Hi,

I get a strange trojan horse warning when I use google chrome - searching with google.at for ‘marco tozzi’ (shoes).

http://i53.tinypic.com/ic3j2w.jpg

It only happens when I use chrome and google search.

…and no points down this is not my computer - got a newer one.

edit: finally could update my profile - woohoo

Not applicable as Bima updated her signature. :slight_smile:

That could suggest a chrome infection, maybe one of the addons

The only add-on I ever installed is a game bar from zynga (facebook games) - I could uninstall it because I don’t use it anymore - unless you mean any other addons.

full file path //C:\Users\B\AppData\Local\Google\Chrome\Application\chrome.exe

I let Avast check the ‘Application folder’ - nothing found.

What I think is strange is that the warning pops up when using the search - I didn’t open a website.

Try this

Please download GooredFix from one of the locations below and save it to your Desktop

Download Mirror #1
Download Mirror #2

[*]Ensure all Firefox windows are closed.
[*]To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
[*]When prompted to run the scan, click Yes.
[*]GooredFix will check for infections, and then a log will appear.

Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

Could be google prefetch…the first results are “Pre-loaded” by the browser in case it was the one you wanted to choose. I have seen this in Firefox as well…

http://www.technipages.com/google-chrome-disable-prefetch.html

The option has changed now though, still in the same location, but different name:
Predict network actions to improve page load performance

That particular js file is infected, there is a script attached to the end…
avast is not the only one to detect: http://www.virustotal.com/file-scan/report.html?id=0b6292c49b337a4684dad69dc58a05add35f51554cee5378dc794f7ef5d3ccc7-1314740182

I personally think that this is a webshield detection, i.e. not an infection in the machine. Though a look from eb will never hurt :wink:


essexboy, I thought GooredFix was only for FF ???

A friend send me a hint and I found something in a google forum - after deleting cookies, cache and browser history in chrome no warning anymore when I search ‘marco tozzi’.

Some people think that it has to do with the ‘google picture’ search… I did use the picture search before the warning on the web search site popped up.

I’ll give GooredFix a try when I have time (maybe this weekend) - hope I’ll never have this problem with FF.

And last but not least a little praise for Avast - I really like it that Avast warns you and blocks the bad things :slight_smile:

Chrome and Firefox use similar addons/extensions as far as the malware is concerned. But if it was in your temp files then that is good