Avira Anti Virus Software
Dingley Mellowcreme
Has anyone had eexperience, good or bad, with the German-made Avira
software? I believe they have (had) both free and paid versions. Any
feedback would be appreciated.
Thanks.
nu...@zilch.com
Looks like it uses the AntiVir scan engine:
http://www.emediawire.com/releases/2004/10/prweb168709.htm
While there is a free version of AntiVir, the Avira product seems to
be strictly payware after a trial period.
Art
Dingley Mellowcreme
> http://www.emediawire.com/releases/2004/10/prweb168709.htm
Thanks for the insight and link.
Lucas
after booting, and a few of minutes I-explorer opens the site in the
subject.
There is a popup screen : trying to close this window ? 'Yes or No'
What is this - where it starting ? is it dangerous ?
The OS is Vista home, virus scan is ESET Smart Security 4
Lucas
Beauregard T. Shagnasty
> after booting, and a few of minutes I-explorer opens the site in the
> subject. There is a popup screen : trying to close this window ?
> 'Yes or No' What is this - where it starting ? is it dangerous ?
What do you see dangerous at the page?
<html>
<body>
<script type="text/javascript" charset="utf-8">
document.cookie="can_pop=true;path=/";
window.close();
</script>
</body>
</html>
None of my browsers raised a popup window. This could be attributed to
my preferences to disallow unwanted popups. Doesn't your browser have
such an option? (My OS does not have IE.)
--
-bts
-Friends don't let friends drive Windows
Ant
> Lucas wrote:
>> after booting, and a few of minutes I-explorer opens the site in the
>> subject. There is a popup screen : trying to close this window ?
>> 'Yes or No' What is this - where it starting ?
It's script on the web page trying to close the browser window.
>> is it dangerous ?
No.
> What do you see dangerous at the page?
Nothing.
> window.close();
> None of my browsers raised a popup window. This could be attributed to
> my preferences to disallow unwanted popups. Doesn't your browser have
> such an option? (My OS does not have IE.)
I think he means a message box from IE caused by the line of script I
left quoted above.
The OP should check startup menu entries and launch points in the
registry to see what's causing IE to run automatically.
Beauregard T. Shagnasty
> The OP should check startup menu entries and launch points in the
> registry to see what's causing IE to run automatically.
Ah yes, that sounds like good advice. I might have misinterpreted the
meaning of "and a few of minutes I-explorer opens the site .." as being
something not initiated by Lucas.
I probably would have written, "When I boot my computer, Internet
Explorer starts all by itself, and ..." :-)
FromTheRafters
news:oflei5553vs5s3ije...@4ax.com...
Change your home page to "about.blank".
Lucas
I don't see anything special in the startup prog's with a link to
'redvase....'
also nothing special in the running processes...
Lucas
Lucas
<a.non...@example.invalid> wrote:
>Ant wrote:
>
>> The OP should check startup menu entries and launch points in the
>> registry to see what's causing IE to run automatically.
>
>Ah yes, that sounds like good advice. I might have misinterpreted the
>meaning of "and a few of minutes I-explorer opens the site .." as being
>something not initiated by Lucas.
>
>I probably would have written, "When I boot my computer, Internet
>Explorer starts all by itself, and ..." :-)
Yes , that is better .....and so it is: 'IE starts all by itself , and
opens the site ..)
Sorry , but my principal language is not the English.
Lucas
Lucas
Have done it,
but still IE opens by himself the 'redvase....' site after a few of
minutes .
Lucas
>
Beauregard T. Shagnasty
> Change your home page to "about.blank".
Should be: about:blank <-- colon instead of fullstop/dot
Beauregard T. Shagnasty
> "Beauregard T. Shagnasty" wrote:
>> Ant wrote:
>>> The OP should check startup menu entries and launch points in the
>>> registry to see what's causing IE to run automatically.
>>
>> Ah yes, that sounds like good advice. I might have misinterpreted
>> the meaning of "and a few of minutes I-explorer opens the site .."
>> as being something not initiated by Lucas.
>>
>> I probably would have written, "When I boot my computer, Internet
>> Explorer starts all by itself, and ..." :-)
>
> Yes , that is better .....and so it is: 'IE starts all by itself ,
> and opens the site ..)
Have you followed Ant's advice about checking startups?
Have you run any anti-malware scans? Get the free-for-home-use versions
of these two:
MalwareBytes Anti-Malware: http://malwarebytes.org/
SUPERAntiSpyware: http://superantispyware.com/
> Sorry , but my principal language is not the English.
French? :-)
Beauregard T. Shagnasty
> Lucas wrote:
>> still IE opens by himself the 'redvase....' site after a few of
>> minutes .
>
> Try HJT and look for BHOs,
> then check and 'fix' any it finds.
> http://free.antivirus.com/hijackthis/
Another good tool I keep forgetting, since I don't use Windows. <g>
Result of HJT can be pasted here; look for red alerts.
http://hijackthis.de/
Tread carefully!
Lucas
<a.non...@example.invalid> wrote:
>FromTheRafters wrote:
>
>> Change your home page to "about.blank".
>
>Should be: about:blank <-- colon instead of fullstop/dot
no cure with this
Lucas
Lucas
Dutch
Lucas
Lucas
hallo friends,
I have done everything what was suggested:
the logfile of HJT supect :
c:\windows\system32\AmplusnetPrivacyTools.exe.
as an 'unknow service' !
I renamed this file ,and until now everything looks normal.
when I rename the file back to the original name , after 10 min IE
opens the 'redvase site'
I don't see this file, also not in the running services with the
'startup_CPL' prog.
Strange....
I have send the file to the free online virusscanner 'VIRUSTOTAL.com'
, and some of the scanners rapport 'malware or trojan'
So I think my problem is solved.
Thanks to everyone for the helping hand.
Lucas.
FromTheRafters
"Lucas" <Luck...@yahoo.com> wrote in message
news:n27ki5h8dsgfddle6...@4ax.com...
FromTheRafters
news:hgd95a$4pd$1...@news.eternal-september.org...
> FromTheRafters wrote:
>
>> Change your home page to "about.blank".
>
> Should be: about:blank <-- colon instead of fullstop/dot
Oops!
Buffalo
Lucas check out this link for other files,Registry Keys, etc that most
likely were created on your computer.
One of them was the AmplusnetPrivacyToos.exe and there are others as well.
http://www.threatexpert.com/report.aspx?md5=0c6c13698bf49b8c83e1f4f9519c10d4
Buffalo
Lucas
wrote:
Hallo Buffalo n
you are right, my friend !! ,
there is also an Unknonw file in winsock: 'pcproxy.dll'
The proces 'AmplusnetPrivacytools.exe.' was running,
and stopped when I rename or delete the Amplus.... EXE- file...
Until now, no problems ,
but the PCPROXY.DLL is also in my system !
not normal,
also HJT give 'unknown file .....' for this file .
As soon as possible I'll take a look a little bit further ....!
thanks for the link and advise.
Lucas
Buffalo
>>Buffalo wrote:
[snip]
>> Lucas check out this link for other files,Registry Keys, etc that
>> most likely were created on your computer.
>> One of them was the AmplusnetPrivacyToos.exe and there are others as
>> well.
>>
>>
http://www.threatexpert.com/report.aspx?md5=0c6c13698bf49b8c83e1f4f9519c10d4
>>
>> Buffalo
>>
>
>
> Hallo Buffalo n
> you are right, my friend !! ,
> there is also an Unknonw file in winsock: 'pcproxy.dll'
>
> The proces 'AmplusnetPrivacytools.exe.' was running,
> and stopped when I rename or delete the Amplus.... EXE- file...
>
> Until now, no problems ,
> but the PCPROXY.DLL is also in my system !
> not normal,
> also HJT give 'unknown file .....' for this file .
>
> As soon as possible I'll take a look a little bit further ....!
> thanks for the link and advise.
>
>
> Lucas
Have you tried Beauregard T. Shagnasty's advice about using MBAM and SAS? If
not, I would sure run those two FREE programs. (use the free versions)
http://malwarebytes.org/
http://superantispyware.com/
Download the free versions of each, install, update and then run each one
seperately.
They may just save you the time and effort of searching for and deleting all
the other crap that got installed.
Best of luck,
Buffalo