Author Topic: Same sender and "Infection Blocked!" popup - Real or Spoofed? Solution?  (Read 3231 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Over the past few months, and only occasionally, I get an "Infection Blocked!" popup for JS:Redirector-ZJ [Trj] and it is apparently emailed repeatedly from the same friend (who uses a PC). They have checked that computer to find nothing wrong. It is sent on top of a file called "Intuit_Order-N91919.htm"

Any suggestions on what to tell them to do? Is this the same infection occasionally trying to connect to me, a new infection on their computer or is this address merely being spoofed from another source?

It makes sense to do more than simply block this from happening over and over and to address a core problem to fix things.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Same sender and "Infection Blocked!" popup - Real or Spoofed? Solution?
« Reply #1 on: October 14, 2014, 04:59:49 PM »
Although it seem to come from your friend, it doesn't have to be.
If I want, I can send you a email that appears to be coming from him.

Best he can do is to join here, create a new thread in the "viruses and worms",
and worm section and have him attach the logs as explained here:
https://forum.avast.com/index.php?topic=53253.0

Perhaps his system is clean, perhaps not.
Let us check that as a start.