Author Topic: JS:ScriptIP-inf [Trj] on Starpage.com search engine  (Read 3535 times)

0 Members and 1 Guest are viewing this topic.

Offline yabbadabbadoobeedoo

  • Newbie
  • *
  • Posts: 2
JS:ScriptIP-inf [Trj] on Starpage.com search engine
« on: January 07, 2015, 05:21:38 PM »
I have a weird problem. Every time I search for information on Startpage.com, Avast warns me that it found a JS:ScriptIP-inf [Trj] virus on that page. This seems to be the only place this happens.

I tried to perform a full system scan using the highest settings & scanning every file thoroughly, but no viruses were found (though I got a bunch of "Error: archive is password protected" on all files in the C:\ProgramData\Spybot - Search & Destroy\Quarantine folder. I can give those file names, if needed.) I searched for this JS:ScriptIP-inf [Trj] virus on Google, and saw a page on how to remove it at http://blog.vilmatech.com/remove-jsscriptip-inf-trj-get-rid-trojan-virus-safely/. I followed the instructions, but as far as I can tell, I couldn't find any of the files, registry entries or processes associated with this virus.

How do I remove this? I think I got it when I was searching for Pizza Hut coupons and went to a site that offered them. Can't remember what it was, though.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: JS:ScriptIP-inf [Trj] on Starpage.com search engine
« Reply #1 on: January 07, 2015, 05:24:02 PM »
https://forum.avast.com/index.php?topic=53253.0

Just a few of the scan results:
http://quttera.com/detailed_report/startpage.com
http://www.UnmaskParasites.com/security-report/?page=startpage.com

Stop using Spybot, it is by far from good as it once was.
Use MBAM instead.

Ofcourse you did not find anything.
It is the avast webshield that gives the warning.
The problem is on the website.
« Last Edit: January 07, 2015, 05:30:36 PM by Eddy »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37010
Re: JS:ScriptIP-inf [Trj] on Starpage.com search engine
« Reply #2 on: January 07, 2015, 05:30:28 PM »
Quote
  This seems to be the only place this happens.   
If it only happens on that site, then the problem is at the site and not in your computer

What does the avast message say .... post a screenshot
« Last Edit: January 07, 2015, 05:37:04 PM by Pondus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37010
Re: JS:ScriptIP-inf [Trj] on Starpage.com search engine
« Reply #3 on: January 07, 2015, 05:36:26 PM »
Quote
C:\ProgramData\Spybot - Search & Destroy\Quarantine folder.  
Empty spybot quarantine ...... or better, uninstall it and replace it with Malwarebytes


Quote
  though I got a bunch of "Error: archive is password protected"     
Spybot quarantine will of cours be a protected area ..... quarantine = malware prison

How do I handle files that avast! can’t scan?  https://blog.avast.com/2014/02/28/how-do-i-handle-files-that-avast-cant-scan/


Offline yabbadabbadoobeedoo

  • Newbie
  • *
  • Posts: 2
Re: JS:ScriptIP-inf [Trj] on Starpage.com search engine
« Reply #4 on: January 07, 2015, 08:00:14 PM »
Thanks for your replies, but how come I never had a problem with that page before? I've been using that site for the last 5 years or longer and never had a problem. Why would it give me a virus now? I'm not doubting your suggestions, I just find it curious that a website I've been using for so long would all of a sudden have a virus on it.

I figure it is a site dedicated to protecting your privacy, therefore they would be diligent in making sure the site has no viruses and malware. Something that most popular search engines do not do. Some say they do, but I do not trust them. I can use another search engine that protects one's privacy.

Anyways, I will uninstall Spybot Search & Destroy & use Malwarebytes instead. Thank you for helping with my problem. Moderators you can go ahead & mark this post as resolved if that's possible.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37010
Re: JS:ScriptIP-inf [Trj] on Starpage.com search engine
« Reply #5 on: January 07, 2015, 08:08:21 PM »
Quote
    Thanks for your replies, but how come I never had a problem with that page before? 
1. It can be a false detection from avast .... if you think so, report it here  https://support.avast.com

2. There are no safe site on internet, site that is safe today can be hacked tomorrow

Browse sucuri blog   http://blog.sucuri.net

Posted 2009   http://www.cnet.com/news/web-based-malware-infections-rise-rapidly-stats-show/

http://securelist.com/analysis/kaspersky-security-bulletin/58265/kaspersky-security-bulletin-2013-overall-statistics-for-2013/