Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Trojan horse alert when accessing PayPal Website

27 Apr 2013   #1

Microsoft Windows 7 Ultimate 64-bit 7601 Multiprocessor Free Service Pack 1
Trojan horse alert when accessing PayPal Website

I get a popup from Avast Antivirus whan accessing PayPal Website saying that the the website is infected by a trojan horse. Is it a false positive or my computer is infected?
Thanks for your advice.

My System SpecsSystem Spec
27 Apr 2013   #2

Windows 8 Pro / Windows 7 Home Premium x64 dual boot

I use Avast! and PayPal also, just checked and I do not get the warning.

If you have and use PayPal, I would advise against using it right now on the computer you are getting the popup on and hang tight until one of the Pro's here that deal with that sort of thing instruct you as to what to do.
My System SpecsSystem Spec
27 Apr 2013   #3

Windows 8

I have the same problem, on two separate computers. I have Avast on both of my computers. I don't even have to be logged in to PayPal for the Trojan Horse warning to come up.
My System SpecsSystem Spec

27 Apr 2013   #4

Windows 7 Home Premium


Let's see what this short scan shows...

Download RogueKiller:
Tlcharger RogueKiller (Site Officiel)

When you get to the website, go to where it says:
(Download link) Lien de téléchargement:
Select the version with the x64.
Click the dark-blue button to download.
Save to the Desktop.

Close all windows and browsers.

Right-click the downloaded file and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN

When done, a report opens on the Desktop: RKreport.txt

If not,press the Report button to get it.

Please provide the RKreport.txt (Mode: Scan) in your reply.

Also download the Farbar Recovery Scan Tool
Select the 64-bit version.

Save to your Desktop.
  • Double-click the downloaded file to run it.
  • When the tool opens click Yes to disclaimer.
  • Press the Scan button.
  • FRST makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).
  • Please copy and paste the FRST.txt in your reply. <<---
  • The first time the tool is run, it also makes another log: Addition.txt
  • Please post the Addition.txt in your reply also. <<---
Can you post a a report or a screenshot of what avast! reports?
Access Scan Logs from the avast! console: Scan Computer > Scan Logs

If not: Screenshots and Files - Upload and Post in Seven Forums


Since it looks as if you are running Windows 8, please go to the Eight Forum/System Security, and I'll be glad to assist you there also:

Thanks. :)
My System SpecsSystem Spec
27 Apr 2013   #5
Lady Fitzgerald


I just now tried to access Paypal and got the same Trojan Blocked report from Avast.
My System SpecsSystem Spec
27 Apr 2013   #6

Windows 7 Ultimate x64

Another thing to check is if you're REALLY accessing PayPal website or a clone scam page designed to steal your user/pass (a phishing). Look carefully at the address bar and check the info on the certificate to see if it's effectively from PayPal. Check your hosts file too. Perhaps the alert wasn't false and a you're seeing a "fake PayPal", just as a guess.
My System SpecsSystem Spec
27 Apr 2013   #7
Lady Fitzgerald


I logged in to PayPal by typing into the address bar. I still get the trojan notice from Avast. The status bar also shows it's PayPal.
My System SpecsSystem Spec
27 Apr 2013   #8

Windows 7 Home Premium

Is this what you are seeing Bankfraud-BBE [Trj]:

Attached Images
Trojan horse alert when accessing PayPal Website-capture.png 
My System SpecsSystem Spec
27 Apr 2013   #9
Microsoft MVP

Windows 7 Ultimate 32bit SP1

See the legitimate PayPal (protect Yourself) here:

Avast Forum
My System SpecsSystem Spec
27 Apr 2013   #10
Lady Fitzgerald


Quote   Quote: Originally Posted by cottonball View Post
Is this what you are seeing Bankfraud-BBE [Trj]:
That was the popup. Even though I ran a full scan with AVAST last night (it was clean), I ran a quick scan just a little while ago. It found the Bankfraud-BBE trojan so I removed it and ran a boot time scan as recommended. I should be clean now. Apparently, PayPal has been hacked. I'm running a full scan right now and will be running MBAM and SAS after that.
My System SpecsSystem Spec

 Trojan horse alert when accessing PayPal Website

Thread Tools

Similar help and support threads
Thread Forum
Trojan Horse and backdoor.poison
How can i remove this trojan Horse?. I am unable to remove it through avast and malwarebytes. Is there any idea to remove without harming the file system. Please help
System Security
Trojan Horse?
Lately my HP 6620 is slow. Ran defrag, chkdsk, McAfee, Malwarebytes, Max Secure Spyware, System Mechanic (will not do a full analyze anymore). Ran Spybot Search & Destroy and it stops for quite awhile on Win32.bicololo. Googled this and it says it's a trojan. I can't find it anywhere in the...
System Security
Trojan Horse
Hello All Norton pick this up and can't Delete it.:mad: a0ee3d65141.Class ( Trojan Horse ) Need "Help" On how to get rid of this!:hot: Thanks for your help:geek:
System Security
Trojan horse in svchost.exe... What?
Hey. I was checking virusses, but then I was something really strange. AVG antivirusscanner 8.5 gave a Trojan horse in 'svchost.exe'... But that's a Windows file, right?
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 17:18.
Twitter Facebook