Page 1 of 3 123 LastLast
Results 1 to 10 of 29

Thread: JS.Feebs

  1. #1
    starburst Guest

    Default JS.Feebs

    Hi,

    Despite having ZoneAlarm Internet Security Suite (with highly protective settings), I have somehow managed to obtain a virus called JS.Feeb. ZoneAlarm detects it but says no treatment is available for it. I have attempted to get rid of it through suggestions that came up on search engines. (For example the TrendMicro website let me scan it with HouseCall, but that gave me a repeated error message in a pop up box during the scan itself. TrendMicro also has a section under that virus called "Removing Sections from the Registry", and when I followed those instructions, I noticed that the file name under "Installed Components" that they wanted me to click on was not there.)

    Anyway, besides the TrendMicro website, I haven't seen much other advice out there, so I thought I would post. This virus steals passwords and credit card information and it is essential that I remove it ASAP. Thanks so much for any assistance you can provide.



    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,291

    Default Re: JS.Feebs

    Hi!try to download and run DrWeb Cute it (free standalone antivirus) here:http://download.drweb.com/drweb+cureit/Please post back...Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: JS.Feebs

    This one maybe more precise than the TrendMicro>

    http://www3.ca.com/securityadvisor/v....aspx?id=50186

    It seems this one comes in email attachments or in P2P connections. You probably had a nasty attachment and opened it by mistake.

    To remove it, download and install this standalone scanner utility. It will not interfere with your ZASS antivirus. Just go off line before actually using the Stinger and then turn the resident antivirus off or the ZASS off. Download from>

    http://www.majorgeeks.com/McAfee_AVE...ger_d4063.html

    Also after open the IE (needs ActiveX) and once at the site, disable the ZASS antivirus and do the online scanner installation and follow it up with the online scan. This scan has the option to repair and remove, not just detect.

    Scan from>

    http://www.bitdefender.com/scan8/ie.html

    Oldsod

    Message Edited by Oldsod on 12-14-2006 09:03 AM
    Best regards.
    oldsod

  4. #4
    sidesteal Guest

    Default JS.Feeb in Gmail

    I am also experiencing the JS.Feeb virus, but only in the last few days.
    I am getting this only when opening or browsing gmail.
    There seems to be alot of talk about this in M$ Windows Live One Care - where the issue has been resolved as a false positive.
    I can absolutly confirm that i have opened no attachments recently, ZSS Heuristic is running and this has only happened in the last 3 or
    4 days.
    ZSS detects the JS.Feeb and cleans/deletes it for me - leaving me to reboot the pc to finish up.
    I do full system virus scanning afterwards as well as deep scanning spyware afterwards too. Nothing shows up.
    Apart from the advice that was given to the thread starter by guru, is there any other information that you can give me?
    Should i also follow the advice given? Bearing in mind that a full scan does not ppick anything up......afterwards.
    Many thanks
    Patrick

  5. #5
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: JS.Feeb in Gmail

    The ZASS is probably misreading some javascript and sees it as malware. Just set the false positive as Ignore or as an Exemption in the scanner. Really cannot help to much with the ZA antivirus , because I just the ZAPro and ZA AS versions and use completely different antiviruses. The blue Help in the upper right corner of the ZA should have some information to help you with this.

    Just google JS.Feebs and JS.Feebs removal tool or JS.feebs removal for more info. Any security maker will have some details.

    Oldsod

    Message Edited by Oldsod on 12-14-2006 12:49 PM
    Best regards.
    oldsod

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,291

    Default Re: JS.Feeb in Gmail

    A check with the suggested tools doesn't hurt...But I agree with you that this seems really a false positive rarther than an infection.What else to do?1. May be waiting for the next AV update and see if the false positive is fixed or:2. Contact ZA support (link) and report this false positive and/or3. Write to CAto report this falsedetection (virus@ca.com or virus@vet.com.au)Hope this helpsFax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  7. #7
    sidesteal Guest

    Default Re: JS.Feeb in Gmail

    OK - Thanks for replying so quick!
    I think you picked up on the fact that i had Zone Alarm Security Suite - although i didnt mention it specifcally, the reason i mentioned WLOC was becasue those users were having issues with Gmail and the BAT worm - it was kind of re-assuriing that others were having problems - i dont mean that in a nasty way!
    I have checked with ca.com on the js.feeb and have checked my registry for any offending keys - none found. I guess thats good?
    I will carry out your other suggestions - report to Zone as a false positive, wait for ZA av update to see if fixed and report to ca.com and run a check on the searches for removal tools.
    Take care gurus - you are really helpful and i send you a big warm hug!
    Patrick

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,291

    Default Re: JS.Feeb in Gmail

    You're welcome, please let us know when the issue is resolved... (or not resolved).Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  9. #9
    froggett Guest

    Default Re: JS.Feeb in Gmail

    Hey - I'll post it as a "false +ve" to CA as well.
    See my q http://forums.zonelabs.com/zonelabs/...message.id=641
    I definately shouldn't have any of this, and can replicate it on demand while looking at gmail.

  10. #10
    froggett Guest

    Default Re: JS.Feeb in Gmail


    . . . and also do not have any of the file/reg keys posted by Trend etc, hence my question earlier this morning!

Page 1 of 3 123 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •