JS:Redirector-BOS [Trj] blocked again and again

Hi everyone !

Yesterday, a pop up from Avast appeared after I downloaded a torrent file and opened it to start downloading it using utorrent (a fansub OAV).
As Avast blocked an infection, I didn’t start the torrent download and deleted the file directly.
However, I always got the Avast message everytime I launch utorrent (screenshot in attachment).

  1. I did a quick scan using malwarebyte which detected some problems which were solved and then I rebooted my computer. (But I always had the avast detection)
  2. I dowloaded adwcleaner and it did detect some problems which were removed successfully (said the logs) but the problem is always remaining.
  3. So I followed instructions of essexboy about OTL and TDSSKiller (given in this post, as the problem is exactly the same) and attached the reports to this post.

I also analysed the file utorrent.exe with avast and trojan remover and it said that this is clean :s

Hope you’ll be able to help me.
Thanks in advance !

Darx`

Remover Notified

what do you mean by this ?

it means that the malware experts are notified about your topic and will check it when online…

More extensive explanition. Since Pondus, Steven nor I know much about the logs you guys post, there are people here with specific training to help you guys. We are mods, they are experts.

After we get the logs they need, we tell them and they try their best to help you out

Are you still using Avast 5?

According to your OTL Log there is still Avast 5:

SRV - [2014/01/27 22:01:46 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) PRC - [2014/01/27 22:01:47 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2014/01/27 22:01:46 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

On the Avast popup does it state that the starting file is Utorrent ?

If so then you also have an infected seed on your system

Could you screenshot the Avast popup please

Hi everyone !

@Steven : I updated AVAST right after I finished following essexboy’s instructions in the other post.
I thought avast was updating automatically but i certainly unabled auto update before.

So now Avast is up to date ( version 2014…0.2013). I did another quick scan and nothing was found.

@Essexboy : Yes the starting file is Utorrent

I ran u torrent 3 times today and let it run. Good news ! No avast pop up whereas I did nothing more than yesterday. So for the moment, problem solved (don’t know how).

If it come back, I’ll reply on this post !

Thanks everyone for your fast replies.

Darx`