Hi, I use Roguekiller, Avast, malwarebytes, Malwarebytes mbar (anti rootkit) and Eset Online Scanner (its a one time use scanner).
I regularly scan my pc and dont visit dangerous sites, so not sure how I got this,bust avast found HTML:Scam-P [Phish], on file or website or dont know what it is called game4853.firdayfun78.live . I think however that I accidentally clicked on one website on google on 27th that showed this up?
This keeps showing up only on Avast and nowhere else.
Even when I put it in virus chest, it doesnt show up there. Avast reports only name of infection, and not infected file, or its location.
I think I became infected on October 27,1:27 AM because Avast in notification history reports "threat blocked" and that it safely aborted connection to that game4853 website. I suppose it did not abort anything since it keeps reporting this infection :/. I think back then I clicked accidentaly on one website on google where I received this report.
So, I got help at bleeping computer, with farbar logs they managed to get rid of the issue, and I was no longer seeing infection on avast for like 2-3 days, but for some reason it reappeared again, I have not clicked on any weird website or anything. iMacg3 was helping me, nice and skilled guy btw , hes a moderator here as well.
Here is original post on bleepingcomputer:
Thing is, that I might be dealing with something probably more difficult, I think problem might be reappearing for as long as infected file is still on my PC, unfortunately avast doesnt report location of the file.
Can you guys please help me find core of the problem?
I am attaching farbar logs (and screenshot of what avast keeps reporting) that I produced right after finding that virus yesterday, and before I tried to put it in chest or delete it (which doesnt do anything anyway).
Edited by salenai, 06 November 2019 - 04:36 AM.