JS:Downloader (TRI)

Viruses and worms
1

because it was apparently it was infected with JS:Downloader-FHY (Tri). The supposed URL is https :// client (dot) forcenock (dot) com / client (dot) js. The process is C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

The web shield seemed to detect it and it only shows up in one area of the machine. My roaming data since it reports that the problem is a file in the Minecraft folder … which is strange because this behaviour only started today and I’m not sure what to do about it.

Is it a false positive?

MB is quiet and doesn’t seem to be going off the rocker, and only Avast is behaving strangely. I included two screenshots; the second was red but it went green because I moved it to the virus chest, being as unsure as I am at the time.

An additional edit is that https :// client (dot) forcenock (dot) com / client (dot) js. The process is C:\Program Files (x86)\Google\Chrome\Application\chrome.exe keeps coming up from Avast’s end.

2
MB is quiet and doesn't seem to be going off the rocker,
Detection is on a java script, Malwarebytes does not target script, doc or media files

Instructions if you want a check >> https://forum.avast.com/index.php?topic=194892.0

3

Regardless, I’m suspicious about Avast since the last time something as this occurred, it actually started to delete the entire system to clean a ‘virus’ and ‘threat’ that were not there. A look on the forums around the place also indicates this is quite a wide-spread issue that pops up randomly when connected to the internet so I think I’ll just see whether it’s patched out or something.

Files that have been safe ‘forever’ don’t suddenly react like this.

Thanks for the MB chime though.

4

Hello,
detection was disabled.

Milos