win32:bprotect-d detected

Viruses and worms
1

Hello,

The following files were flagged during a boot scan. I have attached several logs that seem to be requested for this issue. Thanks for any assistance you can provide!

AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S283O2QI\pack[1].7z|>bprotector.xpi|>bprotector.js is infected by JS:BProtect-C [Trj], Delete: Error 42111 {The operation is not supported for this type of archive.}
AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S283O2QI\pack[1].7z|>spext.crx|>background.js is infected by JS:BProtect-A [Trj]
AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S283O2QI\pack[1].7z|>bprotect.exe is infected by Win32:BProtect-D [Trj]
AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S283O2QI\pack[1].7z|>kerberos_bho.dll is infected by Win32:BProtect-D [Trj]
AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S283O2QI\pack[1].7z|>protector.dll is infected by Win32:BProtect-D [Trj]
$Recycle.Bin\S-1-5-21-3815017184-4207833716-2438809527-1002$RS7E5T4\cmjv1.exe Error 42110 {The file is a decompression bomb.}

2

They were in your temporary internet files

Download the attached Fixlist.txt to the same location as FRST
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

3

I ran FRST a second time with the Admin account (Fixlog.txt), since the first log didn’t list the user with the pack[1].7z.

Thanks for the help!

4

You will need to reset chrome to remove some traces https://support.google.com/chrome/answer/3296214?hl=en-GB

How is the computer behaving ?