Avast threat detection

[Holly_Hobby]

Hi,

I continue to get threat notifications from Avast free. How do I stop the continued threats?

They appear to be coming from Google. I have Google Chrome installed, but only use it for Chromecast. I use Firefox for everything else. I don't use Google for searching, I use ixquick. I haven't used Chrome cast for about a week.

I get notifications every 2 or 3 minutes the entire time my computer is on. It started this morning.

Here is the information on the threat notification:

URL: http://r4---sn-c0j3xtxj5caxntnuxh-uval.c.pack.google...blah blah blah
Infection: Win32:Fareit-LM [Trj]

Thanks for any advice.

[polly7]

1. Is your free trial about to run out, by any chance?

I had a * of a time with Avast when mine was nearly over and had to uninstall it completely - which was very hard. I hope you get some answers, I am not a computer whiz by any means, but that's the only thing that worked for me.

[Holly_Hobby]

3. I didn't realize it would run out...

Isn't it free indefinitely? Thanks

[mockmonkey]

7. mine is

It does ask you to Update to a newer free version from time to time but it's hardly a hassle when it's free.
Maybe if it isn't downloaded from the Avast site itself and is instead from some other site that is has that issue.

[hobbit709]

2. That's a trojan.

Run a complete scan of your system with both Avast and Malwarebytes Antimalware.

Google Chrome may be infected.

[Holly_Hobby]

4. I will, thanks for your reply n/t

[PrestonLocke]

5. "Google Chrome may be infected."

[hobbit709]

6. I've had the "questionable" pleasure of dealing with a redirect embedded into a browser.

The easiest way is to completely uninstall the browser, defrag, and then reinstall the browser.

[PrestonLocke]

8. How exactly was this redirect embedded into the browser?

Also, redirect =/= trojan.

What does defrag have to do with anything?

[hobbit709]

9. When you delete something it doesn't really go away on that location until it's overwritten.

All it takes is a modified .dll in the browser program files. Yes, you could track down the bad file but do you really want to spend the next 3 days trying to find it.
I find it's a lot faster to wipe and reinstall in some cases, especially when I charge the customer by the hour.

[PrestonLocke]

11. "I find it's a lot faster to wipe and reinstall in some cases, especially when I charge the customer

I once worked for a guy who would spend 10+ hours up to days removing malware, still only charging the customers for 2 hours of work. He simply wouldn't accept reformatting as an answer.

Completely agree though, formatting will save the customer time while teaching a lesson.

[mockmonkey]

10. You can also try this

Microsoft Safety Scanner

http://www.microsoft.com/security/scanner/en-us/default.aspx

" Win32/Fareit is a malware family that has many components: it consists of a password stealing component, PWS:Win32/Fareit, that steals sensitive information from your PC and sends it to a hacker, and a Distributed Denial of Service (DDoS) component, DDoS:Win32/Fareit.gen!A, that could be used against other servers."

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Win32%2FFareit

They suggest changing your passwords after you have removed the threat.

[Pharaoh]

12. virus

run malware bytes,

if that doesn't work I'd try a system restore to a previous date.

[Holly_Hobby]

13. Malwarebytes fixed the problem, thanks n/t