WIN32:Delf-GD

[REDACTED]

Hello,

I have been seeing repeated pop-ups all day today warning me that Avast blocked a virus.  I have scanned my system several times using Avast and Malwarebytes.  It appears to resolve the issue and then I get the pop-ups until it becomes infected again.  Then run the scans, rinse repeat all day.  The pop-ups stop only when I have the infection - once cleaned they start again.

mBam, OTL and aswMBR logs to follow.

Thanks for your assistance.

[REDACTED]

OTL Logs attached

[REDACTED]

aswMBR attached

[Theo Peterbroers]

Hi Dasbury07,

Attaching those logs is the right thing to do, but there may be a simpler solution.

WIN32:Delf-GD was named in a number of topics in this forum the past few days. You may use the search function to check out those posts.

The problem has been determined to be the vidicommedia antiphishing domain advisor. This product uses unencrypted Panda malware signatures. Those unencrypted signatures are seen by other antivirusproducts as the real threat.

Please check if the domain advisor is installed on your pc (probably without your permission) with the link near the bottom of this webpage hxxp://software.visicommedia.com/en/products/antiphishing/ (replace xx with tt). If so, uninstall the antiphishing advisor.

Best regards,

[essexboy]

That is confirmed... They use unencrypted data so Avast will see it as a virus

C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe