JS:FakeCodec-G [Trj]

Viruses and worms
1

When I close my Firefox browser, Avast Home warns about this being a Trojan. The path ends in _cache3_ in a Firefox location on my C drive. If needed, I’ll have to wait for the warning to happen again, and I’ll write it down.

I have repeatedly clicked “delete”, but it re-appears from time to time - there is no pattern.

I have tried running a full scan in each of Avast, Adaware, Spy Doctor, Malwarebytes’ Anti-Malware, and Spybot (all free versions).

How do I go about getting rid of this problem permanently? I’ve searched “JS:FakeCodec-G [Trj]” on Google, Bing, and this web forum, but I get no hits.

Thanks
Stonesfan

2

-= Try Boot Time Scan with avast… IF necessary, enable test of archived files & make it thorough…

-= By the way, what is your OS…?

3

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster.
  8. Check if you have insecure applications with Secunia Software Inspector.
4

Operating system is Windows XP Home.

5

StonesFan, did you schedule avast at boot time?

6

I was at work earlier. I’m running the boot scan now. It will probably take 3 or 4 hours.

7

The boot scan found some corrupted files, but Number of infected files: 0.

8

Dr Web Cureit found in c:\windows\system32 the object gtdownlr_126.ocx. The action shows incurable moved.

Do you think this solved my problem?