Avast WEBforum

Other => Viruses and worms => Topic started by: sepi on August 26, 2007, 04:48:32 PM

Title: J.S.Feed Family
Post by: sepi on August 26, 2007, 04:48:32 PM
xp pro - I've been infected with some type of trojan or virus that I can't find. I've tried all kinds of removers and have run anti-virus many times in the last month. Whatever this is, it is slowing down my computer, it has caused my Background Intelligence Installer service to not start automatically, I fixed the Windows Installer problem it had create originally, it corrupted my MSOffice, wouldn't repair, I finally got that fixed. Now I can't download some apps, like my wireless assistant for my HP laptop. It just freezes when I try to either install or save it to disk.
I can't tell if I'm getting any of the windows updates, since the manual check for updates is not finding anything in the last month. I finally got my Windows Defender to update!
To make a long story short here, I need help in 1)figuring out what is the name of this thing that has posessed my pc, and 2)how to get rid of it.
The only clue I have so far is in my Avast log files about Avast has detected "signs of J.S.Feed Family" I do a google and nothing comes up. I have a hunch it could be some vb program/macro who knows.
The location was pointing to Program Files\support.com\TWC\htmlagent\inc\chtr_detree.js" It sounds like a Time Warner folder, which is my provider.
This could not even be the culprit, but it's the only name I have to go by.
Oh, I've also ran registry cleaner.
I don't want to re format my laptop, (if at all possible) The computer is working fine, for the most part now, but I know there is something that's downloading junk bcz I end up running ad-aware after each session I'm on, and it finds junk. It removes it.
Any suggestions would be appreciated.
Title: Re: J.S.Feed Family
Post by: DavidR on August 26, 2007, 05:30:40 PM
I think you mean JS:Feeb Family, but that doesn't matter too much.

A google search on my correction returns many hits, http://www.google.com/search?q=JS%3AFeeb+Family (http://www.google.com/search?q=JS%3AFeeb+Family).

You should check out this file chtr_detree.js to confirm the detection and report the findings here.
Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/xhtml/index_en.html) I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 30 different scanners.
Or Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can't do this with the file in the chest, you will need to move it out.