Author Topic: What do I do, when avast! 4.8 Home Edition say: Trojan!  (Read 2496 times)

0 Members and 1 Guest are viewing this topic.

Offline Dan.Mark

  • Newbie
  • *
  • Posts: 12
What do I do, when avast! 4.8 Home Edition say: Trojan!
« on: May 02, 2008, 05:53:25 PM »
 :?
Hey. I was sitting peacefully and Goggled Searched the word "topwallpapers", and the 1. link, who came up, was xxx.topwallpapers.com (do not punch on it!), because avast! 4.8 Home Edition said. Trojan! and made a terrible sound with the yellow warning sigh.

I quick punch on "close the program", or what it was called, and got away from the link.

Scanned the most carefully way with avast! + SuperAntiSpyware Free, who did not find any Trojan.

Except in avast log:
Warning
SYSTEM 1660 Sign of "VBS:Malware-gen" has been found in "[edit by aaron]xxx.topwallpapers.com/menu.htm"file.

 :help:

I believe I am safe!

But what do I do, next time - If this Trojan warning come??? -IF it come on another site.
(I will of cause not go there again)
- Like I said - I was so surpriced, that I did not know what really did happen, and reacted sort of panic like.

 :breakkie:

Well. The link was judged by McAfee siteadvisor as GREEN ...



Link broken by winchester73
Other link broken by Aaron Hulett - MSFT[/i[

Offline Ripley

  • LzD Moderator
  • Hero Member
  • *****
  • Posts: 2566
Re: What do I do, when avast! 4.8 Home Edition say: Trojan!
« Reply #1 on: May 02, 2008, 08:28:39 PM »
Dan.Mark,

You did the right things!

Actually, the site does seem to have some problems per user reports at Site Adviser, including detection by another scanner > http://www.siteadvisor.com/sites/topwallpapers.com

I would not mess with that site myself unless there was a comment by the site owner, at Site Advisor, that the detection was a mistake (false positive).

Thanks for advising other readers not to click on it.

Quote
avast! 4.8 Home Edition said. Trojan! and made a terrible sound with the yellow warning sigh.
Well, yes it is designed to get your attention.  If you want to turn off the sounds, you can, but I prefer the visual as well as sound warning.
Usually it reports "Virus" or "Malware" at the popup.  Are you using the Danish language pack & Danish Help file?  If not, it is available in your language.

This was a detection by the Web Shield portion of the resident protection of Avast.  The web shield only has one option, abort connection, which stops the file being downloaded to your system, so it isn't on your hard drive.  You shouldn't have to do anything else.  But running those extra scans is always a wise choice as a precaution, or second opinion.

From the Avast website:
Quote
Q: What is Web Shield and how does it work?
A: Starting from the version 4.6. avast! comes with a new on-access scanning provider - Web Shield. It is able to monitor and filter all HTTP traffic coming from the Web sites on the Internet. It’s implemented as a HTTP proxy running on your PC. Connections from your Web browser are redirected to the Web Shield module. Web Shield in turn connects to the requested web server and while downloading the content it scans it for viruses and Trojans. Only the clean data is delivered to the browser, every malware is stopped before it gets saved on your PC.
http://www.avast.com/eng/webshield_issues.html#idt_6866

Quote
Except in avast log:
Warning
What is in the Warning log is a recording (a record) of the detection by the A/V, and where the detection was found. Since nothing ever hit your hard drive, no pathway is listed.
Quote
But what do I do, next time - If this Trojan warning come??? -IF it come on another site.

Read the options carefully, as I said above, there is only one option if detected by the web shield: abort connection.  If a detection comes during a scan you start, or while opening a file, my recommendation would be to choose "Move to Chest".  The "Chest" ("Vault" "Quarantine" different names different programs) is a protected, encrypted area where live malware can no longer execute or run.  They are trapped there and can not be activated. 
Quote
- Like I said - I was so surpriced, that I did not know what really did happen, and reacted sort of panic like.
I understand.  I would have been surprised too.  But I am quite cautious (avoid) about websites that list "free" wallpapers, screensavers, smileys, etc., as they have been sometimes known to contain some "hidden" (malware, adware) extras.

Offline Dan.Mark

  • Newbie
  • *
  • Posts: 12
Re: What do I do, when avast! 4.8 Home Edition say: Trojan!
« Reply #2 on: May 09, 2008, 06:28:25 AM »
Hi Ripley
 :)

Many thanks for your nice reply. Yes, I was really surpriced.
Now I know avast! sound I will not turn it off, even though it do shout loud.

And I will of cause stay away from such sites. Too bad about the hidden mailware.


Offline Ripley

  • LzD Moderator
  • Hero Member
  • *****
  • Posts: 2566
Re: What do I do, when avast! 4.8 Home Edition say: Trojan!
« Reply #3 on: May 10, 2008, 04:27:05 AM »
Your welcome Dan.Mark, but I see that based on your questions elsewhere in the forum, you haven't taken my advise about visiting these potentially harmful sites   :blink:

Avast anti-virus is signature based, and cannot protect you 100%, even if you have all the latest signatures/definitions/updates, for what you might encounter online with malware. 
That is why it is recommended to have "layers" of security protection. 
The lack of a warning (no sound) from the A/V's web shield, if it has one, or the rest of it's real-time protection, does not mean you won't or can't get infected clicking on links.  There are new malware being created everyday, and it is possible that the A/V might not be able to detect it yet.

I do not mean to scare you or sound like I am saying Avast isn't effective as an anti-virus product, but the level of your questions seem to indicate that don't you fully understand the differences between different malware and the type of information that your security products are providing you yet. 

The problem detected at the website above is not only about whether you will be spammed after you register, or that the downloads are clean, or that the downloads linked from the site are clean, which is the information Site Adviser gives based on their methods, but the website itself. 


The Avast sound(s) volume...the loudness that it "shouts" is the same level/volume as the rest of your computer sounds, based on your settings for your speakers.  If you have your speakers off you will not hear Avast sounds.  If your volume is turned up high, the "warning" will also be "shouting".

Take care with your surfing Dan.Mark   :)