[b]Regretably have had to uninstall Avast5,loved everything about it except that each time I’ve ran it I’ve experienced warnings that a certain Windows\system32\mbamswissarmy.sys file was a hidden rootkit rogue problem.
No Avast scans replicated this detection and neither did MSE. At present I am running Avira Antivir and as yet, no problems. Incidentally, I also run SuperAntispyware(realtime protection), and Malwarebytes(realtime protection) disabled without a hint of an infection.
I'm wondering whether the Avast warning was caused by the fact that on both occasions I uninstalled MSE and installed Avast5, I neglected to disable Windows Defender, I also think the checkbox was ticked for Defender to run in realtime. I would certainly appreciate any thoughts on this problem as I would certainly like to return to Avast5.
[b]
Many thanks for your reply Tech, have posted two or three times before with this problem, even suggesting that it [u]might[be a FP but I had been told to do many things but no suggestion that it probably was an FP.
I never intended to run Defender, I presume each time I installed MSE, it disabled Defender but when I uninstalled MSE, Defender was re-enabled and with realtime protection in addition-overkill, running with Avast5, SuperAntispyware Pro and MBAM!
Do a forum search on mbamswissarmy.sys, others have had this who, according to them, only have mbam free.
So turning off Mbam shields when you scan might not make a difference. This has also been submitted as a FP, gone away, then returned.
If you think it might be infected you could upload it here for peace of mind>>http://www.virustotal.com/
If it comes back clean, you can try adding it to both Avast! exclusion lists (main settings&file system shield)
I would like to thank Tech, YoKenny and others for advice for which I appreciate very much. However, entering mbamswissarmy.sys file into “search box”, I see that I’m not the only person who’s had this problem! Like I’ve said before, Avast would be my choice of AV program but until I can be sure that this inherent fault is fixed, I’ll have to stick with Avira. This file may well be a FP but with each warning I’m forced to uninstall/reinstall MBAM.
OS: Vista Home Premium SP2,Windows Firewall,MBAM(paid/realtime protection disabled), Avira Antivir Personal and SuperAntispyware Pro.
BobbyZee67 I have that file on my computer and Avast is not detecting it
as malware. I have been using Avast for 3 months and that file has never
been detected. Mine is located in System32/Drivers and I have the free
version of MBAM.
Bo
If you want to ditch your AV due to a single harmless FP, I suppose that is up to you.
This is a security program FP, not a system file or anything vital. As I said, its been submitted before as a false, Avast! is very quick to address fp’s from what I have seen. The fact that the detection returns and it is rare says to me some odd circumstance is involved, like updating one while the other is scanning?
I also had to uninstall IS paid V.5, as after restart I am getting "logon’ errors on logging into W XP. Also the firewall will not load. Have submitted ticket but no response as yet!
I agree with Gargamel360, upload the file to virustotal, and when it comes clean exclude it to avoid any conflicts.
Generally speaking, I always try to avoid running multiple realtime scanners that covers same areas . If my AV finds a treat, that for instans SAS, MBAM and Defender also covers, the last thing that I want is a conflict with cleaning that treat.
BobbyZee67 I don’t know for how long you will be willing to put up with that
mess called Avira10 but most likely you will uninstall it in a short time. False
positives happens and they have to happen and we,the users, just have to
learn how to handle them. Once you learn how to deal with detections it is
very easy to know the difference between malware and false positives.
I have used both Anti virus applications and Avast to this day it has not made
any erroneous detections but with Avira9 I had 12 false positives in the year
that I used it.
I never get infected and don’t depend on my AV to keep me clean but if you
do,then you are better protected by Avast than Avira because of the extra
shields you have with Avast that you don’t have with Avira.
Hope to see you back Bobby.
Bo
