« previous next »
Pages: [1] 2   Go Down

Author Topic: JS:Proxy-B (Trj) Popups  (Read 4535 times)

0 Members and 1 Guest are viewing this topic.

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
JS:Proxy-B (Trj) Popups
« on: November 17, 2019, 12:32:02 AM »
I've used several cleanup programs at this point and the popups won't stop. I've been getting anywhere from 3-5 of these at a time. Sometimes every few minutes when I open new pages and sometimes between long periods of time when I don't do anything. Needless to say this is extremely frustrating and also worrying. I have attached the Malwarebytes and FRST logs here as well as screenshots of just one of the notifications I've received.
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: JS:Proxy-B (Trj) Popups
« Reply #1 on: November 17, 2019, 04:17:44 AM »
Sass Drake should be around in the next 24h (hopefully, it is the weekend)
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #2 on: November 17, 2019, 01:41:40 PM »
  • Open Notepad (click Start button -> type notepad.exe -> press Enter)
  • Copy text from code block below and paste it into Notepad
Code: [Select]
cmd: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" /v SearchList /d "" /f
Reboot:
  • Go to File -> Save As
  • Make sure that  UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
Logged

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #3 on: November 17, 2019, 03:13:36 PM »
Here it is.
Logged

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #4 on: November 17, 2019, 03:31:39 PM »
What is status now?
Logged

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #5 on: November 17, 2019, 04:05:15 PM »
Didn't change. Just got another Avast notification 2 minutes ago after reboot.
Logged

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #6 on: November 17, 2019, 07:57:52 PM »
Please open in Chrome:
chrome://serviceworker-internals/

and click on Unregister for all entries it is listed.
Logged

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #7 on: November 17, 2019, 08:17:48 PM »
I've done it but I'm still getting pop-ups.
Logged

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: JS:Proxy-B (Trj) Popups
« Reply #8 on: November 17, 2019, 10:07:21 PM »
Can you post new FRST logs please
Logged
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #9 on: November 17, 2019, 10:31:49 PM »
Here you go.
Logged

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #10 on: November 18, 2019, 12:20:38 AM »
Please temporaly disable The FFZ Add-On Pack in Chrome.
Logged

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #11 on: November 18, 2019, 01:18:39 AM »
I disabled it. It's still popping up FYI  :-\
Logged

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #12 on: November 18, 2019, 06:15:54 PM »
Can you disable one by one Chrome extension and test will Avast notifications occur.
Logged

Offline PredAlienXXD

  • Newbie
  • *
  • Posts: 14
Re: JS:Proxy-B (Trj) Popups
« Reply #13 on: November 18, 2019, 08:28:09 PM »
To first check, I disabled every single Chrome Extension I had. The popups didn't stop.
Logged

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: JS:Proxy-B (Trj) Popups
« Reply #14 on: November 20, 2019, 08:00:22 PM »
  • Open FRST
  • In search box type proxy.pac
  • Click on Search Files
  • When it is complete, file called Search.txt will appear
  • Attach it to your message.
Logged
Pages: [1] 2   Go Up
« previous next »