Author Topic: JS:Downloader (TRI)  (Read 1737 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
JS:Downloader (TRI)
« on: July 17, 2018, 12:03:25 AM »
because it was apparently it was infected with JS:Downloader-FHY (Tri). The supposed URL is https :// client (dot) forcenock (dot) com / client (dot) js. The process is C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

The web shield seemed to detect it and it only shows up in one area of the machine. My roaming data since it reports that the problem is a file in the Minecraft folder ... which is strange because this behaviour only started today and I'm not sure what to do about it.

Is it a false positive?

MB is quiet and doesn't seem to be going off the rocker, and only Avast is behaving strangely. I included two screenshots; the second was red but it went green because I moved it to the virus chest, being as unsure as I am at the time.

An additional edit is that https :// client (dot) forcenock (dot) com / client (dot) js. The process is C:\Program Files (x86)\Google\Chrome\Application\chrome.exe keeps coming up from Avast's end.
« Last Edit: July 17, 2018, 12:15:43 AM by WrathDummy »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37549
  • Not a avast user
Re: JS:Downloader (TRI)
« Reply #1 on: July 17, 2018, 12:51:59 AM »
Quote
MB is quiet and doesn't seem to be going off the rocker,     
Detection is on a java script, Malwarebytes does not target script, doc or media files


Instructions if you want a check  >>  https://forum.avast.com/index.php?topic=194892.0

« Last Edit: July 17, 2018, 12:53:53 AM by Pondus »

REDACTED

  • Guest
Re: JS:Downloader (TRI)
« Reply #2 on: July 17, 2018, 04:48:27 AM »
Regardless, I'm suspicious about Avast since the last time something as this occurred, it actually started to delete the entire system to clean a 'virus' and 'threat' that were not there. A look on the forums around the place also indicates this is quite a wide-spread issue that pops up randomly when connected to the internet so I think I'll just see whether it's patched out or something.

Files that have been safe 'forever' don't suddenly react like this.

Thanks for the MB chime though.

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: JS:Downloader (TRI)
« Reply #3 on: July 17, 2018, 07:59:18 AM »
Hello,
detection was disabled.

Milos