Js prontexi trojan

Viruses and worms
1

One of my computers caught a trojan called Js prontexi. I couldn’t move to chest because it said it was being used by another process, so I panicked and pressed delete. As we speak Im running a boot scan on the computer. If nothing shows up, am I safe? Or did I make a big mistake pressing delete?

Thanks in advance for any help.

2

A boot scan is the right thing to do of avast! cannot move the file.

During the scan, “move to chest” is always the recommended option.

If still having problems…

Try a scan with DrWeb CureIT!

Try one or more of the the usual free adware/spyware scanners.

Spybot Search & Destroy
SUPERAntiSpyware Free
a-Squared Free
Malwarebytes’ Anti-Malware

Download, install and update the programs.
Always select the option to quarantine any malware found rather than delete it, then you will be able to restore files or registry entries wrongly identified as malware- a rare but not unknown event for any malware scanner.

3

Ads poisoning – JS:Prontexi
http://blog.avast.com/2010/02/18/ads-poisoning-–-jsprontexi/

Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm

4

Is there a way to check a log for the boot scan? I left it running during the night and I would like to see the results.

So far so good, my computer isnt acting funny, so hopefully I will be fine.

Thanks for the info guys!

5

If you run v5 you can go in the Scan Log section. :wink:

6

This is the location of the boot-time scan log (in XP), C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt. This location will be different for Vista, etc.

Though I doubt it will have much for you as if it detected something it would be awaiting input on what action to take.

7

I know this is an old thread but my WebShield blocked this trojan last night. It was on a Yahoo fantasy baseball page. A good reason not to ever disable the web shield. Good job Avast!

JS:Prontexi-BY is what was detected.