Trojan Detected But Unable to Remove

Viruses and worms
1

I keep getting messages saying trojan horse stopped but am unable to erase the problem.

Have run full scan at least 5 times, both deleting & moving to chest infected files.

Have also run the DOS program & still have the issue.

Any advice?

2

If you can either post a screenshot of the avast alert dialogue window or the full information on the detection, file name, location and malware name, etc. ?

Some detections could be from the shields designed to prevent malware getting on to your system (web shield, etc.), in which case there wouldn’t be anything on your system. That is why the information relating to the detection is crucial.

If by DOS program do you mean the boot-time scan (or something else) ?

3

Trojan is Win32:Sirefer-BTT, Win32:Malware-gen

4

Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

5

http://forum.avast.com/index.php?topic=135962

6

Adware Log

7

Could I have a screen shot of the alert please

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please copy and paste log back here.
[*]The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

8

Next Log

9

@aussieboxy go direct to the FRST log please as that one will show me where it is and then enable me to delete it

10

Here is the FRST log

11

Download the attached fixlist.txt to the same location as FRST
Run FRST and press Fix
A log will be generated please post that

THEN

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now