Irene Posted August 22, 2007 Report Share Posted August 22, 2007 I can't believe it, I got another alert from AVG!!! :0 Does anyone know anything about this one? Why do they keep finding me? :( I tried to download the 30-day trial version of Trojan Hunter, but the silly thing said that my trial period was up as soon as I opened it!OMG.....AVG just popped up again with it. I told it to get healed this time. The previous time I told it to go the Vault.HELP, they are invading me! Here it is... Quote Link to comment Share on other sites More sharing options...
Boris Posted August 22, 2007 Report Share Posted August 22, 2007 Its probably another false positive ?Try a scan with a-squared Freehttp://download5.emsisoft.com/a2FreeSetup.exe Quote Link to comment Share on other sites More sharing options...
Irene Posted August 22, 2007 Author Report Share Posted August 22, 2007 Its probably another false positive ?Try a scan with a-squared Free Thanks Boris, but I've got a licenced copy.I'll give it a scan now. Will report back later. :( Quote Link to comment Share on other sites More sharing options...
Irene Posted August 22, 2007 Author Report Share Posted August 22, 2007 A2 found this....Email worm.Win32.warezov.omAny idea what I do now?Anyone?? Quote Link to comment Share on other sites More sharing options...
Boris Posted August 22, 2007 Report Share Posted August 22, 2007 In the same file ? Quote Link to comment Share on other sites More sharing options...
Irene Posted August 22, 2007 Author Report Share Posted August 22, 2007 THIS WAS THE REPORT FROM A2...a-squared Anti-Malware - Version 3.0Last update: 22/08/2007 18:08:47Scan settings:Objects: Memory, Traces, Cookies, C:\WINDOWS\, C:\Program FilesScan archives: OnHeuristics: OnADS Scan: OnScan start: 22/08/2007 18:43:32C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe detected: Email-Worm.Win32.Warezov.omC:\Program Files\InstallShield Installation Information\{8A9937B0-9949-4308-BCAC-CC5974DA359E}\Setup.exe detected: Email-Worm.Win32.Warezov.omScannedFiles: 65306Traces: 321139Cookies: 43Processes: 43FoundFiles: 2Traces: 0Cookies: 0Processes: 0Registry keys: 0Scan end: 22/08/2007 19:31:18Scan time: 00:47:46C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe quarantined: Email-Worm.Win32.Warezov.omC:\Program Files\InstallShield Installation Information\{8A9937B0-9949-4308-BCAC-CC5974DA359E}\Setup.exe quarantined: Email-Worm.Win32.Warezov.omquarantined:Files: 2Traces: 0Cookies: 0 Quote Link to comment Share on other sites More sharing options...
Boris Posted August 22, 2007 Report Share Posted August 22, 2007 a-squared has quarantined them whatever they are - so no further harm should arise :)Is anything now not working - as far as you can tell ? Quote Link to comment Share on other sites More sharing options...
Irene Posted August 23, 2007 Author Report Share Posted August 23, 2007 All seems to be OK. When things are quarantined in either A2 or AVG, is it then necessary to delete them?I have a very small amount in each.Many thanks for the help Boris. Quote Link to comment Share on other sites More sharing options...
andsome Posted August 23, 2007 Report Share Posted August 23, 2007 All seems to be OK. When things are quarantined in either A2 or AVG, is it then necessary to delete them?I have a very small amount in each.Many thanks for the help Boris. If everything runs OK for a day or two delete them. :D Quote Link to comment Share on other sites More sharing options...
nellie2 Posted August 27, 2007 Report Share Posted August 27, 2007 Hello Irene, I've been offline for a few days.......... is everything ok now? Quote Link to comment Share on other sites More sharing options...
Irene Posted August 27, 2007 Author Report Share Posted August 27, 2007 Hello Irene, I've been offline for a few days.......... is everything ok now?I think so, thanks. It was, I think, another AVG issue. Finally, after the "Priority" Update, the scan didn't find it anymore.Either that, or they updated the definitions to handle it. :) Quote Link to comment Share on other sites More sharing options...
rong Posted August 27, 2007 Report Share Posted August 27, 2007 You seem to be having rather a lot of these little things going wrong lately, maybe you should look at your security or where you are going on the internet. Not an expert on these things but the other place I would look is in your firewall to see that you haven't given something permission to get through that shouldn't. Quote Link to comment Share on other sites More sharing options...
Irene Posted August 27, 2007 Author Report Share Posted August 27, 2007 You seem to be having rather a lot of these little things going wrong lately, maybe you should look at your security or where you are going on the internet. Not an expert on these things but the other place I would look is in your firewall to see that you haven't given something permission to get through that shouldn't. You are quite right!I thought the same myself. :( I believe I am very careful, but who knows, maybe we all think we are. My Firewall is Zone Alarm Free. I am very mindful of allowing access, but sometimes it is difficult to determine what should or should not be allowed when the 'alert' comes up.I always look what the website says about anything which I consider suspect. Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted August 28, 2007 Report Share Posted August 28, 2007 There is also a lot of spam recently that tries to trick the recipient into clicking the link in the message body. It started with "greeting cards" a few weeks ago, but it tends to morph into other ways of trying to trick recipients. The latest fad are fake YouTube links that lead to sites that have deliberately been set up to infect the curious visitor.Don't click on any links in unexpected or suspicious email messages! I know that I don't need to tell this to most regulars in this forum, but it's still worth repeating it from time to time.[edited wording.] Quote Link to comment Share on other sites More sharing options...
-pops- Posted August 28, 2007 Report Share Posted August 28, 2007 The latest fad are fake YouTube links that lead to sites that have deliberately been set up to infect the curious visitor.I NEVER click on ANY You-Tube links whatever the source. All the You-Tube items I've seen on other people's machines or on TV are rubbish both in content and quality and I would not waste my time on them.This may sound like the mutterings of an old misery, perhaps I am but, that's how it is.Regarding firewalls, Irene, I've use Sygate for almost as long as I can remember after giving up with an over intrusive Zone Alarm http://www.tucows.com/preview/213160 Quote Link to comment Share on other sites More sharing options...
Irene Posted August 28, 2007 Author Report Share Posted August 28, 2007 Regarding firewalls, Irene, I've use Sygate for almost as long as I can remember after giving up with an over intrusive Zone Alarm http://www.tucows.com/preview/213160Thanks pops. I'll check it out later... I not at home at present. Quote Link to comment Share on other sites More sharing options...
-pops- Posted August 28, 2007 Report Share Posted August 28, 2007 Sorry about the "re-opened" thing. I messed up when deleting a post to the thread. Quote Link to comment Share on other sites More sharing options...
Irene Posted August 28, 2007 Author Report Share Posted August 28, 2007 Ok pops, I'm back home again now. :) I have downloaded the file ready for installation. What would be your recommended action procedure for replacing ZoneAlarm? Quote Link to comment Share on other sites More sharing options...
Scarecrow Man Posted August 28, 2007 Report Share Posted August 28, 2007 Comodo is quite good I hear. I, like pops, use Sygate.http://www.oldversion.com/program.php?n=sygate Quote Link to comment Share on other sites More sharing options...
-pops- Posted August 28, 2007 Report Share Posted August 28, 2007 I would download the new program to a convenient place (My Documents?), disconnect from the Internet, remove ZA by whatever means you remove it and install you new one. There will be some procedures to go through, obviously before it gets going again but these are quite straightforward. Quote Link to comment Share on other sites More sharing options...
Irene Posted August 28, 2007 Author Report Share Posted August 28, 2007 I would download the new program to a convenient place (My Documents?), disconnect from the Internet, remove ZA by whatever means you remove it and install you new one. There will be some procedures to go through, obviously before it gets going again but these are quite straightforward. That's what I had in mind, but It's good to have it confirmed. Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted August 29, 2007 Report Share Posted August 29, 2007 If you plan to permanently uninstall ZoneAlarm, be sure to perform a CLEAN uninstall; see http://www.nohold.net/noHoldCust25/Prod_1/...an_install.html Quote Link to comment Share on other sites More sharing options...
Irene Posted August 29, 2007 Author Report Share Posted August 29, 2007 If you plan to permanently uninstall ZoneAlarm, be sure to perform a CLEAN uninstall; see http://www.nohold.net/noHoldCust25/Prod_1/...an_install.html Thanks Pat. I didn't see your post until after Uninstalling. However, I did check for the residual files suggested in the link - only the first one existed, so I deleted it.Sygate is now installed. (pops, I was surprised to see that it was Symantic, knowing your usual feeling about them ). Still, if both you and Scarecrow Man are happy to use it, then it's fine by me. :D I am now considering each application as it tries to make access through the firewall.It concerns me when I don't know what the process is. e.g. SSDP - Simple Service Discovery Protocol using remote port 1900. I just looked it up in Wikipedia, but I am still not convinced that it should have access. Quote Link to comment Share on other sites More sharing options...
andsome Posted August 29, 2007 Report Share Posted August 29, 2007 Just a hint for others. I find it best to have a separate folder for downloads, and have named it 'My Downloads'. No chance then of deleting them from My Documents folder. Quote Link to comment Share on other sites More sharing options...
Irene Posted August 29, 2007 Author Report Share Posted August 29, 2007 Just a hint for others. I find it best to have a separate folder for downloads, and have named it 'My Downloads'. No chance then of deleting them from My Documents folder.I took up your advice some time ago...My file is called 'Installations'. :D Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.