Author Topic: custom.js  (Read 953 times)

0 Members and 1 Guest are viewing this topic.

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
custom.js
« on: February 19, 2024, 02:20:23 PM »
Hello guys, something is really wrong. i had a file downloaded in my download history. its called "custom.js". i checked it with my avast, it says no problem. so i opend it - nothing happend. im superscared, any idea how dangerous that is? i added some screenshots for you...

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
Re: custom.js
« Reply #1 on: February 19, 2024, 02:31:25 PM »
opend the file with notepad++, even more scared now.

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
Re: custom.js
« Reply #2 on: February 19, 2024, 02:43:10 PM »
file created: 18.02.2024 21:02. i chcked my browser history, on that time i was on a site for adults (you know what i mean), which has antivirus popups. i think i clicked allow or deny or whatever by accident, it literally same time. is that an explanation? are adult sites making me download stuff like that?

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
Re: custom.js
« Reply #3 on: February 19, 2024, 03:18:39 PM »
Virustotal result. no detection, but the sandbox have "alerts". is this bad?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37524
  • Not a avast user
Re: custom.js
« Reply #4 on: February 19, 2024, 03:55:53 PM »
Always post link to Virustotal scan so we can see all info given by VT
« Last Edit: February 19, 2024, 04:07:52 PM by Pondus »

Offline Philipp20

  • Newbie
  • *
  • Posts: 13

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37524
  • Not a avast user

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
Re: custom.js
« Reply #7 on: February 19, 2024, 09:15:45 PM »
Done i reported it to f-secure!

Did you check the "behaviour" section aswell? thats what makes me nervous, it says in the sandbox that file opend my folders like documents and downloads? or is that normal for files like that...

Offline Philipp20

  • Newbie
  • *
  • Posts: 13
Re: custom.js
« Reply #8 on: February 20, 2024, 06:09:49 PM »
its more like i need to know if its dangerous and where it comes from than removing it. i can just reinstall windows, thats not the thing. i did this checkup on throw scan:

file:///C:/Users/pj/Downloads/thor10.7lite-win-pack/DESKTOP-B9H28RR_thor_2024-02-20_1750.html