Author Topic: Infection JS:ScriptXE-inf  (Read 2469 times)

0 Members and 1 Guest are viewing this topic.

SlightlyInsane

  • Guest
Infection JS:ScriptXE-inf
« on: September 06, 2013, 06:51:57 AM »
Hello!

I recently noticed a pattern with avast where whenever I go into a full screen program or application I keep getting an alert from avast afterwards about a infection alert as it blocked a website I tried to access. Not only did I not access this website but it was done at a time when I was not using any browser at all. This leads me to believe that I have malware that is attempting to install some of its buddies when it notices im in fullscreen mode. If anyone could help me try and get rid of it that would be great, Avast hasn't pulled up anything on my system scan so any help would be appreciated.

Thanks, :D

Offline tumic

  • Avast team
  • Advanced Poster
  • *
  • Posts: 723
Re: Infection JS:ScriptXE-inf
« Reply #1 on: September 13, 2013, 04:46:26 PM »
The webshield is scanning all HTTP (and if enabled also HTTPS) traffic from
the machine, so the originator must not be a browser. It is very probable, that it
is some kind of virus/spyware that is causing the traffic. To find the originator,
You can use tools like netstat, lsof or wireshark.