system
March 30, 2011, 6:11pm
1
Hello
I am using Avast version 6.0.1000 with virus updates version 110330-1.
When I try to oven Divx player, or a file which executes the player, I get a message telling me it is a potentially dangerous file and to open it with the sandbox. When I follow the instructions and do so, my PC hangs and my desktop disappears. I then have to reboot.
I can open Divx player and associated files when Avast is disabled. I can also open divx files with WMP, Realplayer etc.
I tried to unistall Divx but Avast stopped me part way through the uninstall procedure and again told me to open the file in the sandbox. I disabled Avast, uninstalled Divx, then reinstalled it and started up Avast again. Same problem.
I have run a full Avast scan and a Malwarebytes scan, both of which came up clean. There are a few posts on other forums but no solution.
I suspect this is a FP ? Or is there something more sinister going on ?
Thanks in advance
Craig
What happens when you use the drop down and select run normally ?
system
March 31, 2011, 7:54pm
3
My PC hangs and I have to reboot. I cant even open task manager. >:(
Craig
Where did you get the copy of divx ?
And what are your system specifications ie. xp
system
April 1, 2011, 6:17am
5
I got divx from the official website at divx.com . I am running Xp service pack 3. I ran another Avast scan and Malwarebytes last night and they were both clean. I’ll post a Hijackthis ! Log tonight.
Thanks.
system
April 1, 2011, 4:08pm
6
Hijack This log (part 1)
Scan saved at 17:01:27, on 01/04/2011
Running processes:http://www.orangehome.co.uk/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://www.ntlworld.com/ - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
system
April 1, 2011, 4:09pm
7
Part 2
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll@xpsp3res.dll ,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exehttp://surechat.com:9000/Java/cfs31229.cab http://chat-a3.freeserve.com/Java/cfs31245.cab http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab http://www.lizardtech.com/download/files/win/djvuplugin/en_US/DjVuControl_en_US.cab http://go.microsoft.com/fwlink/?linkid=39204 http://lads.myspace.com/upload/MySpaceUploader1006.cab http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1233604079937 http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab http://www.facebook.com/controls/contactx.dll http://www.pandasoftware.com/activescan/as5/asinst.cab https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab http://imlive.com/ChatSource/gVideoContol.cab http://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install3.5/installer.exe http://download.abacast.com/download/files/abasetup144.cab http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/1,5,0,4339/mcfscan.cab
And you say it runs normally with Avast disabled ?
OK could you run a little trial
Disable all shields bar one - doesn’t matter which
system
April 1, 2011, 5:02pm
9
And you say it runs normally with Avast disabled ?
OK could you run a little trial
Disable all shields bar one - doesn’t matter which
I will give that a try. Out of interest, I’ve just run Combofix and it came up clean.
Thanks
I don’t feel it is a malware problem - or you would definitely notice some other symptoms
system
April 2, 2011, 7:45am
11
Me neither, but I’m suprised nobody else has noticed the same problem, given that divx files area common file type. I’ve looked through some old posts and there have been problems in the past with divx, usually linked to the Yahoo toolbar exe file that comes packaged with divx.
Have you uninstalled the toolbar ?
system
April 2, 2011, 11:37am
13
Hi Essexboy
I disabled all the shields and tried them activated one by as you suggested.
The only one when active on its own that brought up the sandbox dialogue was the File System Shield. Divx will open with all the other shields activated, apart from this one.
By the way, I’ve a lot of family in Clacton and Frinton On Sea and my grandfather came from Little Cornard, and then Thorpe le Soken. Anywhere near your neck of the woods ?
Hope this helps
Craig (from Lancs)
OK well file shield is the most important one - did you stop behaviour shield and still have the problem ?
Clacton was the venue in my youth for the mods and rockers (I never had any dress sense so I was a rocker ) being from Romford it was only an hour by train to get there ;D
But I now reside in Cornwall much more quiet and sedate ;D
system
April 3, 2011, 7:15am
15
OK well file shield is the most important one - did you stop behaviour shield and still have the problem ?
Clacton was the venue in my youth for the mods and rockers (I never had any dress sense so I was a rocker ) being from Romford it was only an hour by train to get there ;D
But I now reside in Cornwall much more quiet and sedate ;D
I can open divx player with the behaviour shield on. The only one that seems to make a difference is the file system shield - on, and I cant open divx off, off and I can. None of the other shields make any difference.
Craig
OK next solution will be to add divx to the exclusion zone within autosandbox
Open Avast and select Autosandbox > settings
Then retry
system
April 5, 2011, 6:42pm
17
Strangely enough, that was the first thing I tried before coming on the forum. It didn’t work to be honest.
Any other ideas ?
Cheers
Craig
OK time for a rethunk I think
system
April 7, 2011, 6:51pm
19
I agree. I’m seriously thinking of dithching Avast, beacuse it’s now messing around with Firefox files as well. Nobody seems to have the answer, its obviously a conflict / FP issue.
Thanks for you help so far Essexboy.
Regards
Craig
A thought I see you have ZA forcefield - could you disable that and see if the problem persists