possible trojan antiagency

dogfish12

Hello, Just had this quarantined by avast a possible trojan horse. I notice this has gone to a link, please do not click on it. This was on fly or die darts. IS IT REAL? i DO NOT KNOW.

debitcardmayhem

dogfish12 wrote: »

Hello, Just had this quarantined by avast xxxxxxxxxxxxxxxx as a possible trojan horse. I notice this has gone to a link, please do not click on it. This was on fly or die darts. IS IT REAL? i DO NOT KNOW.

Take out the link first (edited sorry on your Original post ^^^^)

GunJack

Okay, go back to mbam, update and quick scan, delete all it finds and post the log, then

run hijack this and post the log.

spg_SCOTT

Right click the avast tray icon and click show last popup message.

What was the process?
If it was a browser, then it is probably an infected webpage that avast has prevented you from browsing to.

aliEnRIK

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

reboot
Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

dogfish12

The virus is described in avast as JS:FAKEAV-Q (TRJ). I've run a full system scan using avast and nothing has been found.

dogfish12

Run scan using malwarebytes. Nothing found.

aliEnRIK

Please follow the instructions as posted (for example, post the log)

if you dont, we cant help