I have a supected trojan file found by avira antivirus

[shashgo]

II have avira antivirus and sometimes when I open up firefox, I get a pop up from avira saying detected suspicious file that has similarities to a trojan.  The infected file it mentions is in

documents and settings/name/local settings/application data/mozilla/firefox/profiles/wtt8d3te.default/cache/CACHE_101_

Even if I choose the delete option, the trojan is still detected at random times.  So, if I uninstall firefox completely including all the firefox data, then I will be getting rid of the infected file too , correct?

How do I do this though?  I mean I know how to uninstall firefox, but isnt there something else that needs to be done to remove all traces of firefox profiles?

[Carbon Dudeoxide]

Does your antivirus delete it successfully?

What Antivirus do you have?

When did this start?

[JJ 3000]

What Antivirus do you have?

I have avira antivirus

sometimes avira is too safe. It is probably a false alarm.

[Carbon Dudeoxide]

What Antivirus do you have?

I have avira antivirus

sometimes avira is too safe. It is probably a false alarm.

Eeek! My bad.

It may be a false positive, but if he's been on websites he shouldn't, any malware would be downloaded into the Cache...

[shashgo]

Carbon,

So since I have a notice saying its in the mozilla cache, if I remove the mozilla firefox installation and all its cache and stuff thatll get rid of the infected file right? Question is , how do I delete the cache and stuff?

[lukmander]

open mozilla and pree CTRL+SHIFT+DEL

[Carbon Dudeoxide]

open mozilla and pree CTRL+SHIFT+DEL

Yes, and clear the Cache.

Shashgo, it seems this malware keeps coming back because a certain website you're visiting is leaving it behind.

Uninstalling Firefox will do nothing. However, I cannot be sure this is the problem.

Does it come with the same name each time?

Does your antivirus remove it successfully?

When did it start?

[shashgo]

luke,

I did what you said , I had cleared the cache earlier, but apparently the trojan is embedded somewhere where it cant be deleted. 

Carbon,
The trojan according to avira is located at

documents and settings/name/local settings/application data/mozilla/firefox/profiles/wtt8d3te.default/cache/CACHE_101_

but when I go through windows explorer to navigate the path, there is no folder called local settings under name, although there is application data.  If I keep navigating, then under application data, all the folders exist, but under wtt8d3te.default, there is no folder for cache and neither is there a file named CACHE_101_. 

Are some files and folders hidden and if so how do I unhide them?


Each time, avira shows the pop up box, the virus has the same name, and this whole thing started 7 days ago.  The most visible effect I see is that whenever I start up mozilla , it takes a long time to load any page, sometimes upto two minutes.

[Carbon Dudeoxide]

I suggest going to the Computer Virus and Spyware Section and following this:
http://www.computerhope.com/forum/index.php/topic,46313.0.html