wpad.dat virus

[vtmckoy]

Hi,

I have encountered a virus of some sort.  I keep getting the avast pop-up stating that a threat has been detected.  When I view the task manager, I see an application is running (partial name is:  http://46.165.229.29/wpad.dat?n).  I attempted to kill it; however, it will not die.  So, I went to processes and a few iexplore.exe processes are running.  After I kill them, then the wpad.dat application dies.  However, seconds later, it respawns.  The avast pop-up (threat has been detected) pops up continuously.  Attached is a screen capture of the task manager running the application and the pop-up from avast. 

Can someone please help me remove this virus?  I also downloaded and ran OTL.  Attached is the OTL also.

 Thank you, Vickie

 

[vtmckoy]

I just ran an mbam scan, checked everything and removed everything.  After disinfection, it prompted me to restart.  I am still getting the pop-ups and the wpad application is still running.  I attached the mbam log.

Thank you,

[mikaelrask]

hey also attach the logs from adwclener,otl and aswmbr, from this guide.

http://forum.avast.com/index.php?topic=53253.0

begin with adwclener then otl and then aswmbr.

awclener will remove any toolbar or other crapware from your browser.

[argus]

Monitoring.

[vtmckoy]

Hi mikaelrask,

Phel (from geekstogo) picked up my initial post from that forum.  So, I will work with that person on this issue.  Thanks for your response.

[essexboy]

That's good he is one of my students there, so you get two analysts for the price of one