some advice from the pros-I keep getting a message from Avast saying "Threat...

Viruses and worms
1

Blocked"
JS:Decode-AHP(Trj) was blocked and the process that it is associated with is:
Process: C:\Program Files\MSN\Service\wlcommsvc.exe

This happens a couple of times a day. The last time was when I visited a fairly innocuous site but sometimes when I’m not surfing at all. What do I do?

I believe Wlcommsvc.exe is associated with Windows Live Messenger. Is this the program through which an infected file tries to create problems?

Any help would be greatly appreciated.

Thanks!

2
but sometimes when I'm not surfing at all.
this indicate possible infection

follow guide and attach logs (not copy and paste). http://forum.avast.com/index.php?topic=53253.0

AdwCleaner
Malwarebytes
OTL
aswMBR

run in the order listed…when done removal experts will be notified

3

Normally this process is safe: http://processchecker.com/file/wlcommsvc.exe.html

But there can be a virus involved…or more probably an attacker tried to see your OS was vulnerable to be compromised and avast! stopped that!

This is a feasable method.
Uninstall the present version, then downlaod a new version , but do not download the Chinese version from China…
方法，在C:\Program Files\MSN\Service下分别新建两个记事本，并分别命名为1.cmd和2.cmd
To kill the process.
Go to command prompt
give in: taskkill /f /im wlcommsvc.exe

call 1.cmd

&

del wlcommsvc.exe /f/q/a
call 2.cmd

Info credits go to to ziimee dot com

But first follow the instructions to the above posting…

polonus

4

Java Exploit from the looks of it. Update your Java. It might help. If it is a hacker, he/she is probably exploiting the Java. Given the JS/*****/****

5
Update your Java.
update will patch the security hole....if not already done....but not remove the infection