Troj_crawler.a undetected?

[thegreger]

Hi! New user here!
Starting just a few hours ago, Avast has started blocking the file lupdate.exe in C:\Program files(X86)\Common files\ComObject from accessing various websites. From what I gather, it could be this trojan: http://about-threats.trendmicro.com/ArchiveMalware.aspx?language=us&name=TROJ_CRAWLER.A

Avasts blocks it from accessing the pay-per-click sites quite nicely, but it doesn't seem to detect the virus. I've tried scanning the individual file lupdate.exe, I've tried scanning the folder ComObject and I've tried running a full system scan (with updated definitions). Still nothing. I've also run a full scan with MalwareByte's, and nothing there either. I'm pretty sure something isn't right with my computer, since firefox updater shouldn't try to access porn sites.

Any ideas? I'm grateful for any help.

[Pondus]

you can try checking that lupdate.exe file at www.virustotal.com when you have the result, copy the URL in the address bar and post it here

for checking your comp

Follow this guide form our expert malware remover Essexboy and post the log`s here
http://forum.avast.com/index.php?topic=53253.0

To avoid using multiple post with copy and paste you have to attach the log`s
Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. )

[thegreger]

Thanks! The url from virustotal.com is:
http://www.virustotal.com/file-scan/report.html?id=fb9045b74615a339fcdc3016f899aec5b8afbdacde5421d94d777c709295c2fd-1291753396
seems clean, right?

However, Malewarebyte's seems to have gotten it. I'll attach the log. I haven't seen any symptoms since restart, but do you still want me to install/run OTL?

Thanks a bunch!
/Greger

[Pondus]

I haven't seen any symptoms since restart, but do you still want me to install/run OTL?

yepp it is quick and Essexboy is online.....

[thegreger]

Ok, here they are! I'll keep you updated if I notice anything new.

[essexboy]

64 bit system    Hard to get an infection to stick on those at the moment

Logs look Clean

To remove OTL run it and then hit the cleanup button