Jump to content

Trojan horse blocked: visicom_antiphishing.exe


cnp2

Recommended Posts

Greetings

My pc appears to have been infected by a trojan which is being blocked by Avast!

Details:

http://www.avast.com...ScriptSH-inf%20[Trj]&p_prc=C:\ProgramData\Anti-phishing%20Domain%20Advisor\visicom_antiphishing.exe&p_obj=http://urlfilter.vmn.net/vmnsbf/data/121205002101-m.zip|121205002101-m.list&p_var=.%2Ffa%2Fen-eu%2Fvirus-alert-default&p_pro=0&p_vep=7&p_ves=0&p_lqa=0&p_lsu=24&p_lst=1&p_lex=28&p_lng=en&p_lid=en-eu&p_elm=7&p_vbd=1474

I have run Malwarebytes and there were 2 objects found I then removed them and restarted my pc as prompted.

Files Detected: 2

C:\Users\***\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.332.1_0\plugins\rlcm.dll (PUP.Adware.RelevantKnowledge) -> Quarantined and deleted successfully.

E:\AllDocuments\Downloads\Web\LNUKChristmasGiveaway.zip.exe (Affiliate.Downloader) -> Quarantined and deleted successfully.

Once restarted I opened Chrome and immediately got the same Avast! warning.

Any ideas on how to remove this virus please?

(I have run dds.scr and attached the 2 logs)

Many thanks

Chris

attach.txt

dds.txt

Link to post
Share on other sites

Hello Chris and :welcome:! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

According to this message, Avast blocked the content which trying to download your legitimate installed application named Anti-phishing Domain Advisor. Looks like Avast find something dangerous in this content. If you don't use Anti-phishing Domain Advisor, I suggest you to uninstall it and your problem should be solved.

Link to post
Share on other sites

  • 2 weeks later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.