wait while the tool does not start…

  3. Copy the text present inside the code box below and paste it into the large window in the zoek tool:




emptyclsid;
autoclean;
resetIEproxy;
C:\Program Files\mozilla firefox\searchplugins\babylon.xml;f
filesrcm;
startupall;
firefoxlook;
chromelook;


  1. Click on button
    http://www.mcshield.net/personal/magna86/Images/Run%20Script%20by%20zoek.png

Upon completion it will create zoek-results.log. Please wait until a logreport opens (this can be after reboot).

  1. Save notepad to your Desktop and attach here zoek-results.log

Note: It will also create a log in the C:\ directory named “zoek-results.log

Here is…:slight_smile:

@CosmicGuppy
for help, start your own topic

@Ola
Before we continue, do you know for program running with Windows from D:\ASRSetup.exe ?

I don’ t know…D is for diskstation on my computer.

Ok, re-run Zoek.exe as you did before using this script;



D:\ASRSetup.exe;i
AMBDef.exe;z
dir D:\ >> %temp%\log.txt;b
autoclean;
C:\RECYCLER\S-1-5-21-484763869-1604221776-682003330-1003\Dc2.exe;f
C:\RECYCLER\S-1-5-21-484763869-1604221776-682003330-1003\Dc6.exe;f
C:\RECYCLER\S-1-5-21-484763869-1604221776-682003330-1003\Dc5.exe;f
ipconfig /flushdns >> %temp%\log.txt;b
resethosts;
emptyalltemp;

Attach here fresh created zoek log

There is…

Re-run this one more time and attach fresh zoek log.

D:\ASRSetup.exe;i
dir D:\ >> %temp%\log.txt;b

Here is :slight_smile:

Sorry…now here is:)

O.K. How’s your computer running now? Do you still have malware warnings? 'cos I don’t see active malware here. Only crap&junk but we did clean that.