JS:Dropper-CN [trj]

system · 2017-05-12T14:42:27.000Z

My AVAST Free Antivirus pops up every 5 minutes or so with a message “virus threat has been blocked”. How do I remove the virus so that antivirus would stop bothering me?))

Object: hXXp://wpad.bn06.com/wpad.dat
Infection: JS:Dropper-CN [trj]
Process: C:\Windows\system32\svchost.exe

It doesn’t reveal via virus scan. So scan logs doesn’t have any info regarding this issue. I don’t know which logs contain information about blocked threats.

Eddy · 2017-05-12T14:44:01.000Z

You where asked to provide the log files > https://forum.avast.com/index.php?topic=194892.0

system · 2017-05-13T08:21:25.000Z

Eddy post:2:

You where asked to provide the log files > https://forum.avast.com/index.php?topic=194892.0

I did scan with Malwarebytes - didn’t show anything. Clean. No threats. What’s the point of attaching that log here? Same thing with antivirus.

And by the way how to attach files here? I can’t find a button…

Eddy · 2017-05-13T08:27:57.000Z

If you want help, follow the instructions.

system · 2017-05-13T08:31:39.000Z

Eddy post:4:

If you want help, follow the instructions.

I do want help, I just can’t find a way to attach files!

Asyn · 2017-05-13T08:36:23.000Z

Backdraftt post:5:

Eddy post:4:

If you want help, follow the instructions.

I do want help, I just can’t find a way to attach files!

Read the instructions, it’s explained there.

system · 2017-05-13T08:51:12.000Z

Asyn post:6:

Backdraftt post:5:

Eddy post:4:

If you want help, follow the instructions.

I do want help, I just can’t find a way to attach files!

Read the instructions, it’s explained there.

Attached to the top message

dbrisendine · 2017-05-14T08:16:59.000Z

Sorry for the delay; we need one more scan / search to correct the proper Registry entries for this problem.

Run a search with FRST.

Right click on FRST on your desktop and select “Run as Administrator…” When the tool opens click Yes to disclaimer.
Type wpad.bn06.com;wpad.dat into the Search Box.
Press the Search Registry button.
It will produce a log called search.txt or SearchReg.txt in the same directory the tool is run from.
Please attach the log file back here.

Announcements