Windows 7: Trojan horse alert when accessing PayPal Website

I get a popup from Avast Antivirus whan accessing PayPal Website saying that the the website is infected by a trojan horse. Is it a false positive or my computer is infected?
Thanks for your advice.

I use Avast! and PayPal also, just checked and I do not get the warning.

If you have and use PayPal, I would advise against using it right now on the computer you are getting the popup on and hang tight until one of the Pro's here that deal with that sort of thing instruct you as to what to do.

I have the same problem, on two separate computers. I have Avast on both of my computers. I don't even have to be logged in to PayPal for the Trojan Horse warning to come up.

@pieren,

Let's see what this short scan shows...

Download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:
Select the version with the x64.
Click the dark-blue button to download.
Save to the Desktop.

Close all windows and browsers.

Right-click the downloaded file and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN

When done, a report opens on the Desktop: RKreport.txt

If not,press the Report button to get it.

Please provide the RKreport.txt (Mode: Scan) in your reply.


~~~~
Also download the Farbar Recovery Scan Tool
Select the 64-bit version.


Save to your Desktop.

• Double-click the downloaded file to run it.
• When the tool opens click Yes to disclaimer.
• Press the Scan button.
• FRST makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).
• Please copy and paste the FRST.txt in your reply. <<---
• The first time the tool is run, it also makes another log: Addition.txt
• Please post the Addition.txt in your reply also. <<---

Can you post a a report or a screenshot of what avast! reports?
Access Scan Logs from the avast! console: Scan Computer > Scan Logs

If not: Screenshots and Files - Upload and Post in Seven Forums



@quiltsandwich,

Since it looks as if you are running Windows 8, please go to the Eight Forum/System Security, and I'll be glad to assist you there also:
http://www.eightforums.com/system-security/

Thanks. :)

I just now tried to access Paypal and got the same Trojan Blocked report from Avast.

Another thing to check is if you're REALLY accessing PayPal website or a clone scam page designed to steal your user/pass (a phishing). Look carefully at the address bar and check the info on the certificate to see if it's effectively from PayPal. Check your hosts file too. Perhaps the alert wasn't false and a you're seeing a "fake PayPal", just as a guess.

I logged in to PayPal by typing paypal.com into the address bar. I still get the trojan notice from Avast. The status bar also shows it's PayPal.

Is this what you are seeing Bankfraud-BBE [Trj]:

See the legitimate PayPal (protect Yourself) here: https://www.paypal.com/webapps/mpp/s...rniflegitimate

Avast Forum http://forum.avast.com/

That was the popup. Even though I ran a full scan with AVAST last night (it was clean), I ran a quick scan just a little while ago. It found the Bankfraud-BBE trojan so I removed it and ran a boot time scan as recommended. I should be clean now. Apparently, PayPal has been hacked. I'm running a full scan right now and will be running MBAM and SAS after that.