JS:Dropper-CN [trj]

Viruses and worms
1

My AVAST Free Antivirus pops up every 5 minutes or so with a message “virus threat has been blocked”. How do I remove the virus so that antivirus would stop bothering me?))

Object: hXXp://wpad.bn06.com/wpad.dat
Infection: JS:Dropper-CN [trj]
Process: C:\Windows\system32\svchost.exe

It doesn’t reveal via virus scan. So scan logs doesn’t have any info regarding this issue. I don’t know which logs contain information about blocked threats.

2

You where asked to provide the log files > https://forum.avast.com/index.php?topic=194892.0

3

I did scan with Malwarebytes - didn’t show anything. Clean. No threats. What’s the point of attaching that log here? Same thing with antivirus.

And by the way how to attach files here? I can’t find a button…

4

If you want help, follow the instructions.

5

I do want help, I just can’t find a way to attach files!

6

Read the instructions, it’s explained there.

7

Attached to the top message

8

Sorry for the delay; we need one more scan / search to correct the proper Registry entries for this problem.

Run a search with FRST.

  • Right click on FRST on your desktop and select “Run as Administrator…” When the tool opens click Yes to disclaimer.
  • Type wpad.bn06.com;wpad.dat into the Search Box.
  • Press the Search Registry button.
  • It will produce a log called search.txt or SearchReg.txt in the same directory the tool is run from.
  • Please attach the log file back here.