JS/Blacole.S

Topic

New Reply

On November 7, while doing a scheduled, routine virus scan, Microsoft Security Essentials alerted me that it had found malware on my system. It removed a program named “JS/Blacole.S”. I can’t find out anything about this malware, but from what tid bits I have read, it seems like it’s only being detected by MSE! Does anyone know about this threat? I have attached a screen shot of the report from MSE.

Reply | Quote

Replies

Robert,

I found this on the Avira site.

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

RetiredGeek, The malware listed on the Avira site is for JS/Blacole.psah. There is also a JS/Blacole.N and a JS/Blacole.O. Do you think these are all the same?

Reply | Quote

Robert,

Each vendor gives these things their own names. Where they are the same or close I would assume the same bug. From what I can tell this is a JavaScript drive-by download that is laying dormant for something to activate it. Of course this is just making guesses from the stuff on the Avira site and the name. Be careful searching for this, WOT flagged several of my google hits with red circles…bad places to go! :cheers:

May the Forces of good computing be with you!

RG

PowerShell & VBA Rule!
Computer Specs

Reply | Quote

OK, thanks. I’ve only been looking for this because I would love to know just where I went to pick this up. I have been computing for over 30 years and I’ve only picked up a couple of viruses in all that time. Thank you for the help.

Reply | Quote

I’ve only been looking for this because I would love to know just where I went to pick this up.

You can search in Firefox’s cache index. In the address bar, type or paste about:cache and then check the disk cache. It usually loads slowly if you have a lot of files in the cache. You should be able to search using Ctrl+f as you would in a web page.

Edit: Actually, I’m not sure what the original file name was, so I’m not sure you will be able to locate it in the cache index. (Obviously there are way too many .js files to search by extension.)

Reply | Quote