Author Topic: Avast flagging VBS:Bicololo-BU [Trj] on Chrome  (Read 2476 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« on: August 15, 2017, 10:51:50 AM »
Hi

I started receiving these messages last night about VBS:Bicololo-BU [Trj] which pops up every time I reload or change change page on Chrome. I scanned my Mac with Avast! and ClamXAV and both found nothing.

I have currently couple hundred files in my Avast! Virus Quarantine and it's exactly one file that keeps popping up: /Users/namename/Library/Application Support/Google/Chrome/Default/Local Extension Settings/gomekmidlodglbbmalcneegieacbdmki/093605.ldb

What is surprising is that I don't even have "Google" folder in my application support so I can't really go around digging the file.

I uninstalled Chrome and updated the latest version --> nothing...

Doesn't affect incognito mode from which I'm currently writing this message.

Any ideas?

I'm using MacBook Pro and OS X

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #1 on: August 15, 2017, 03:04:08 PM »
Hi,
can you send us the detected file through https://www.avast.com/false-positive-file-form.php ?

Thanks,
Milos

REDACTED

  • Guest
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #2 on: August 16, 2017, 08:22:00 AM »
Sorry, cannot...

I emptied virus quarantine last night for the 5th time and that suddenly fixed the problem. No flagging anymore and full scan says everything is fine.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #3 on: August 16, 2017, 08:30:51 AM »
Quote
I emptied virus quarantine last night for the 5th time and that suddenly fixed the problem.
It should not be related. Quarantine (chest) is not the place where detections orginate from, it is just a safe storage where avast move files after detection

REDACTED

  • Guest
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #4 on: September 01, 2017, 11:55:48 AM »
Hello everyone,

I'm having the same issue. Everytime I open Chrome, 3 pop-ups come up warning that "Avast Filesystem shield has blocked a threat and moved it to the Chest - infection: VBS:Bicololo-BU [Trj]".

Those 3 popups open at each new tab or each website that I enter. It's pretty annoying...
I've re-installed Chrome twice, I've deleted the files from the chest, and it keeps happening anyway.

Any help here? 
Thanks in advance!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #5 on: September 01, 2017, 12:22:22 PM »
See reply #1

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast flagging VBS:Bicololo-BU [Trj] on Chrome
« Reply #6 on: September 01, 2017, 12:35:07 PM »
Quote
Any help here?
Start Your own topic and attach screenshots of avast popups
« Last Edit: September 01, 2017, 02:31:31 PM by Pondus »