Avast detected JS:1stBar-c trojan

Viruses and worms
1

Yesterday Avast detected the above trojan on my computer. Transfered to Virus Chest and deleted. However, searching for info in database for this virus returned no results. Could you enlighten me?

2

Indeed weird… it’s not there with this (or similar) name… not even JS:FirstBar…

3

To bad you already deleted it, it would be interesting to see what virustotal.com had to say about this file.

4

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

Try searching on the infected file name you are likely to find more on it or its associations.

5

Hi hsherman,

Download hjt from here: http://www.filehippo.com/download_hijackthis/download/58170ee6e58bba306c943f5b6d745c99/
and post the hijackthis log txt as an attachment to your next posting, we will analyze that and see that all of the malware has left your computer,

polonus

6

is JS:IstBar-C [trj], no 1st…
infect files .com and .exe

7

Hi Guys, I have been getting viruses coming thru as well, recently. I thought of upgrading to the pro verion of avast. Is there any bennifits doing this? Currently using Home edition.

PICMAN

8

The virus detection is the same for home and pro, the pro version is much more flexible and configurable than the home version.

Avast Home V Avast Pro differences http://www.avast.com/eng/av4_version_comp.html

If you want to get any info, etc. about your detections, then - Go to this link, http://forum.avast.com/index.php, scroll down to the Viruses and Worms forum and click it, click the New Topic button at the top of the list and post there.

9

Thanks… now we find it…

10

The infected file was shown as: ysb_prompt(1). And thanks Avast08…using I in place of the 1 does return the info from the database.

11

To be sure you’re clean, I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.