WIN32-ZBOT-NAY TRJ

i scanned my computer today and got three files in the temp folder with this name. now avast cleaned it but i’m still getting redirected from google search results… and if i search for redirected sites it’ll redirect me to a msdn tech support site.

Welcome to the forum tommy96814.

How did Avast clean your temporary [Internet files] “folder”? What kind of scan did you run and what did Avast do? Delete, quarantine and put it in the Virus Chest?

You had just signed off the forum and I just missed getting a response from you. If anything is in the Avast Virus Chest, leave it there and do NOT delete it. This is what I suggest:

  1. Clean your temporary Internet files with both in the order posted:

1A. CCleaner, a free system optimization, privacy and cleaning tool. There is a Slim version available as well at http://www.piriform.com/ccleaner/builds – scroll down. It removes unused files (cache, temporary Internet files, etc.) from your system, allowing Windows to run faster and freeing up valuable hard disk space. It also cleans traces of your online activities such as your Internet history.

1B. Download TFC by OldTimer to your desktop.
http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
· Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
· It will close all programs when running, so make sure you have saved all your work before you begin.
· Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
· Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

  1. Check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0.

  2. Follow the directions of obtaining an MBAM (Malwareybytes) log (make sure you update MBAM first) and the OTS logs (save OTS as ANSI and not Unicode). Post the MBAM log and the OTS log as an attachment (Additional Options > Attach > Post).

I am going to refer you to our Certified Malware expert, named Essexboy. He will also review your logs and give you further instructions, however he comes on the forum late UK time. He will respond to you in this thread, so remember to check this thread daily.

Please do not make any further changes to your machine after you have provided the logs.

IMPORTANT: If you are on a home network, disconnect the affected machine from the network. Do not share a USB/flash drive with this affected machine. Do not use this machine unless Essexboy instructs you do to malware removal instructions; use a different machine to check email, sync your phone, etc. if possible.

Let me know if you have any questions. Thank you.