Author Topic: avast alerts JS:Iframe-DHY [trj] when I open chrome  (Read 4113 times)

0 Members and 1 Guest are viewing this topic.

jt100uk

  • Guest
avast alerts JS:Iframe-DHY [trj] when I open chrome
« on: January 12, 2014, 10:05:41 PM »
Hey all newb here.  I seem to have an issue.  I use chrome to browse.  When I open chrome which is set to open to

wxw.google.com

I get a popup from avast saying FS:Iframe-DHY[trj] blocked.  I have ran scans with avast, spybot, and per the instructions form the avast help desk adwcleaner, and malwarebytes.  Non have been successful in helping with this problem  If anyone has any input as to what else to try let me know please.  I have attached the popup and the logs from adw and malwarebytes if it helps.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #1 on: January 12, 2014, 10:16:21 PM »
Can you follow this instructions here and attach an OTL Log please?

http://forum.avast.com/index.php?topic=53253.0
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

jt100uk

  • Guest
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #2 on: January 12, 2014, 10:53:24 PM »
OTL log attached thanks.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #3 on: January 12, 2014, 11:05:30 PM »
Could you try IE and see if you get the same problem

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKU\S-1-5-21-1446546377-549777807-797177765-1009\..\SearchScopes\{92D595C6-37C5-4DF9-B442-0AC7B7E2537E}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3306061&CUI=UN90130351532504215&UM=2
O3 - HKU\S-1-5-21-1446546377-549777807-797177765-1009\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKU\S-1-5-21-1446546377-549777807-797177765-1009..\Run: [RunIt] "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" about:newaddon?id={64d64833-9296-421b-a362-83cfbd6291b6} File not found

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

jt100uk

  • Guest
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #4 on: January 13, 2014, 01:33:55 AM »
Ok does NOT happen with IE, only google tried X3 100% happening w/chrome 0% IE.  So must be something infecting chrome, will run the otl with the new custom scan and post log. Back in a few.

jt100uk

  • Guest
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #5 on: January 13, 2014, 01:44:13 AM »
ok ran the fix, problem still occurred after reboot when chrome opened.  Attached is the log from OTL

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #6 on: January 13, 2014, 02:55:25 PM »
OK lets take a deeper look at chrome

Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from. 
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

jt100uk

  • Guest
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #7 on: January 13, 2014, 10:28:43 PM »
Ok here are the logs from farbar.  I greatly appreciate your help.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #8 on: January 13, 2014, 10:38:12 PM »
Download the attached fixlist.txt to the same location as FRST
Run FRST and press FIX
On completion reboot and try chrome again

jt100uk

  • Guest
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #9 on: January 13, 2014, 11:09:40 PM »
Ok ran fixlist rebooted still no fix.  This is frustrating.  Do you think uninstalling chrome would help?  And then would I be able to reinstall?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: avast alerts JS:Iframe-DHY [trj] when I open chrome
« Reply #10 on: January 13, 2014, 11:21:18 PM »
Yes that would work

You will need to do a clean install.  There are instructions here https://support.google.com/chrome/answer/111899