Member Avatar for cherylholmes

Hi,
I clicked on my printer program and this warning virus message came on. Said I have this virus...
JS:Flooder-NewsAgent-3
My antivirus wouldn't delete it or repair it. Anyone know what this is and how I can fix this problem? Where did it come from? I run win98se and have dsl, 2 antiviruses and a router, hard wired.
Thanks in advance..Cheryl :sad:

  • 3 Contributors
  • 5 Replies
  • 142 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

Brief expert summary and a focused cleanup checklist for the JS:Flooder-NewsAgent-3 alert seen by .

The detection name points to malicious JavaScript being executed on the machine (a script that tries to "flood" or perform automated network activity). Because it is script-based it often lives in temporary HTML/JS files, browser caches, or in autostart entries rather than as a simple removable EXE. That explains why a resident scanner sometimes reports it but cannot delete the live copy.

Practical next steps (actionable, in order):

  • Isolate the PC from the network immediately (unplug Ethernet) so any active script cannot reach outside services.
  • Boot to Safe Mode (or use a clean rescue environment/bootable scanner) and run an up-to-date on-demand scanner such as Malwarebytes to remove script files and dropped components. If an on-disk file is locked inside Windows, scanning from outside Windows avoids the lock.
  • Inspect and remove persistence: use Autoruns to find suspicious startup entries, browser helper objects, or scheduled tasks and disable them before rebooting. (Autoruns: https://learn.microsoft.com/en-us/sysinternals/downloads/autoruns)
  • Clear all browser caches, temp folders, and any printer utility caches. Search for recently modified .js, .htm, or .vbs files in Temp and user profile folders and quarantine them.
  • If the machine still behaves oddly, consider a full filesystem scan using a rescue CD/USB or reinstall: old, unsupported OS versions (like Win98SE) lack modern protections and are best rebuilt or upgraded.

Operational tips and security hardening:

  • Avoid running two real-time antivirus engines together; they can conflict. Use one resident AV plus on-demand scanners.
  • Reset router admin credentials and reflash/update firmware from the vendor site if compromise is suspected.
  • When asking for deeper help, attach an Autoruns/HijackThis-style log to the thread (not by PM) so responders can see persistence entries and processes.

Recommended Answers

All 5 Replies

Member Avatar for crunchie

Go here to TrendMicro for an on-line scan & set it to autoclean for you.

Try this scan at Panda as well.

Member Avatar for cherylholmes

Most of this I have already done, but I am printing it out as a guide to go through point by point. I do have adwarese and the other software you recommended but lately all these trojans and viruses have slipped throu all my protections. Everyone I know is having the same problems. I emailed the manufacturer of my router for any firmware updates too since it has a built in firewall.
It is really getting near impossible for us to keep out systems safe and secure any more.
Thks so much for your help...but I do not know what the last sentence you wrote means...Would you please explain that to me?
thks so much!
cheryl

Member Avatar for dlh6213

Thks so much for your help...but I do not know what the last sentence you wrote means...Would you please explain that to me?
thks so much!
cheryl

Do you mean this line? "Try this scan at Panda as well." If you click on the underlined word this, it will take you to Panda's site for a free online virus scan. Or you can click here instead:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

To help keep the bad stuff out, install SpywareBlaster (link in crunchie's signature). Keep it updated too! (For a little info on it, you can see this thread: http://www.daniweb.com/techtalkforums/thread11373.html)

Member Avatar for dlh6213

It is really getting near impossible for us to keep out systems safe and secure any more.

With DSL, you should also have a hardware firewall and a software firewall.

Member Avatar for crunchie

Please do not PM HJT logs.

Did you mean the above line? That is part of my signature & appears in all my replies :).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.