Jump to content

JS/ScrInject.B trojan HTML/Refresh.BC trojan


Recommended Posts

Hello,

 

we are getting the same Message at all of our PCs running ESET NOD32 Antivirus 8.

I think its a false positive. I checked our Systems with third Party products (and NOD32) but it didnt found anything.

It seems the Message apears randomly. Also on Websites we host internal (for example our Mail Server Mgt. Console).

 

Is it really a false positive?

 

Thank you!

Link to post
Share on other sites
I have the same problem. Problem appeared after update signature.ver number 13102. 

At this moment, problem occurs in polish site - onet.pl and o2.pl, when i try sign into  email account in this sites on IE.

 

In my opinion this is 100% false notification, because I have email account in this two sites 10 years hehe....

Edited by Piotrek
Link to post
Share on other sites

We are receiving the same issue here across 80 computers - again the UK support number is engaged so it seems a widespread issue (definitely a false positive). This is causing messages to flash up on every machine and then asking to reboot.

Link to post
Share on other sites

Eset NOD32 also blocked :

hxxp://www.wykop.pl/ludzie/lechwalesa//2 ( official Lech Wałęsa site - polish nobelist hahaha)

hxxp://bedroomproducersblog.com

www.chomikuj.pl

hxxp://nk.pl

www.allegro.pl

hxxp://windows7.pl

hxxp://zakamarkiaudio.pl/2011/08/jak-osiagnac-glosny-master-czesc-3-z-6.html

 

and many, many more..

 

This is not a funny!

Link to post
Share on other sites

I have used NOD32 for the past 25+ years and this is the 2nd or 3rd problem in all that time that I have ever encountered (from memory), so I can live with it as they are already onto the problem.

 

Keep up the good work NOD32.

Link to post
Share on other sites

also for me:

JS/ScrInject.B trojan horse

 

I try to remove with other progs:

 

-AdwCleaner 5.037

-malwares antibytes

-superantispyware

 

but nothing, it is a virus or a nod false positive?

thank you.

Link to post
Share on other sites
  • Administrators

same with me, I think my computer is affected by Trojan

hxxp://prnt.sc/a9oew3

 

You have posted more than 24 hours after the problem was resolved. It should not be reported on popular sites with the signature database 13103 or newer. The most current signature database version is 13107 at the moment.

Link to post
Share on other sites

same with me, I think my computer is affected by Trojan

hxxp://prnt.sc/a9oew3

What VSD are you on ?.....(If you are on 13103 -> solution is to update.)

 

If you are on 13104 or later......

 

"If the detections are triggered after update to 13103 or higher, they should be correct. If you are unsure if a particular detection is ok or not, report it to the ESET Malware Research Lab"

hxxp://support.eset.com/alert5879/

Edited by SweX
Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...