I have Avast 4 Home edition. I did a full system scan today (and yesterday) and I got an audible alert, and at the same time, the Av program shuts down. A pop up screen came up with option to send explanation data to the Avast administrators.
I did this, but I received a undeliverable message from the mail system admin.
Any Idea of what may be happening.
PS-
I recently had the spylocked Trojan. According to Spybot Search and destroy, this has been removed. I ran an executable AV program (Dr.Web cure-it) and it says no virus detected.
First, I have always had successful scans.(in the past) on this system
OS is win 98SE - as up to date as possible.
no other (resident) av programs
no firewall
no log entry because Avast shut down during scan
NOTE: I uninstalled and then reinstalled Avast. Ran the scan and same thing happened. I do have the log entry as follows:
Sign of “Win32:Adware-gen. [Adw]” has been found in “c:\RECYCLED\DC8.EXE” file.
Note: I emptied the recycle bin and re-ran scan with no problem.
However, this still does not explain why the program shut down when it encountered a suspected virus.
There are a lot of hits for dc8.exe in a google search, http://www.google.com/search?q=DC8.EXE, it may have been that there were other elements to this.
It may simply have caused a problem with system resources and the system crashed. This dc8.exe is seen as being associated with a trojan and for trojan hunting a more specialised application is worth a look at.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
FYI- Up to now have run spybot s&d ; a-squadfree ; cwshredder; all say I am clean, however, I still have a “spylocked” icon in the tray. I would like to run smitfraudfix as you suggested. I d/l the program to the desktop, then it installs to a folder on the desktop, but when i click on the file, it apears that a dos window opens quickly (in a split second) and dissapears. I can’t seem to run this program. Is it possible that it is not for win 98se? please advise.
I don’t know there is a restriction on the OS when running smitfraudfix, I checked on the web page link I gave you and it looks like it is win2k and winXP, so unfortunately it won’t run on win98.
I believe there may be an add remove entry for SpyLocked, check and if present try an uninstall, though I’m not that hopeful. Check out this spylocked removal tool which is supposed to work with win98 also, http://www.download.com/Free-SpyLocked-Removal-Tool/3000-8022_4-10694925.html. If no joy next step below.
HIJACKTHIS - Program & Tutorial - Also useful as a diagnostic tool - Download HiJackThis.zip HJT has now been sold to Trend Micro inc. but the 1.99.1 version should still be available here or at one of the download sites. - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
Post the contents of the hijackthis log file here.
Thanks for the response. FYI- acording to Adaware; spybot s&d;A-squared;Dr.web cure-it;and cws shredder, I am clean!! However, I still have the blinking shield icon (spylocked) in my task bar. This is a link to the SL web site. cant get rid of it.
I would like to include a HJT log but I can not get HJT to run. I keep getting the following:
runtime error 50003 - unexpected error
I am using a new up to date version.
any suggestions? ???
PS- There was a time abouit a year ago, that HJT would run on this computer. Dont know what has caused this inability to run.
Did you read one of the tutorials and follow the instructions, like not installing in a temporary location, etc. ?
I see you said you are using a new up to date version, I take it you mean the Trend Micro version 2.0 ‘beta’ version ?
If so I would suggest you download the 1.99.1 version, the link to the zip file I gave earlier.
Since my last post, SWI forums has helped me remove the complete “spylocked” infection. In as much as I am still unable to run the HJT program, I will inform you that I have just completed an AV scan with AVAST that ran to completion without shutting down.
However, I am not sure, because the shutdown problem was occuring when the AV program indicated it had encountered an infection. It may just be that there are no infections now, and the program runs to completion. In order for me to know for sure, I will have to wait until the next time AVAST encounters a infection. I it still runs to completion, then I know everything is OK.
Regarding my problem with Avast shutting down, I ran a full system scan yesterday and during the scan the program shut down. The error report screen came up indicating Avast encountered a problem and I can input what was happening at the time aqnd send the report. I did that, but I got a return “undeliverable” message.
PS: The spylocked trojan is gone completely.
I still can not produce a HJT log. ( I am currently getting advise from SWI forum on the HJT problem)
Any suggestions on why the Avast program is shutting down
You should configure the SMTP settings of avast. Program settings > SMTP.
Why not?
Please, check the folder \data\log
Are there any files called unpXXXX there (where XXXX is a random number)?
If so, send them to vlk (at) avast.com
They may contain more information about the problem (maybe a link to this thread).
Regarding HJT inability to run- acording to SWI forum, we have tried just about everything and they do not seem to be able to help me with the problem. Since my trojan detecting programs (spybot s&d;cws;a-squared;adaware) are telling me I am OK with respect to infections, I am not overly concerned with that.
Regarding SMPT settings for avast setup, I am not sure where to get the addresses from.
regarding Avast shutting down during scan (again this morning), since I was unable to send report, It is too large to post here so I will email the report to vlk@avast.com.
I’ve searched the discussion forum for about 30 minutes can can’t find any option to post. Even looked up how to post in Help which didn’t explain it.
Outlook express told me I have the “DR-1221 email phishing virus” yet I can’t find any fix and it is not even recognized by McAfee or Symantec. After downloading the free version of Avast antivirus (and I did not sit at the PC watching it download) I came back to find the same screen I saw before I started the download, no message as to whether or not it actually downloaded. Searched my directories and could find nothing called “Avast”, nothing in programs or anything and no error message that it did not download. I want to buy whatever program I can find that actually fixes this problem but am not having any luck whatsoever.
How do you post an original message?
Did it download?
How do I run it?
Thanks.
Very frustrated on day 5 of trying to resolve this.
The downloaded file should be setupproeng.exe or something like that.
You must fully, fully, uninstall McAfee and Norton before even trying to install avast or they will conflict.
Maybe the better now will be get clean by on-line scanning: Kaspersky (very good detection rates) ESET NOD32 Trendmicro housecall AVGas (does not necessary if you have AVG antispyware installed) F-Secure BitDefender (free removal of the malware) HitmanPro (new online scanner with multiply scanners)
At the top of each forum, where the list of Topics is displayed, the one where you clicked this topic is a button, New Topic. Clicking that allows you to create a new topic in that forum.