Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Bima on August 30, 2011, 08:44:39 PM

Title: Trojan warning when using google chrome
Post by: Bima on August 30, 2011, 08:44:39 PM
Hi,

I get a strange trojan horse warning when I use google chrome - searching with google.at for 'marco tozzi' (shoes).

(http://i53.tinypic.com/ic3j2w.jpg)

It only happens when I use chrome and google search.



...and no *points down* this is not my computer - got a newer one.

edit: finally could update my profile - woohoo  
Title: Re: Trojan warning when using google chrome
Post by: YoKenny on August 30, 2011, 08:51:00 PM
Not applicable as Bima updated her signature.  :)
Title: Re: Trojan warning when using google chrome
Post by: essexboy on August 30, 2011, 08:57:52 PM
That could suggest a chrome infection, maybe one of the addons 
Title: Re: Trojan warning when using google chrome
Post by: Bima on August 30, 2011, 09:28:18 PM
The only add-on I ever installed is a game bar from zynga (facebook games) - I could uninstall it because I don't use it anymore - unless you mean any other addons.


full file path  //C:\Users\B\AppData\Local\Google\Chrome\Application\chrome.exe

I let Avast check the 'Application folder' - nothing found.

What I think is strange is that the warning pops up when using the search - I didn't open a website.
Title: Re: Trojan warning when using google chrome
Post by: essexboy on August 30, 2011, 10:06:32 PM
Try this

Please download GooredFix from one of the locations below and save it to your Desktop

Download Mirror #1
 (http://jpshortstuff.247fixes.com/GooredFix.exe)Download Mirror #2 (http://downloads.securitycadets.com/GooredFix.exe)



Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).[/list]
Title: Re: Trojan warning when using google chrome
Post by: spg SCOTT on August 30, 2011, 11:44:22 PM
Could be google prefetch...the first results are "Pre-loaded" by the browser in case it was the one you wanted to choose. I have seen this in Firefox as well...


http://www.technipages.com/google-chrome-disable-prefetch.html

The option has changed now though, still in the same location, but different name:
Predict network actions to improve page load performance


That particular js file is infected, there is a script attached to the end...
avast is not the only one to detect: http://www.virustotal.com/file-scan/report.html?id=0b6292c49b337a4684dad69dc58a05add35f51554cee5378dc794f7ef5d3ccc7-1314740182

I personally think that this is a webshield detection, i.e. not an infection in the machine. Though a look from eb will never hurt ;)

essexboy, I thought GooredFix was only for FF ???
Title: Re: Trojan warning when using google chrome
Post by: Bima on August 31, 2011, 12:24:05 AM
A friend send me a hint and I found something in a google forum - after deleting cookies, cache and browser history in chrome no warning anymore when I search 'marco tozzi'.

Some people think that it has to do with the 'google picture' search... I did use the picture search before the warning on the web search site popped up.

I'll give GooredFix a try when I have time (maybe this weekend) - hope I'll never have this problem with FF.

And last but not least a little praise for Avast - I really like it that Avast warns you and blocks the bad things :)
Title: Re: Trojan warning when using google chrome
Post by: essexboy on August 31, 2011, 08:49:45 PM
Chrome and Firefox use similar addons/extensions as far as the malware is concerned.  But if it was in your temp files then that is good