Avira Free Event list warning for malware found

13 years ago

System: XP home, Avira Free, up to date.

Today I received a warning from Avira it had found malware. I didn't take action immediately but came back later and activated Avira Dialog/control box and clicked on "event". There I found a list of 8 detections of malware found all in a one minute period. In the middle was a warning that Autorun had blocked something, I assume an actin by Avira - maybe by the malware.

Looking for some tool, button, in Avira to remove the malware the only thing I found was "delete selected event"... I don't want to delete the even record, but think I should delete the malware. Does clicking on "delete selected event" remove the associated malware detected?

Sort by:Oldest

Comments (16)

ravencajun Zone 8b TX
13 years ago
I would not delete the malware yet just in case it is a false positive instead put in quarantine.
I would run an updated full malwarebytes scan, then a free online scan like eset to see what it says then run your Avila again.

Here is a link that might be useful: eset
jerry_nj
Original Author
13 years ago
Thanks, I didn't see quarantine tool in Avira - or even mention of it. I can look again.

A just completed Avira scan again turned up the 8 problems.

I do have Malware, you express a lot of confidence in that tool. I do not run it on a routine basis, perhaps I should.

"eset" is a new tool, an online scan I take it, one that offers to fix for a price? Hey, I'm okay with paying for stuff, but go free if possible.

I am not aware of any performance problems from the 8 issues on my system.
Related Discussions
AVG 8 Warnings: What They Mean; What To Do
Q
Comments (20)
yes the AVG8 beta sp1 update was just recently released to help fix some of the problems with AVG8. They are suggesting the update. Also following these directions from their faq is helping. How to disable the AVG add-on in my Internet Browser? AVG 8.0 Free Edition contains a plugin for scanning of search results in Google, Yahoo and MSN search engines. This plugin (AVG SafeSearch) is designed for MS Internet Explorer and Mozilla Firefox Internet browsers. If you would like to disable it kindly proceed as follows: 1. Internet Explorer: * Run Internet Explorer. * Choose the Internet Options from the Tools menu. * Switch on the Programs tab. * Click on the Manage add-ons button. * Select the AVG Safe Search add-on. * Tick in the Disable option at the bottom of this window. * Confirm changes by clicking on the OK button. * Close Internet Explorer and run it again. 2. Mozilla Firefox: * Run Mozilla Firefox. * Choose the Add-ons option from the Tools menu. * Select the AVG Safe Search add-on and click on the Disable button. * Close Mozilla Firefox and run it again. Note: AVG add-ons cannot be used with Mozilla Firefox 3 (beta) at the moment. Was this FAQ helpful to you? : 1338: How to install AVG without LinkScanner If you wish to install AVG 8.0 Free Edition without the LinkScanner component, or uninstall this component from your program, please proceed as follows: * Download the AVG 8.0 Free Edition installation package from our website. * Run the installation with the parameters /REMOVE_FEATURE fea_AVG_SafeSurf /REMOVE_FEATURE fea_AVG_SafeSearch. One way to achieve this is to: o save the AVG Free installation file directly to disk C:\ o open menu Start -> Run o type c:\avg_free_stf_*.exe /REMOVE_FEATURE fea_AVG_SafeSurf /REMOVE_FEATURE fea_AVG_SafeSearch * The installation will be started, and AVG will be installed without the LinkScanner component. http://free.grisoft.com/ww.faq.num-1241#faq_1241 Here is a link that might be useful: AVG8 update info
...See More
PC Pitstop's List of Free Software
Q
Comments (5)
I definitely agree on the warning on the registry cleaner, I do not use them and I highly urge people not to use them unless they are extremely knowledgeable about the registry. I used to recommend foxit but now use and prefer PDF-XCHANGE VIEWER it has not been as affected by vulnerabilities as have Adobe and foxit. As far as list sites go there is only one that I recommend and that is Gizmo's freelist site, he is extremely well known and has been doing the list for many years, his is one you can trust. Gizmo's Freeware Reviews I have been a gizmo fan for years, always got his newsletter and now that he moved to windows secrets I get the newsletter there and I do pay a donation and get the paid version it is an excellent resource. I use and have used many of the ones listed on the PC Pitstop list, and I do like and trust PC Pitstop, I also get their newsletter. I have been recommending REVO uninstaller here since it came out and several others on the list. It is always best to ask about certain freebie programs before trying them to see if anyone knows of issues, and of course always always scan them with all your security programs before opening them. Not all lists sites are reputable and trustworthy though many are the ones trying to supply us with their freebies with added features like malware and spyware, free is not always free sometimes we get more than we bargained for and are left trying to salvage the pc.
...See More
Internet Attack/Malware?
Q
Comments (16)
I'm sure I will be flamed for being too harsh, but unfortunately sometimes there is no other way. The idea that "these people should be stopped" and "there should be more regulation of the Internet" is idiocy bordering on insanity. The evildoers are so numerous and so widespread that any conventional means of reducing or eliminating their activities is not only impossible but would involve an amount of time-effort-resources which is simply unavailable and never will be. Remember THE WAR ON DRUGS? How is that workin' out for ya? THE WAR ON POVERTY? That never worked well either...still too many poor people in this world. But the amounts spent on these efforts are staggering and mostly ineffective. Aside from the fact that the evildoers want to steal your money and make your life miserable, there is this one simple truth: THEY ARE DOING THIS BECAUSE THEY CAN. Their knowledge of computers and the Internet is far beyond the level of average users, and they know that their victims really are too stupid to use a computer and will do little or nothing to protect themselves. Congrats to the OP for escaping the trap and thanks for spreading the word, but venting your frustration on FedEx is laughable and worthy of ridicule. FE is just a tool that the scammer tried to use to lure you into the trap. It could just as easily been someone else. If the next scam comes from "UPS" and the one after that comes from the "United States Postal Service" and you decide to stop using them too, who will you be shipping your next package with?
...See More
List of GMO-free Foods & allergies and genetically modified food
Q
Comments (33)
Thank you, Dr. Henry, for that paper on toxic GM-effects on goats. Corn & soybean & canola & cottonseed are genetically modified, the Republic Magazine stated that other grains are safe: "Other than corn, no GM grains are sold on the market. Look for 100-percent wheat pasta, couscous, rice, quinoa, oats, barley, sorghum, and dried beans (except soybeans). Most GM ingredients are products made from the “Big Four:” corn, soybeans, canola, and cottonseed. Sugar beets and 50% of Hawaii papaya are genetically modified." **** from Straw: That's why I buy sugar-cane products, rather than sugar made from beets. I fed my kid those Pepperidge Farm cookies (made from cottonseed oil) and she broke out in rashes and scratched herself bloody. I ate those cookies and had the worst hayfever: runny nose & sneezing. Went shopping yesterday: They had strawberries for $2.50 versus organic strawberries for $3.45. I sniffed both: the organic strawberries was more fragrant, versus the regular with a slight chemical scent. After sniffing both for several times, my nose was in pain (I stuck my nose too close). I realized that it's the pesticides sprayed on that inflamed my nose. My nose burned for hours afterwards Two years ago I tasted grape at the store, and had a tummy ache. Strawberries is known for the most pesticides I'm very sadden by UK’s Daily Mail report that an estimated 125,000 farmers in India have committed suicide because of crop failure and massive debt since planting GM seeds. Recent Center for Human Rights and Global Justice report: "Indian farmers bought genetically modified Bollgard Bt cotton seeds from the Gates Foundation-backed Monsanto corporation ... 85 percent of cotton grown in India being Monsanto-controlled Bt cotton by 2009. However, the seeds were expensive, and spiralling prices (coupled with planting restrictions from the multinationals selling the seeds) led farmers to hefty loans. Almost 300,000 cotton workers have committed suicide to date, some of them by drinking the same insecticides they were sold by multinationals." From Straw: Years ago I watched a documentary film "Seeds of deception" where Mexican agriculture scientists voiced concern with GM seeds corrupting the bio-diversity of local seeds, which are well-adapted to drought and adverse local conditions. Dr. Frank Lipman, from http://www.drfranklipman.com/basic-questions-on-gmos/ stated, "The major benefit of all commercial GMO’s is that they are bred to either tolerate direct application of herbicides and/or have the ability to produce their own pesticides. They have not been bred to increase yield, become drought tolerant, improve nutrition or to have any other benefit to the consumer. So at present they have no health benefit, their benefits are purely economic." *** From Straw: It's about power, money, and control. Politics and economic factors are factors, besides ill health. The vindictive dirt-throwing, defamation attacks against international scientists, and bullying tactics of big corporations made me more sick than the ill-effects of GM-foods. We are saved from our wheat being genetically-modified, thanks to the farmers voicing concerns that our wheat can't be exported, if genetically modified. More from Dr. Lipman: "In Europe, over 175 regions and over 4500 municipalities have declared themselves GM-free zones. And in 2009, Germany along with France, Hungary, Italy, Greece, Austria, Poland and Romania banned Monsanto’s MON 810 GM corn because of its documented dangers to biodiversity and human health. Additionally, states in Australia, regions in New Zealand and Brazil and the countries like Venezuela, Zambia, Sudan, Angola and others, all want to be GM-free.The balanced reporting of the press in Europe of the dangers of GMO’s made a significant contribution to the decision to reject GMO’s. Below link is a detailed list from Republic Magazine on which foods are GM-tainted: Here is a link that might be useful: List of GM foods vs. non-GM This post was edited by Strawberryhill on Sat, Mar 1, 14 at 15:06
...See More
grandms
13 years ago
No, eset is not one that "offers to fix for a price". If it were, no one on this forum would recommend it.
ravencajun Zone 8b TX
13 years ago
I specifically said Free online scan I wouldn't tell you to use something you would pay for.
The reason for that scan is because it does not reside on the computer therefore any infection on the computer will not be able to affect the results.

Yes I do recommend malwarebytes often the reason why is because it is one of the best available for malware detection and removal,and yes if you care about your computer security you should update and run it on a regular basis thats why we suggest that so often.

You can have no idea what an infection is doing on your computer thats why they make them to hide themselves! Stealth is exactly what they want so they can continue unnoticed.

Will you list the names of the threats found you should be able to copy and paste here.
ravencajun Zone 8b TX
13 years ago
here is another Free online virus scan see if it is more to your liking.

Here is a link that might be useful: bitdefender
jerry_nj
Original Author
13 years ago
Thanks "eset" is running right now, at about 50% point and has been running for 1.5 hours.

I am running under Internet Explorer, eset has some "problem" with Firefox? I don't recall the specifics but I think it needs IE to be able to run online. Not a problem I have IE on my computers too.

Here's the end of the Avira scan that I think is connected to the subject 8 warnings. There's a lot more in the report that seem to say okay.
----------------------
Starting to scan executable files (registry).
The registry was scanned ( '3350' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\Documents and Settings\Owner\Local Settings\Temp\(17AC6C49-9AE0-4581-AFAA-13224ED6462C)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(5821FAD0-6894-45C1-AAFB-D32B9423435D)-23.0.1271.97_23.0.1271.95_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(B8928193-F191-4B7F-B89E-6EAF7FADC16E)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(D257853B-297C-4E24-AEDF-26ED58C00808)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(D76F404B-D7AF-43F5-9F6C-6265674C830D)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(E6E69F8A-88A8-4051-994D-5A9C61E36424)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\Documents and Settings\Owner\Local Settings\Temp\(EF9FCAFC-07F2-49EE-894C-ABE0CD9FB94B)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
C:\WINDOWS\SoftwareDistribution\Download\54f4ff5bcddfaea7a9fb4fc69f0ed394\BITC.tmp
[0] Archive type: CAB (Microsoft)
--> _sfx_0000._p
[WARNING] The file could not be written!
Begin scan in 'D:\'

End of the scan: Wednesday, January 09, 2013 14:36
Used time: 2:06:15 Hour(s)

The scan has been done completely.

14848 Scanned directories
796921 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 Files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
796921 Files not concerned
12780 Archives were scanned
8 Warnings
6 Notes
792424 Objects were scanned with rootkit scan
6 Hidden objects were found
owbist
13 years ago
See what eset brings up. But if you are not satisfied I would suggest running Avira in Safe mode as 7 of those 8 items refer to Chrome, chrome would not be runing in safe mode so the files should not be protected I think.... Either that or do away with Chrome.
jerry_nj
Original Author
13 years ago
eset ran for 2 hours and 16 minutes and didn't find any problems. Malware full scan is now running.

I noticed Avira come up with problems several times while eset was running. They all had the general content:
Security Alert
C:\windows\SoftwareDistribution\....\bita2.tmp
and offering me either "details" or "Remove"
I picked remove which caused a Avira "System is being scanned" display which completed in perhaps 1 minute. "bita.3.tmp" was another problem file and I didn't note what was going on before, my guess is it was "bita1.tmp"
ravencajun Zone 8b TX
13 years ago
The concerning part is the part under rootkit scan that shows 6 hidden items.
jerry_nj
Original Author
13 years ago
I updated to Advanced System Care 6 and it "cleaned" out a bunch of "stuff/problems". It also installed a boot-start Performance Monitor which displays CPU, Disk, Memory, Network in % of usage. The CPU is stuck at 100%, this doesn't seem right to me. The other seem reasonable, RAM running at about 70% and Disk very low usage.

I recall IObit Advanced System Care has some distractors on the forum, and I have made very little use of it but given the concerns of this thread I decided to update and run a scan. I can look for the "start-up" list and remove it if the Performance Monitor or other ASC running is eating a lot of CPU resources.

I'll run a Avira scan again to see if it still posts warnings. As noted earlier, I began to hit the "Remove" on the Avira pop-up warnings, this didn't seem to help, the pop-ups continued. So, I clicked on "details" this gave me a dialog box that allowed me to quarantine the subject item.
zep516
13 years ago
"allowed me to quarantine the subject item."

What subject item are you referring to?
jerry_nj
Original Author
13 years ago
When Avira causes a pop-up warning (from the lower tool bar, RH side) to appear it gives me a choice to "remove" or "details". When I pick "remove" the dialog window drops out, a scanning progress bar comes up and completes in a minute or two.. and the warning issue seems to remain. If I click on "details" I get another dialog box that lists the item that is the subject of the warning, and when I click on it Avira offers the choice to "quarantine" which I pick. After a few of these an Avira scan shows no warnings, seems to suggest to me the "details -> quarantine" sequence eliminates the "subject" virus/malware/whatever.
zep516
13 years ago
Are you getting constant pop ups from Avira then?

Is Avira still seeing this below?

C:\Documents and Settings\Owner\Local Settings\Temp\(17AC6C49-9AE0-4581-AFAA-13224ED6462C)-23.0.1271.64_22.0.1229.94_chrome_updater.exe
[WARNING] The file could not be read!
jerry_nj
Original Author
13 years ago
The pop ups have stopped - I noted in this thread actions taken within Avira to Quarantine, this and perhaps other programs removed most problems.... Avira scan still shows one warning.

The message you highlight is no longer in the report.

The Avira report does still show some invisible reports:
1)

Starting search for hidden objects.
HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Dhcp\Parameters\(2B5F6C3E-2721-4967-A64D-004C9F1332D3)
[NOTE] The registry entry is invisible.
C:\Documents and Settings\NetworkService\Cookies
C:\Documents and Settings\NetworkService\Cookies
[NOTE] The registry entry is invisible.
C:\WINDOWS\system32\config\systemprofile\Desktop
C:\WINDOWS\system32\config\systemprofile\Desktop
[NOTE] The registry entry is invisible.
C:\WINDOWS\system32\config\systemprofile\My Documents
C:\WINDOWS\system32\config\systemprofile\My Documents
[NOTE] The registry entry is invisible.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files
[NOTE] The registry entry is invisible.
C:\Documents and Settings\NetworkService\Local Settings\History
C:\Documents and Settings\NetworkService\Local Settings\History
[NOTE] The registry entry is invisible.

-----------------
and concludes with one warning continuing:

End of the scan: Saturday, January 12, 2013 00:30
Used time: 1:52:54 Hour(s)

The scan has been done completely.

13847 Scanned directories
795456 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 Files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
795456 Files not concerned
11909 Archives were scanned
1 Warnings
6 Notes
787853 Objects were scanned with rootkit scan
6 Hidden objects were found
zep516
13 years ago
I don't see an issue or any malware related files. Avira always has the hidden objects in it's scan report .

C:\WINDOWS\system32\config\systemprofile\Desktop
C:\WINDOWS\system32\config\systemprofile\Desktop

Why are those on the desktop?

You could visit the Avira forum and see what they say.

I don't see any related Malware issue.

How is the computer running?
jerry_nj
Original Author
13 years ago
Zep, the computer is running normally (for a 5 yo notebook). I didn't notice any change in operation other than the pop ups from Avira - that has stopped following my clicking on "details" then "quarantine" for each of them. I ran other programs to remove spyware and malware but I don't know exactly which did what.

Thanks

Avira Free Event list warning for malware found

Comments (16)

ravencajun Zone 8b TX

jerry_nj
Original Author

Related Discussions

grandms

ravencajun Zone 8b TX

ravencajun Zone 8b TX

jerry_nj
Original Author

owbist

jerry_nj
Original Author

ravencajun Zone 8b TX

jerry_nj
Original Author

zep516

jerry_nj
Original Author

zep516

jerry_nj
Original Author

zep516

jerry_nj
Original Author

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Avira Free Event list warning for malware found

Comments (16)

jerry_njOriginal Author

Related Discussions

jerry_njOriginal Author

jerry_njOriginal Author

jerry_njOriginal Author

jerry_njOriginal Author

jerry_njOriginal Author

jerry_njOriginal Author

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

jerry_nj
Original Author

jerry_nj
Original Author

jerry_nj
Original Author

jerry_nj
Original Author

jerry_nj
Original Author

jerry_nj
Original Author

jerry_nj
Original Author