avast detects prefetched trojan...

[justin1278]

It is possible, or it is also possible that this is a False Positive detected by avast! there is really no way to tell. But regardless I would not risk this.

[Neron]

Well when i opened the page there was an error the selected page was not found 303 304(not the whole page but some part of it)
I have KIS so there is a firewall included and no any alert for outbound connection.
Winpatrol doesn't detect any changes (as I too no new processes and startup items.)
I guess there's nothing to worry about 

BTW I think it's not false positive because siteadviros was red

[justin1278]

Ya I noticed that SiteAdvisor gave it a red flag too. Maybe Kespersky blocked it. I'm not sure, but it sounds like the trojan didn't get to you.

[justin1278]

After testing the link I have found that this site gives free websites supposedly. http://ds4a,com is connected to http://freewebsites,com and both contain the same malware found by avast! I no longer want to put my system at a risk so I have blocked both sites on my system using the avast! Web Shield module.

[DavidR]

I entered the site to see if kaspersky detects anything and nothing happened...no virus warning...

Well there is no way I would have tried it without the web shield as a back-up and been using firefox and also running it via DropMyRights. So if the worst came about any potential damage would be limited, not to mention regular hard disk images as a final fall back option.

I also checked ds4a.com using site advisor http://www.siteadvisor.com/sites/ds4a.com which has links to sites with suspect spyware/adware.

Whilst this detection of Win32:Small-SK [Trj] hasn't been positively confirmed, you might want to schedule a boot-time scan and or run Ewido Security Suite If using winXP. or a-Squared free if using win98/ME, preferably in safe mode.

[Neron]

Dr.Web antivirus link checker returned clean message for both sites(ds4... and freeweb...) Scan with Bitdefender 8 free(updated) returend 0 found.
Did you reciever the same message 303 304 not found??

P.S OK now I'm pretty sure I'm no infected
This is e-mail from kaspersky labs(they are very fast 2-3 hours untill return repport for infected object   )

Hello.

No malicious software was found on sites, only 404 error pages.

--
Regards, Sergey Golovanov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com

[OrangeCrate]

The boot time scan came back clean, and as mentioned, I've disabled prefetching in Fasterfox.

Thanks for the help guys. I learned a lot. 

[justin1278]

OrangeCrate,

Thats great! please come back to learn more and maybe help someone!

[YLAP]

It really can be a false positive. I'll send it to ALWIL.

[Omar]

I sent it to antivir they said:


We found a new virus in the attachment you have sent us.
The signature will be integrated in one of our next updates.
The signature of the virus will be detected as PHISH.CitiBkfrau.AQ

[YLAP]

Oh, seems to be a new phishing tool or something... When I can say GOOD JOB ALWIL!  Detected it in first place!

[Neron]

I sent it to antivir they said:


We found a new virus in the attachment you have sent us.
The signature will be integrated in one of our next updates.
The signature of the virus will be detected as PHISH.CitiBkfrau.AQ

Omar,can you please send me this file at jorasik@abv.bgThank you

[Omar]

I sent it to antivir they said:


We found a new virus in the attachment you have sent us.
The signature will be integrated in one of our next updates.
The signature of the virus will be detected as PHISH.CitiBkfrau.AQ

Omar,can you please send me this file at jorasik@abv.bgThank you

I am happy to send it to you!

would you like it in a password protected zip file?

[Neron]

Thank you Omar,file recieved.It's just a .txt file isn't it?

[Omar]

Neron, yes you are correct it is just a txt file!

I sent it to kaspersky, they said it does not contain a virus or trojan!

But antivir said it did. I`m bit confused!