JS:ScriptPE-inf[Trj]

Viruses and worms
1

I’ve been using Avast! for some years now but have recently had three viruses get past it, the most recent being: JS:ScriptPE-inf[Trj].

Can anyone tell me what it does and suggest how it possibly got on to my machine? Also, should I be worried by it, bearing in mind it got past Avast?

All the best,
Ken Attwood.
Cornwall, UK.

2

JS:Script usually comes from infected websites

if you read here in sucuri blog there is losts of info http://blog.sucuri.net/
Sucuri work with web based malware

3
Also, should I be worried by it, bearing in mind it got past Avast?
what do you mean got past?.....where are those files now ?
4

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

5

Hi,

The file with that name was turned up by a virus scan, I don’t know where on my system it had been originally by Avast! moved it to the Virus Chest and I deleted it.

6
Avast! moved it to the Virus Chest and I deleted it.
There is no rush to delete...

Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm

7

The file that I deleted was called: JS:ScriptPE-inf[Trj] and had already been moved to the virus chest from where I deleted it. I can see now, thanks to your advice, that I was acting a little hastily: however viruses do scare me and I’ve had four in the last month (including a Boot virus) prior to this, the last prior infection that I got was about three years ago. Why has there been a sudden increase?

Ken.

8

That was the malware name and not the file name, the file name and location help us get an idea of what it actually was.

So sending to the chest, a place where it can do no harm whilst investigating is the best option. Once the file is deleted, end of investigation as most the evidence is gone.

9

Thanks, I’ll remember that next time! I’ve not had a lot of experience in dealing with viruses (until recently).

Ken.

10

You’re welcome.