Forums Forums Enthusiast Forums A - Z Gadgets & Tech VIirus: virTool:JS/Obfuscator.BN

What is this, M security ess, just popped up saying this, i have now removed it, but what is it

It's a signature for a piece of malware that's obfuscating (hiding, basically) another piece of malware.

Reboot to safe mode (restart the machine and spam f8) and do a full scan with malwarebytes and then mse. Make sure you install nad update malwarebytes before you go to safe mode.

Thank you, all done, it found 6 in total

Scare Ware had two on our network in past two weeks, one on an office lap top and one this morning on a desktop MS Safeworks, just rolled back PC's to last safe restore point job was a goodun,

Laptop needed a bit more work as virus was starting on start up and couldn't be isolated in TM before startup, ended up backing everything up on machine and just re installing windows,

Pain in the backside, find aload of made up virus's and then charge you to use their software to remove their shite grrrr

Yeah it's called rogue antivirus. And you shouldn't ever think that rolling back to a 'safe restore' fixes problems like that.

In fact you should turn off restores, they are a haven for hiding rootkits.

On the other hand formatting the machine is definitely the best way to be sure that you're safe

Good Call Ex, always sensible to run something like registry mechanic to check for malicious exe's and cleverly disguised Sys32 files.

Had one a month or two back that had rougue csrss files in registry had to sweep through them and pick out the non microsoft ones, If all else fails, good old Format, although always best to take a back up of any drivers on the system using driver magician or something similar and the same with the data learnt that the hard way as an appentice bench technician countless hours spent looking for random drivers for obscure chipsets

You'd be amazed how many hours are STILL spent by <ahem> "certain people" when they either forget back up drivers or the machine is so corrupt (or drive so dead) that you can't do it.

I have lost count of the number of hours (even in the last few months) that certain people (who work in a certain shop that have their wages paid by a certain me) have spent looking for obscure drivers for the MODEM !!!! Does ANYONE use them anymore ?

Nearly drove myself nuts trying to find drivers for a PCI serial card a few months ago.

That said if the laptop is anything from the last decade there will be drivers on the manufacturer's website.

If you spot the tiny link above the menu on the Packard Bell site which says "see old site" (or something similar) and THAT has all the drivers for anything that wasn't sold last week.....grrrr

hi my free avg has just found 2 js/obfuscator viruses and there now in the vault, iv never had this before so do i click the button to empty vault or just leave them there?
answer in english please as i dont understand anything of the above haha

It doesn't really matter - they are in a safe place but you might as well delete them, you have no use for them.

/heavy sigh.

leave me alone ex0 lol

thanx DD

Hahaha good stuff doctor and very true, i wander whether i've known you in a previous life, does the surname Chung "chungy" ring any bells ?