Hi. I picked up the NWJS Trojan from your site this morning. Norton was useless. I killed it by renaming the file so it couldn’t be executed before I could kill the many instances of it running.

Please advise when it is safe to post on your site.

So you posted in forums, got a Trojan then posted in forum that u got a Trojan and want to know when it's safe to post in said same forum?

_________________
You like that Redgren Grumbholdt reference? Yeah. Well, guess what? I made him up. You really are your father's children. Think for yourselves. Don't be sheep.

What the *** are you On about? I Went to sell some gear and now I have a Trojan. It took me a while to kill it. Norton was useless. End of topic

Thank you Gerry. I’ve forwarded the information to our admins.

_________________
"What you talking 'bout, Willis?"

Thanks for this report. We're not aware of any active threat that can result in a trojan being installed via the site and we don't think the trojan is related to the site, but we'll track this through a malware service we pay for that monitors and blocks malware on the site.

Just out of curiosity, where was the trojan file located on the system? Eg what folder path?

To the moderators and the admin - thank you!

_________________
_________________
We can hear everything we measure... but we cannot measure everything we hear.

If you were using Norton maybe pu somewhere else beforehand?

Not sure that said trojan originated from this site. I'm a 28-year MS Certified Tech' who uses the absolute best AV solution (Bit Defender). I've bought and sold a lot on this site, and am selling ferro' on CanuckAudioMart right now. No trojan activity has been detected on my end...

Andrew D.

Can we clarification from a pro tech ? Something doesn’t hang here.

https://malwaretips.com/blogs/remove-nwjs-adware/

Is the NWJS Process Malware? Should I Be Worried?

The NWJS process is not malware. As long as the file path for NWJS leads to the app you installed, it is a legitimate process powering the app and nothing to worry about.

Some key points:

Open source NWJS is safe framework used by many reputable apps.
Top apps like Slack, Spotify, Skype all rely on NWJS.
NWJS needs to run constantly so apps function normally.
Ending task improperly will break apps relying on it.
You only need to investigate if you see multiple NWJS processes or the file path is suspicious. But in most cases, NWJS will be linked to apps you knowingly installed.

So rest assured that seeing NWJS running is normal and not indicative of any malware or virus. It is a benign process that is required for many popular desktop programs to work properly.

_________________
“… Be the person that your DOG thinks you are …”

Reply: Sorry, can't remember where it was. Just happy it's gone. Ads were popping up constantly and couldn't be closed. Multiple instances of this were running and every time I killed one, two more would start running. Later, I discovered that PC app Store had recently been installed on my machine. I didn't do it. I deleted it. This may be related.

-- 27 Jun 2024 15:37 --



Reply: That may well be, but in my case multiple instances were running and self replicating in memory when I tried to kill it. Interestingly, you can't delete the app while it's running and for every attempt to kill it, two more start running. Only by renaming the app to something not executable could I stop the processes and delete the program.

Can also try in safe mode.
Still curious as to how the assumption was made that the issue was connected to this site?

_________________
You like that Redgren Grumbholdt reference? Yeah. Well, guess what? I made him up. You really are your father's children. Think for yourselves. Don't be sheep.