Trojan and viruses

I first had a notice saying i needed to scan my computer for a virus from Windows System Defender. i then went to look for the spinning avast icon which was not there, so i clicked on the shortcut for avast on my desktop but nothing happened. I then uninstalled avast and installed it again to try and make it work. It did a scan and found 2 viruses which got deleted but still wouldnt allow me to access the avast software. It now keeps coming up with a sign from windows system defender saying i have to buy the software as i have a trojan

what can i do to solve this issue?

Remove Windows System Defender (Uninstall Guide)
http://www.bleepingcomputer.com/virus-removal/remove-windows-system-defender

Pondus is correct.
Just so you can be sure, Windows System Defender (not to be confused with the legitimate MS Windows Defender) is what is called a rogue application. There’s big money in these, and they are usually installed via malware. It’s a total scam.

This Avast is just overwhelming, no e-mail address or phone that someone can call to get a simple answer…very frustrated. I have no choice but to start here…our of know where I enter a website I use quite often: wXw.mybriarcreek.com and up comes a warning and a Trojan making noises that there is something in that site that could harm my computer. Well, this website is for all the residents of Briar Creek, an over 55 development in Safety Harbor Florida and a site that many use on a regular basis. So I began to ask everyone if they have had any issue. I found no one, not even one person who has had any warning of any sort show up upon getting to the site. Everyone looks at me like I’m losing my mind; simple common sense would suggest that if in fact there was an issue, the webmaster would have been aware and someone other than me would have expereinced the same problem. So please, tell me what is in the site or what I should do; I just am not that computer savy to do much more than what I have and the simple fact that no one else has had any warning come up bothers me. I really want to be able to use the site. Is this a fake, a joke, a false alarm testing someones patience? PLEASE, SOMEONE HELP ME BE PROVIDING SOME HELP; I AM NOT SURE I CAN EVEN CONTACT THE WEBMASTER IN THE SITE WITH THIS TROJAN WARNING COMING UP. IF SOMEONE COULD E-MAIL ME AT:flamingo farm at yahoo dot com I would be grateful.

@flamingofarm

Please consider the following.

This page seems to be
Although Unmask Parasites hasn’t found anything outright suspicious on this page, Google currently lists it as potentially dangerous*

What is the current listing status for mybriarcreek.com?

Site is listed as suspicious - visiting this web site may harm your computer.

Part of this site was listed for suspicious activity 2 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 15 pages we tested on the site over the past 90 days, 5 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-10-26, and the last time suspicious content was found on this site was on 2009-10-26.

you can find the info at :

http://www.google.com/safebrowsing/diagnostic?site=www.mybriarcreek.com

and

http://www.unmaskparasites.com/web-page-options/?url=http%3A//www.mybriarcreek.com

@flamingofarm

I see mybriarcreek.com has been hacked so please make the link non-clickable like wXw.mybriarcreek.com

10/30/2009 12:56:03 AM	C:\Users\Ken\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9L3PCWM5\mybriarcreek_com[1].htm [L] HTML:IFrame-JZ [Trj] (0)
File was successfully moved to chest...

Please read:
Every 3.6 seconds a website is infected
http://www.scmagazineus.com/Every-36-seconds-a-website-is-infected/article/140414

Posting your email address on this forum is inviting spam as spammers visit here looking for email addresses.

Hi Flamingfoarm,

It is look like this web has been injected by favicon.ico, so iam not able to copy this webpage to webpage analysis.

Here is avast report to my e-mail :

avast! [USER]: File “http://xxx.mybriarcreek.com/favicon.ico” is infected by “HTML:IFrame-JZ [Trj]” virus.
“Resident protection (Web Shield)” task used
Version of current VPS file is 091029-0, 10/29/2009

Flamingfoarm,

Just to add to what has already been posted.

I believe that the actual infection is the code shown in the picture attached. It is one long line of obfuscated code that frankly, should not be there. (the text is broken to make it fit into one window)

-Scott-


Welcome to the forums, flamingofarm. :slight_smile:

Please change the link in your first post do that it is not an active link to malware.

Please change the www to something like this … wXw.mybriarcreek.com


Thanks for all the responses, I do appreciate the help and have learned a LOT from here! It turns out there indeed was a problem with that site, and it’s taken them almost a week to clean out all the problems. And remember I mentioned this website was for a 55+ retirement community, and no one else I talked to had the same issues? Do you think it could be due to the fact that nearly everyone else here has an ancient computer, without the ability to detect these problems? It turns out one of my neighbors is running Windows98,and they think they’re “high tech!”

Regardless, I changed the link and my e-mail address in my first post, as some of you suggested. Thanks again for all your help and suggestions.

The avast! web shield works in win98 although the user has to set the browser manually to use the web shield’s proxy; so ancient system shouldn’t be the issue.

Unless they are actually using avast, very few AVs even check for this type of thing (even though it is the most common infection method now), so they would be blissfully unaware.