[js/scrinject.b]

On 4/18/2020 at 12:00 AM, Thisara said:

Dear Bala,

What I did is format the machine.. But as I think after that, i could get the solution.

You need access the host file in ( windows, system 32, drivers, etc ) and edit..

remove the www.gstatic.com line..

Then it should be ok..

Try and comment.

Best Regards,

Thisara

 

Dear Bala,

 

Does it work..? Or the issue remains same..?

 

Best Regards,

Thisara

[js/scrinject.b]

On 4/14/2020 at 1:03 PM, Bala said:

Hi Thisara,

 

Did you resolve this issue.

I am also facing the same issue. if you found the solution could you please post.

 

Thanks and Regards,

Bala

Dear Bala,

What I did is format the machine.. But as I think after that, i could get the solution.

You need access the host file in ( windows, system 32, drivers, etc ) and edit..

remove the www.gstatic.com line..

Then it should be ok..

Try and comment.

Best Regards,

Thisara

[js/scrinject.b]

3 minutes ago, itman said:

Are you stating you are getting the same alert in Edge and that you have no extensions installed in it?

Dear Itman,

 

Yes.. I don't have any extention on the edge. But when we try to serach somthing, it wil appeare.

 

Best Regards,

Thisara

[js/scrinject.b]

8 minutes ago, itman said:

Another FYI observation in regards to the above posted script code.

Of note is the amptylogick.com domain reference. Both Eset and Fortinet detect this domain as malicious on Virus Total; the only two listed solutions to do so. So I assume Eset's detection in this regard is by blacklist.

Dear Itman,

 

Can't I find that infected file.? Then I can delet that file/files..

 

If not, how can I blacklist this notification on eset.?

 

Thank you.

Best Regards,

Thisara

[js/scrinject.b]

1 hour ago, Marcos said:

The detection is correct. A malicious javascript (JS/Adware.Revizer-related) was detected when injected into a legitimate js file:

Is the threat detected in any browser? Only on this device or also on other devices in your LAN? Is it detected if you run a browser without extensions?

Dear Marcos,

 

Thank you very much.

Yes.. It is detecting on all browsers..But only  on this device.. Yes, I tryd even disabling all extentions. But its there.

how can I detect that infected file, to delete.?

Please help me on that.

 

Thank you.

Best Regards,

Thisara

[js/scrinject.b]

1 hour ago, itman said:

JS/scrinject.B is a common Eset false positive detection. We'll have to wait to see what @Marcos determines based on his review of the OP's logs.

Dear Itman,

What you mean by " false positive detection" ? I can't understand..

Yes, We will wait till Marcos's reply..

 

Thank you,

Best Regards,

Thisara

 

[js/scrinject.b]

1 hour ago, Nightowl said:

 

Maybe it's one of your extensions in the browser or the browser is hijacked somehow?

Dear Nightowl,

 

Then how can I get rid from that.. I herewith attached the my extention page.

Plesae review that.. If someone hacked, how can i get rid from that..?

Please help me.

 

Thank you,

Best Regards,

Thisara

[js/scrinject.b]

13 minutes ago, Marcos said:

Please provide logs collected with ESET Log Collector but with also "quarantined files" selected in ESET Log Collector.

Dear Marcos,

 

Please find the Logs with "quarantined files"..

Please help me on this.. Need solve this as soon as possible.

Once again thank you very much.eis_logs.zip

 

Best Regards,

Thisara

[js/scrinject.b]

Dear All,

 

When each and every time I opened Google Chrome and its pages it appears and its blocked lot of page including google pay in Google settings.

I uninstalled and reinstall both chrome and ESET. But it doesn't work.

Please help me on this since its very hassle to work with continuous notifications.

 

Best Regards,

Thisara