js istbar and no virus chest

Avast Free Antivirus / Premium Security
1

good day to all

i went to a website and JS:Istbar trojan was found. that website “crackdb.org/get_40240_SlySoft.AnyDVD.v5.1.1.1_crack.html”
said something like antivirus or firewalls would detect the trojan and set off alarms, thus advising turning off of the software.

running avast 4.6 home edition.

my question is, i didn’t see any options when avast sounded the alarm, no choice to move it to the chest, is this free version not inclusive of such options?

i found that i couldn’t do anything with it, like i don’t even know if the script/trojan is on my physical HDD.

[by the way in avast’s log viewer, warning section, it says Sign of “JS:Istbar [Trj]” has been found in “http://install.xxxtoolbar.com/ist/scripts/prompt.php?retry=3&loadfirst=1&delayload=0&account_id=159214&recurrence=daily&adid=a1112395957&event_type=onload&signature=cracks\PxB38” file]

please help, thanks

2

No you are Safe Avasts Webshield prevented loading of the page and no malware

was permitted ie nothing was added to your HDD Avast Webshield just prevents this

event from accruing no choice darn good thing to!!

3

Hi, welcome to the forums.

i didn't see any options when avast sounded the alarm,
You did see (or should have seen) an option to Abort the Connection!, e.g. stop that item downloading into your browser cache. You obviously did this otherwise you would probably have had another alarm by the Standard Shield when it did get to the HDD.

This is a layered defence, first Web Shield tried to intercept before it gets to the HDD and Standard Shield backs that up.

I suggest you spend a little time reading the avast help file to get to know avast and get the best from it.

4

You can also take action to block bad sites like xxxtoolbar.com:

Use SpywareBlaster

http://www.javacoolsoftware.com/spywareblaster.html

and IESpyad

https://netfiles.uiuc.edu/ehowes/www/resource.htm

Information about how to use IESpyad here:

http://www.geocities.com/dontsurfinthenude/blocking.htm

Another bit of good advice is to use Firefox for casual browsing at least because it doesn’t run ActiveX controls and isn’t vulnerable to browser hijackers like xxxtoolbar. More info here:

http://www.geocities.com/dontsurfinthenude/activex.htm

Oh, and stay away from crack sites! :wink:

5

oh thanks for all the help!

yeah i tried to read up on avast’s system but didn’t really understand it, guess i was relying too much on my knowledge of prior antivirus software that work differently.

6

Welcome to avast… The WebShield technology, indeed, is an advantage and exclusivity of avast 8)

7

That’s the beauty of webshield, it detects the virus on the web but does NOT allow it to enter your PC. 8) Plus if Webshield didn’t get the virus, Standard shield kicks in and cleans it up.

8

heh yeah Firefox rocks. 'tis odd, though, was using the latest FF updated browser when it happened.

this webshield is great!

one last thing, i checked my documents and settings/[user]/temp folders where the scan said i was infected, couldn’t find anything or file that corresponded to the log. so i just cleaned up the temp files that could be deleted. hope it’s all clear

once again thanks for the heads up

:stuck_out_tongue:

9

Just to be sure, why not run a “Full System Scan” using Ad-aware SE
and/or use either or both of the following good & FREE programs
that “specialize” in trojan,worm, etc removal :

  1. A-squared : www.emsisoft.com/en/software/free

  2. Ewido : www.ewido.net/en

10

thanks Spiritsongs, will check them out