Jump to content

firefox displays me troyan notification about a crypta.js

Recommended Posts

Hello everyone! I have an issue the last 10 days that i cant rid of it... every time i run firefox displays me a message that detected a downloading threat and after a few seconds KIS blocks it.Not real threat yet, ok, but... when i close and re-open firefox seems all good and no notifications display... but if i wait about 10 minutes (i think) or more there's a notification again... about the same threat from that same annoying url...

Object detected (file) | https://reauthenticator.com/lib/crypta.js | HEUR:Trojan.Script.Miner.gen | https://reauthenticator.com/lib/crypta.js | Firefox | Trojan Program | 09/02/2018 23:15:53


So please tell me, how can i fix that issue and never have same problem again?

Thanks in advance!!


Share this post

Link to post

Kaspersky Settings > Additional > Threats and exclusions > Detection types > enable Detect Other Software.
and do a databases update > reboot, then do a scan.  

Clear the contents of your Temp folder, instructions: http://support.kaspersky.com/1161 and then reboot.

After that, uninstall any recently installed junk > reboot. 

After that, uninstall any and all junk toolbars > reboot.

Uninstall/disable any and all junk browser add-ons and extensions and plugins in all of your browsers. 

Remove the junk argument from the target field of the browser shortcut properties. 

Remove any and all junk search providers in all of your browsers.

 How to clean up your browsers: http://support.kaspersky.com/us/viruses/solutions/10319

If you are using a router, reset the router, change the router password to a strong password, enter the correct information according to your internet providers instructions, then clear browser cache and cookies, reboot. 

Any better after that? 

If still no go, Please post your GetSystemInfo report link, instructions are located in the third (3rd) pinned topic. 

Please see the small print that is located at the bottom of this message. 

Share this post

Link to post


This is a utf-8 coding and variable name are confused. Could you provide this js file to me by PM?I should analyse this encrypted JS to see what it does.


Share this post

Link to post

  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.