Аваст находит троян в msedge.exe и в google.exe

[Akaza]

Прошло очень много времени с тех пор как начала открываться вкладка с названием smartlink.name и аваст быстро блокирует его. Посмотрев где находится этот троян я понял что оно указывает на программу chrome.exe. Я пробовал очень много способов как его устранить но ни одно не помогло. Этот smartlink.name иногда открывается автоматически а иногда когда я открываю chrome. Я проверил реестр и многие места где мог быть этот троян. Но к сожалению никакого решения я не увидел. Ситуация похожая на эту картинку. Такая же проблема с smartlink.name происходил и в opera gx. Но я удалил этот браузер.

Заключение: два моих браузера выдают себя за вирус.

[Akaza]

It's been a long time since a tab called smartlink.name started to open and avast quickly blocks it. After looking where this Trojan is located, I realized that it came from the chrome.exe program and msedge.exe. I've tried so many workarounds but never worked. This smartlink.name sometimes opens automatically, sometimes when I open chrome. I searched everywhere and in all folders where this trojan could be. Unfortunately, I didn't see any solution. The situation is similar to this picture. The same problem with smartlink.name also occurs in Opera GX. But I deleted this browser.

Conclusion: Two of my browsers are posing as a virus. Chrome and msedge

[MKDB]

Hello @Akaza  and 

 

My name is MKDB and I will assist you.

 

 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow the steps in the given order and post back the log files.
• Please copy and paste all log files into your post.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• As English is not my native language, please do not use slang or idioms. It may be hard for me to understand.
• If you do not respond within 4 days, your topic will be closed.
• Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also a big source of current trojan infections. If you are running any kin of illegal software on your system, please uninstall them now, before we start the cleaning procedure.

 

 

 

Step 1

• If you already have Malwarebytes Anti-Malware installed, then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
• If you don't have Malwarebytes installed or if you don't run the newest version yet, please download it from here and install it.
• Once the MBAM dashboard opens, click on Settings (gear icon).
• Click on Security tab and make sure that all four Scan options are enabled.
• Close Settings and click on the Scan button on the dashboard.
• Once the scan is completed make sure you have it quarantine any detections it finds.
• If no detections were found click on the Save results drop-down, then the Export to TXT button and save the file as a Text file to your desktop.
• If there were detections then once the quarantine has completed click on the View report button, then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run, then please skip to the next step and let me know in your next reply that the scanner would not run.

 

 

Step 2

Please download AdwCleaner and save it to your desktop.

• Double-click to run it.
• Accept the End User License Agreement.
• Click Scan Now.
• When finished, if items are found please click Next / Quarantine.
• Maybe your PC will be rebooted, AdwCleaner will be opened automatically.
• Click View Log File.
• AdwCleaner will open one log (AdwCleaner[Cxx].txt).
• Please attach the log to your next reply.

 

 

Step 3

Please download the suitable version of Farbar Recovery Scan Tool (FRST) and save it to your desktop: 32bit | 64bit

• If your computer language is other than English, right click on the FRST icon and rename it to FRST64english.
• Double-click to run it.
• If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option.
• When the tool opens, click Yes to disclaimer.
• Check the box in front of Shortcut.txt.
• Press the Scan button.
• FRST will create three logs (FRST.txt + Addition.txt + Shortcut.txt) in the same directory the tool is run.
• Please attach these logfiles to your next reply.

 

Thank you!

[MKDB]

Hi @Akaza,

do you still need help? If so, please follow my instructions and post the logfiles.

Thank you.

[MKDB]

Due to the lack of feedback, I do not follow this topic any longer.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection.

Thank you.