Hi there. I have a virus pop up that keeps coming up every two minutes on my web browser. It is called JS:ScriptPE-inf [Trj]. But when I have tried running quick scans with Avast and Malwarebytes, no threats show up. OS is Windows 7 if that information is needed. Any suggestion?
JS:ScriptPE-inf [Trj] is categorized as JavaScript trojan that attempts to redirect your browser to another website and install browser hijacker, adware or other potentially unwanted programs to your machine. It is installed by visiting malicious sites, downloading harmful program and even clicking on unknown pop-up ads. It also can be downloaded manually by tricking the users into thinking they are installing a useful piece of software, for instance a bogus update for Adobe Flash Player or another piece of software. Once installed, it can download malicious files on your computer in order to compromise your computer’s safety and security. Those malicious files also take up large system resources, making your computer system sluggish. Thus, it is not surprised that website you prefer to go will take forever to load up and when you browse online there are tons of ads come out of nowhere, and your browsers like Internet Explorer, Mozilla Firefox, Google Chrome or Opera will notify that JS:ScriptPE-inf [Trj] is blocked every 2 minutes but the virus will not go away.
JS:ScriptPE-inf [Trj] can be used to hijack your web browsers and redirect your search result to malicious websites. Therefore, when you go online, you will suffer from many disturbing troubles such as receiving tons of ads that contain messages promoting certain websites or services or browser crash randomly. As similar as other Trojan viruses, this one also could be used to collect victim’s sensitive data such as email account details, credit card details and facebook login details. Those collected information may be passed over to the intended attacker who would further misuse it for stealing money from your bank account or leaking the confidential information out to other sources. Hence, if you want to get away from security risks, you should get rid of JS:ScriptPE-inf [Trj] as soon as possible to make sure your machine is running in safe network environment.
1. It can compromise your system and may introduce additional infections like rogue software.
2. It forces you to visit websites and advertisements which are not trusted and may lead you to pay money wrongly for worthless products.
3. It takes up high resources and strikingly slows down your computer speed and even causes your computer stuck frequently.
4. It may allow cyber criminals to track your computer and steal your personal information.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once JS:ScriptPE-inf [Trj] virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
JS:ScriptPE-inf [Trj] virus is a dangerous Trojan that gets into the system without users’ knowledge and it affects everybody who uses a compromised computer running in Windows operating system. After infected, your computer may experience many unwanted troubles because the virus can modify your system setting, disable antivirus program and display numerous annoying advertisements. You may have no Internet connection or download disability problem. When you go online and open Internet explorer, Firefox or other browsers, no pages are loaded or numerous pop-up ads will appear without your approval. Some of the users will find their browsers are redirected to various harmful websites. In summary, JS:ScriptPE-inf [Trj] should be removed as soon as possible to avoid further damages.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by on January 15, 2015 3:19 pm, last updated on January 15, 2015 3:19 pm
Leave a Reply
You must be logged in to post a comment.