Avast flagging VBS:Bicololo-BU [Trj] on Chrome

Viruses and worms
1

Hi

I started receiving these messages last night about VBS:Bicololo-BU [Trj] which pops up every time I reload or change change page on Chrome. I scanned my Mac with Avast! and ClamXAV and both found nothing.

I have currently couple hundred files in my Avast! Virus Quarantine and it’s exactly one file that keeps popping up: /Users/namename/Library/Application Support/Google/Chrome/Default/Local Extension Settings/gomekmidlodglbbmalcneegieacbdmki/093605.ldb

What is surprising is that I don’t even have “Google” folder in my application support so I can’t really go around digging the file.

I uninstalled Chrome and updated the latest version → nothing…

Doesn’t affect incognito mode from which I’m currently writing this message.

Any ideas?

I’m using MacBook Pro and OS X

2

Hi,
can you send us the detected file through https://www.avast.com/false-positive-file-form.php ?

Thanks,
Milos

3

Sorry, cannot…

I emptied virus quarantine last night for the 5th time and that suddenly fixed the problem. No flagging anymore and full scan says everything is fine.

4
I emptied virus quarantine last night for the 5th time and that suddenly fixed the problem.
It should not be related. Quarantine (chest) is not the place where detections orginate from, it is just a safe storage where avast move files [b]after[/b] detection
5

Hello everyone,

I’m having the same issue. Everytime I open Chrome, 3 pop-ups come up warning that “Avast Filesystem shield has blocked a threat and moved it to the Chest - infection: VBS:Bicololo-BU [Trj]”.

Those 3 popups open at each new tab or each website that I enter. It’s pretty annoying…
I’ve re-installed Chrome twice, I’ve deleted the files from the chest, and it keeps happening anyway.

Any help here?
Thanks in advance!

6

See reply #1

7
Any help here?
Start Your own topic and attach screenshots of avast popups