Windows 10: Malwarebytes Detects 'prefs.js' as a Virus - Help!

Discus and support Malwarebytes Detects 'prefs.js' as a Virus - Help! in AntiVirus, Firewalls and System Security to solve the problem; Malwarebytes detects that my prefs.js is a virus. How is this possible? Should I be concerned? What do i do about this? 131327 Discussion in 'AntiVirus, Firewalls and System Security' started by yahanna, Apr 22, 2019.

  1. yahanna Win User

    Malwarebytes Detects 'prefs.js' as a Virus - Help!


    Malwarebytes detects that my prefs.js is a virus. How is this possible? Should I be concerned? What do i do about this?

    :)
     
    yahanna, Apr 22, 2019
    #1
  2. GeoDi Win User

    JS/Flafisi.D & Malwarebytes

    Greetings,

    Windows 10

    My windows defender detected the Trojan: JS/Flafisi.D on 2/27/18 and again today 3/6/18. It has been quarantined. I downloaded Malwarebytes free premium trial and ran the software.

    This threat appeared through Malwarebytes in Registry Data.

    Can anyone help me evaluate if I should quarantine this incident or do nothing?

    Thank you in advance.

    Malwarebytes

    www.malwarebytes.com

    -Log Details-

    Scan Date: 3/6/18

    Scan Time: 12:13 PM

    Log File: Malware Bytes Reports.txt

    Administrator: Yes

    -Software Information-

    Version: 3.1.2.1733

    Components Version: 1.0.139

    Update Package Version: 1.0.4226

    License: Trial

    -System Information-

    OS: Windows 10

    CPU: x64

    File System: NTFS

    User: ASUS-\Owner

    -Scan Summary-

    Scan Type: Threat Scan

    Result: Completed

    Objects Scanned: 336293

    Threats Detected: 1

    Threats Quarantined: 0

    (No malicious items detected)

    Time Elapsed: 11 min, 33 sec

    -Scan Options-

    Memory: Enabled

    Startup: Enabled

    Filesystem: Enabled

    Archives: Enabled

    Rootkits: Disabled

    Heuristics: Enabled

    PUP: Enabled

    PUM: Enabled

    -Scan Details-

    Process: 0

    (No malicious items detected)

    Module: 0

    (No malicious items detected)

    Registry Key: 0

    (No malicious items detected)

    Registry Value: 0

    (No malicious items detected)

    Registry Data: 1

    PUM.Optional.DisableShowSearch, HKU\S-1-5-21-3090552666-1422802453-1715811498-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|START_SHOWSEARCH, No Action By User, [14127], [293317],1.0.4226

    Data Stream: 0

    (No malicious items detected)

    Folder: 0

    (No malicious items detected)

    File: 0

    (No malicious items detected)

    Physical Sector: 0

    (No malicious items detected)

    (end)
     
    GeoDi, Apr 22, 2019
    #2
  3. GeoDi Win User
    JS/Flafisi.D & Malwarebytes

    Thank you for your reply,

    As to JS/Flahisi.D I'm not sure how I picked it up.

    However;

    I noticed this after an Adobe Reader DC update on 2/26/18 (note that the first alert showed on 2/27/18) which I thought was quarantined and I deleted but returned today.

    I was on Yahoo Finance page and working on my HR Block tax return at the same time when I received the Adobe reader update prompt which I thought came from HR Block and updated before Windows defender could warn me, so I believe the update was bogus.

    I'm not sure if all this is related. If so is there anything else I need to do to remedy this other than in your previous reply?

    My concern is that JS/Flafisi.D seemed to be quarantined on 2/27/18 but reappeared on 3/6/18.

    As to Malwarebytes; it was my first inclination to quarantine but wasn't sure how it might affect the registry if it's not a credible threat as it was tagged as a PUM and seemingly not severe?

    Potentially Unwanted Programs/Modifications

    These settings allow the user to choose how Potentially Unwanted Programs (PUPs) and Potentially Unwanted Modifications (PUMs) will be treated if they are detected.

    Thanks

    Foot note for further information:

    The file affected by JS/Flafisi.D is:

    file: C:\Users\Owner\AppData\Local\Microsoft\Windows\INetCache\Low\II\QFEO84TO\FlashPlayer[1].hta
     
    GeoDi, Apr 22, 2019
    #3
  4. GeoDi Win User

    Malwarebytes Detects 'prefs.js' as a Virus - Help!

    JS/Flafisi.D & Malwarebytes

    GreginMich,

    I'm a light weight when it comes to this so much of this is "Greek" to me.

    Since my last post thought I would I try this before previous suggestions:

    Restore to 2/23/18 a date prior to noticing the Trojan

    I deleted all Adobe products except Flash Player installed by Edge

    Updated Defender, Malwarebytes and Windows

    Ran quick Scan, Malwarebytes and Full scan

    Made a repair disc

    When I rebooted this morning all my desktop icons were moved which concerned me. When I use backspace it seems slow and jumps letters until it catches up.

    Bottom Line: no change...still getting JS/Flafisi.D Trojan but states is quarantined and also PUM threat warning. Also now when I backspace it seems to jumps a letter and is slow to catch up.

    Chatted (3!?) times with Windows support to see if they knew anything about this and tried to get an explanation. On the 3rd chat all they offered was a 1 yr. maintenance subscription @ $149 or one time $99 fix good for 30 days.

    I have not opened Yahoo. Only using Xfinity/Comcast for email. BUT when I have the homepage tab up while in the email tab I get a defender alert and an adobe pop up on the homepage tab which Defender states it quarantined.

    As I'm writing this I'm having keystrokes freezing up until I just closed my Comcast homepage tab. Now I'm not having the keystroke issue but still have backspace lag. Also while this was happening my laptop seemed to be running
    something in the background until I closed the homepage tab. I still have the email tab open though.

    I hope my experience helps.

    And yes it seems to be getting worse in subtle ways.

    Windows Defender

    Trojan: JS/Flafisi.D

    Alert level: Severe

    Status: Quarantined

    Date: 3/9/2018

    Recommended Action: Remove threat now.

    Category: Trojan

    Details: This program is dangerous and executes commands from an attack.....?

    Affected items:

    file: C:\Users\Owner\AppData\Local\Microsoft\Windows\INetCache\Low\II\QFEO84TO\FlashPlayer[1].hta

    Malwarebytes

    www.malwarebytes.com

    -Log Details-

    Scan Date: 3/9/18

    Scan Time: 11:45 AM

    Log File: 3-9-18.txt

    Administrator: Yes

    -Software Information-

    Version: 3.1.2.1733

    Components Version: 1.0.139

    Update Package Version: 1.0.4278

    License: Trial

    -System Information-

    OS: Windows 10

    CPU: x64

    File System: NTFS

    User: ASUS-\Owner

    -Scan Summary-

    Scan Type: Threat Scan

    Result: Completed

    Objects Scanned: 337627

    Threats Detected: 1

    Threats Quarantined: 0

    (No malicious items detected)

    Time Elapsed: 22 min, 39 sec

    -Scan Options-

    Memory: Enabled

    Startup: Enabled

    Filesystem: Enabled

    Archives: Enabled

    Rootkits: Enabled

    Heuristics: Enabled

    PUP: Enabled

    PUM: Enabled

    -Scan Details-

    Process: 0

    (No malicious items detected)

    Module: 0

    (No malicious items detected)

    Registry Key: 0

    (No malicious items detected)

    Registry Value: 0

    (No malicious items detected)

    Registry Data: 1

    PUM.Optional.DisableShowSearch, HKU\S-1-5-21-3090552666-1422802453-1715811498-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|START_SHOWSEARCH, No Action By User, [14137], [293317],1.0.4278

    Data Stream: 0

    (No malicious items detected)

    Folder: 0

    (No malicious items detected)

    File: 0

    (No malicious items detected)

    Physical Sector: 0

    (No malicious items detected)

    (end)
     
    GeoDi, Apr 22, 2019
    #4
Thema:

Malwarebytes Detects 'prefs.js' as a Virus - Help!

Loading...
  1. Malwarebytes Detects 'prefs.js' as a Virus - Help! - Similar Threads - Malwarebytes Detects 'prefs

  2. Malwarebytes not detected by Windows Defender

    in Windows 10 Software and Apps
    Malwarebytes not detected by Windows Defender: I have Malwarebytes installed but windows defender doesn't detect it and go into Periodic Scanning like it always has done, It just stays like it normally is, Like Above Current Threats its Suppose to List Malwarebytes but its just blank, With Malwarebytes I have the Windows...
  3. Malwarebytes not detected by Windows Defender

    in AntiVirus, Firewalls and System Security
    Malwarebytes not detected by Windows Defender: I have Malwarebytes installed but windows defender doesn't detect it and go into Periodic Scanning like it always has done, It just stays like it normally is, Like Above Current Threats its Suppose to List Malwarebytes but its just blank, With Malwarebytes I have the Windows...
  4. Malwarebytes not detected by Windows Defender

    in Windows 10 Gaming
    Malwarebytes not detected by Windows Defender: I have Malwarebytes installed but windows defender doesn't detect it and go into Periodic Scanning like it always has done, It just stays like it normally is, Like Above Current Threats its Suppose to List Malwarebytes but its just blank, With Malwarebytes I have the Windows...
  5. Windows 10 Affected with JS/Adware.Agent.AA virus

    in AntiVirus, Firewalls and System Security
    Windows 10 Affected with JS/Adware.Agent.AA virus: I had Avast in my windows 10 pc , suddenly today morning it shows warning JS/Adware.Agent.AA virus, it tried to remove it but failed . After many hours of searching over internet I found a final solution with Sushkom free antivirus and JS/Adware.Agent.AA was successfully...
  6. Malwarebytes Detects 'prefs.js' as a Virus - Help!

    in Windows 10 Support
    Malwarebytes Detects 'prefs.js' as a Virus - Help!: Malwarebytes detects that my prefs.js is a virus. How is this possible? Should I be concerned? What do i do about this? 131327
  7. Malwarebytes detects a lot of issues

    in AntiVirus, Firewalls and System Security
    Malwarebytes detects a lot of issues: I have just did a complete scan with MalwareByte and found 365 issues, has anyone had issues with this? [Original Title: Security] https://answers.microsoft.com/en-us/protect/forum/all/malwarebytes-detects-a-lot-of-issues/889ba9cb-f4f9-4457-a7bb-6b6da868678f
  8. PUP Threats Detected By Malwarebytes

    in AntiVirus, Firewalls and System Security
    PUP Threats Detected By Malwarebytes: Is anyone getting the pup.price.ninja threats? I get the same 4 pup threats every time Malwarebytes scans. I also noticed that I get advertisement popups while running Chrome that I don't get running Firefox. I have popups turned off but these popups continue regardless what...
  9. JS/Tadruss.A Virus

    in AntiVirus, Firewalls and System Security
    JS/Tadruss.A Virus: https://www.microsoft.com/security/p...S%2FTadtruss.A Just wanted to share my experience with subject virus. It is a JavaScript that redirects your browser to another site, not the one you actually intended to visit. In the wild, this trojan was observed to redirect...
  10. Keyboard prefs

    in Windows 10 Support
    Keyboard prefs: Expat here. I have a Latin American keyboard but I prefer English as my interface language. In the Lock Screen, I have a choice between English, Spanish and a combination ENG/LAA (English interface with Latin American keyboard) but when I log in the options are limited to ENG...