Avast constantly blocking trojan horse over and over again

[magna86]

I did what you said in the last post, but could not find the combofix log, so I ran it again and got some error message telling to continue, cancel or abort, I think. Sorry for the screw up.

Did I understand correctly ...
When you run Combofix, during scanning with Combofix you got that error?

Ok, restart your computer, then delete current copy of Combofix and download fresh one. Create CFScript and re-run Combofix.

[MMR]

I restarted my computer, then deleted current copy of Combofix and download fresh one. Create CFScript and re-run Combofix. Then when I could not find the log I redid it all over again ang got the error. It worked fine the first time I just could not the log so I tried it again.

[magna86]

Please download zoek.exe and save it to your desktop.

• Close any open browsers.
•   Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
  
  
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
  
• Select "Combined fix"options    (bottom right)
  
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:

Code: [Select]


filesrcm;
startupall;
MyWebSearch;z



• Click on Run script button
  Please wait until a logreport will open (this can be after reboot)
  
  
• Save notepad to your Desktop and attach here zoek-results.log
  
  Note: It will also create a log in the C:\ directory named "zoek-results.log"
  
  
  

******************


> Try just to re-run Combofix without using CFScript, see if that works?

*****************


> Re-run OTL, click on RunScan button and attach here fresh OTL.txt log

[MMR]

Sorry for the delay, here are all the logs.

[magna86]

@MMR
If I don't respond to you within 24 hours, please refresh/bump your topic.

[magna86]

@MMR

First lets check posible AV leftovers...

Download AppRemover (~ 6MB) on Desktop .
Run it by double-clicking
unchecki Enable anonymous usage statistic

Click Next, choose the second option (Clean Up a Failed Uninstall), confirm with Continue, go to Next, wait to be finished, choose any antivirus leftovers if shows , scan and remove it by clicking on the Next .


***************************

> How's your computer running now?

[MMR]

AppRemover did not find anything and my computer is running fine.

[magna86]

Nice... 



It is necessary to uninstall ComboFix :

• Click Start (or ) then Run.
  
  
  On Windows7 or Vista you may use Start Search field if Run is not available.
  
  
• In the line of text type in (Copy) the following:

Code: [Select]

ComboFix /Uninstall

Note that there is a space between " ComboFix " and " /Uninstall " .

• then click OK (or press Enter ).

Wait for the uninstall process is complete.

--------------------



> Re-run OTL and click on CleanUp! button.

You will be asked to reboot the machine to finish the cleanup process, choose Yes.
After the reboot all the tools we used should be gone.
Note: Some more recently created tools may not yet be removed by OTL. Feel free to manually delete any tools it leaves behind.