Solved Avast keeps finding virusses in a FileZilla Server directory

cheld

New Member
Thread author
Oct 25, 2018
3
2
2
Hi everyone,

On my Windows10 machines, I've recently switched from Malwarebytes Anti-Malware Pro to Avast, as the first seemed to have conflicts with Windows Defender. After I made the switch, Avast now repeatedly finds virusses in the following directory: C:\Users\[username]\AppData\Roaming\Microsoft\Windows\Templates\FileZilla Server
Avast quarantines the infected files and when I close my Firefox browser, I can even delete the entire Filezilla directory with everything in it but it keeps coming back and Avast keeps finding infected files, such as: default.ocx, f.bat and data.bin.

I know FileZilla is an ftp program but I never installed anything of the likes, so I'm pretty sure one or other process keeps spawning stuff after every reboot and any virus scan I perform can't get a graps on it.

Does this sound familiar to anyone and if yes, does anyone know of a good plan of attack of finding out what I'm dealing with and how to put an end to it? I'd be grateful for any help offered.

Cheers,

Chris
 

Attachments

  • Like
Reactions: shmu26
Hello,


51a46ae42d560-malwarebytes_anti_malware.png
Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Install the progam.
  • Click the Scan tab, choose Threat Scan is checked and click Start Scan.
  • If threats are detected, click the Quarantine Selected button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the Reports tab.
  • Double-click the Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.
 
Hi and thanks for your reply.
I had already done the MalwareBytes scan. That is why I listed it in my topic description.
I did the scan again, however but it says the same as before: Threats detected: 0
:)
 
FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

  • Like
Reactions: oldschool
Hi,

Thanks for the quick reply again. Someone else suggested fixlist with FRST as well today but with a more extensive script in it. I just checked and these two exact entries you mentioned were in there as well, so that's good, I guess. :)

Cheers,

Chris
 
  • Like
Reactions: oldschool