TrojanDownloader:JS/FakeUpdates.GP!MSR

Archive
1

This virus was found on my computer by a one-off Windows Defender scan. Defender is not turned on but I ran the scan as a precaution. I run Smart scans daily, Full scans weekly and Power Eraser scans once a month. Curious as to how this virus (TrojanDownloader:JS/FakeUpdates.GP!MSR) snuck by those. I make sure Defender is turned off so it won't interfere with 360 so not sure what happened here.

Anyone have any insights / suggestions. Thanks

2

All: Microsoft shows this information regarding this threat

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=TrojanDownloader:JS/FakeUpdates.C&ThreatID=2147826639

More remediation scenarios here: Although this was reported as removed I would take a second course of action to be safe and have peace of mind about things. 

https://www.bleepingcomputer.com/forums/t/780399/infected-trojandownloaderjsfakeupdates-and-poor-browser-connection/

SA

3

For Norton technical issues please include details:

  • Norton product or service name and version
  • Operating system - version / build 
  • Norton error message / error code / screen shot (mask PII)
  • Steps to reproduce issue
  • DO NOT post any Personally Identifiable Information (PII) such as your email address, product key or phone number
4

We do not recommend enabling Microsoft Defender's periodic scanning feature on a Windows 11/10 system having Norton protection. Periodic scanning is redundant and will require unnecessary additional power consumption and may result in conflicting notifications and messaging. In addition, periodic scanning can interfere with the protection features of your Norton product.

https://support.norton.com/sp/en/us/home/current/solutions/v123695220 

5

Note: just sounds like PUA/PUP - may not be PUA/PUP detection. 

What is a PUA (Potentially Unwanted Application) or PUP (Potentially Unwanted Program)?
https://us.norton.com/blog/malware/what-are-puas-potentially-unwanted-applications

Note: from this distance - Community would need more details regarding TrojanDownloader:JS/FakeUpdates.GP!MSR event. 

Note: static scans are least protection.  

Edit: we were cross posting

6

Just read the articles. Really appreciate the info!

7

Hi, it quarantined the threat and says it will be removed.  It was found in my downloads file. Not sure what PUP is?

All I have is the notice in the Protection History. I clicked on the link for more details and it took me to Microsoft page with no results

Thank you

8

Hello @James Haggerty
Welcome to Norton Community
```````````````````````````````````````````````````

Care to share what Windows Security did with > TrojanDownloader:JS/FakeUpdates.GP!MSR

Care to share Windows Security details regarding > TrojanDownloader:JS/FakeUpdates.GP!MSR

And you're sure Windows Security detection is not a false positive? 

Note: TrojanDownloader:JS/FakeUpdates sounds like PUP detection
https://malwaretips.com/blogs/remove-trojan-downloader-js-fake-updates/
Note: sounds like PUA/PUP - may not be PUA/PUP detection

What is a PUA (Potentially Unwanted Application) or PUP (Potentially Unwanted Program)?
https://us.norton.com/blog/malware/what-are-puas-potentially-unwanted-applications

____________________________________________________________

Please run Norton Full Scan & Malwarebytes Threat Scan.  

Were my machine and I wanted reassurance.
I'd ask Malwarebytes Malware Removal Help Forums to check my machine.  

Malwarebytes offers free second opinion on-demand scanner. 
Malwarebytes offers free self-help guides. 
Malwarebytes offers free one-on-one malware removal assistance.
Malwarebytes staff & experts help all.  Malwarebytes subscription is not required. 

Malware Removal Help Forums dedicated to cleaning infected devices. Get personalized help removing adware, malware, spyware, ransomware, trojans, viruses and more from tech experts.