Trojano-169 in .xpi-File

Avast Free Antivirus / Premium Security
1

Surfing in the Web with Mozilla (1.7, software installation disabled) a download-dialog appeared when entering a web page:
“sbc_netscape.xpi”

I knew this is propably a bad guy, downloaded it on my hard-disk → no alarm. Scanning the file with right-click and “scan with avast” said, that this guy is a “Trojano-169”.

Of course no alarm with on-access-scanner, i thought, because “.xpi” is not an extension listed in the standard shield. So I added XPI as additional extension, but no effect. I can download the guy again and again … no alarm.

Kaspersky-Online-Scanner says:

  • Zu überprüfende Datei: sbc_netscape.xpi
  • sbc_netscape.xpi Archive: ZIP
  • sbc_netscape.xpi/install.js Ok
  • sbc_netscape.xpi/sbc_netscape.exe Infiziert: TrojanSpy.Win32.Briss.h

How could I make AVAST! detecting this guy upon download?

I am using AVAST! Home (4.1.418, VDB 0426-0, WinXP)
???

2

set it into the chest of Avast and email it to Alwil software :wink:

3

Sorry, I had a mistake in my post.

The “on-demand”-Scanner of AVAST! found it, but not the “on-access”. I modified it now in the original post.

4

I have send this file in a password-protected zip to the avast!-Team …