Computer Support Forum

Avast 5's Behavior Shield and Threatfire

Question: Avast 5's Behavior Shield and Threatfire

I recently went from Avast 4.8 to Avast 5 and am pleased with the new version. I note that it has a Behavior Shield and can't recall if the earlier version also had. What I would like to know is this: does the Behavior Shield make Threatfire, which I also use, redundant?

Unfortunately, although I tried to glean an answer from Avast's Help Center, I do not know enough about computers to know what the description there of the Behavior Shield amounts to: it 'monitors all activity on your computer and detects and blocks any unusual activity that might indicate the presence of malware. It does this by continuously monitoring your computer's entry points using special sensors to identify anything suspicious.'

I have XP, SP 3.

Thanks in anticipation.

Relevance 100%
Preferred Solution: Avast 5's Behavior Shield and Threatfire

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Avast 5's Behavior Shield and Threatfire

Behavior shield - monitors all activity on your computer and detects and bloxks any unusual activity that might indicate the presence of malware. It does this by continuously monitoring your computer's entry points using special sensors to identify anything suspicious.avast! 5.0 Quick User GuideThreatFire monitors your machines activity and uses an intelligent behavioral engine to alert you about malicious behavior rather than rely on signatures. - How ThreatFire WorksAs such there will be some redundancy using both but their technology is different and therefore, what is detected may vary.

2 more replies
Relevance 88.56%

Hello,

My son got into some bad stuff which led me to this forum a few months back. After some research I went with Avast Anti Virus (free version), Malware Bytes (paid version), and Comodo Firewall (free version). I have had a lot of slow behavior when surfing and doing email. The cursor is unstable and I cannot type things without a long wait. I turned of the Avast Behavior Shield and everything is a lot better. What have I lost turing off this feature? There are still several other Avast Shields running along with the Malware Bytes and Comodo.

Any suggestions? Should I try a different AV program?

Thanks,

Dave

Answer:Avast 5 Behavior Shield Slows Down XP?

hello daveplaysbass,The behaviour shield is a bit of a mystery! There's quite a few questions about it on the Avast forums and no real answers. I think the guys on there have been waiting for months for a 'promised' explanation from an Avast official. Found out a few things tho. This is a quote from an interview with a Avast official ...."The Behavior Shield that we shipped in version 5.0 is a new component that is going to be further developed moving forward. For example, in version 5.1, we will be adding more sensors that will allow for even finer-grain filtering.For now, the Behavior Shield is focused on exploits coming via typical mechanisms (browser, PDF reader, and flash vulnerabilities, for example). It also closely monitors all kernel-mode code (drivers) loaded into the operating system, and is able to detect zero-day rootkits."So whilst it's new and not operating at it's fullest potential, it still is an important part of Avast!It's not supposed to use hardly any system resources, but a few people have had problems with it conflicting with other software. One person had the problem of it conflicting with the 'Payed' version of Malwarebytes. And thats interesting because my set up is the same as yours, Avast(free), Comodo firewall(free) but i have the Free version of Malwarebytes, and i have no problems with conflicts.Its worth checking to see if there's any information in the Behaviour Shield report( at the bottom of the Behaviour shield page) in th... Read more

1 more replies
Relevance 86.92%

So basically I only installed the behavior shield from the avast installation wizard. I was thinking having Kaspersky as my main AV along with avast's behavior blocker is a good set up. However, admittingly I am a novice, and I don't know if these two will clash. So far, everything seems to be going smoothly, but the WD notification icon is displaying that X and is saying I shouldn't have more than one AV installed. Thanks.
 

Answer:Using Kaspersky free with only Avast Behavior Shield installed.

I personally think it should work ok running these 2 programs if Avast is only enabled for behavior blocking.
 

20 more replies
Relevance 86.92%

Can anyone suggest the most appropriate settings for COMODO HIPS so that it would work with Avast behavior shield in tandem?
 

Answer:Avast Behavior Shield with COMODO HIPS. Which settings should I use?

U can use safe mode in comodo hips. It should work realy nice with the behavour shield from avast. Well, i would turn off hips totaly if u use comodo firewall and avast. there is no need for hips.
 

5 more replies
Relevance 68.88%

Hi there,

I downloaded PCtools free Firewall Plus and it came with Threatfire.
I also happen to have Avast. It has now been pointed out to me that Threatfire & Avast are both Anti-Virus programs and might be interfering with one another.

Does anyone have advice/opinions on which is better? My feeling is to go with Avast but am not sure if I'm discrediting Threatfire as it may not be functioning correctly.

Appreciate any advice from someone with experience with either of these programs.
:major
 

Answer:Avast v Threatfire (PCTools)

Ok, thanks for that MT,
So do you think there is any reason why I should not run them both?
I was not sure if they are interfering with each other or if something else is happening.
:major
 

6 more replies
Relevance 68.47%

I've been using Avast and Threatfire for quite awhile now and all of a sudden I start getting this from Avast: Malware detected THMisc.dll Win32:$dBot-5340[Tri] VPS Version: 080427-0,04/27/2008
Not sure if it's an i in [tri] and I'm not sure what to do? I think Avast is wrong but, anyone know for sure??
 

More replies
Relevance 68.47%

Avast! has reported that in Avast! version 5.1.889, which has been available since mid-January, the Behaviour Shield module is now partially enabled ? this module was previously disabled. If another behaviour recognition system is already active on the same computer, this may cause programs to crash or refuse to start. On the Avast forum, users have reported problems particularly with Avast! and ThreatFire on 64-bit Windows 7 systems.
To solve the problem, Avast! has recommended uninstalling the additional behaviour recognition software (ThreatFire) or removing Avast's Behaviour Shield module by performing a custom installation.

Source
 

More replies
Relevance 67.65%

I am having a problem in my sister's laptop. She does have antivirus installed (AVG Internet Security). However, its license expired, so I downgraded it to free version. After, downgrading it, I installed Avast! as it's antivirus and decided to uninstall AVG. Then, a few minutes ago after rebooting the laptop, a window opened saying that Trojan is infecting my computer, I heal it.. Then, another pops out. Heal and heal and heal..

After doing it, I rebooted the laptop thinking that it will refresh the system. Unfortunately, after rebooting, I cannot connect to Internet now. :cry :cry :cry Help me please? I already performed the Malware removing however, it did not help the laptop. I attached the files you asked me.. Please, help please? Thank you!
 

Answer:Avast error code 10050/No internet connection/Cannot start web shield in Avast

Welcome to Major Geeks!

Please attach the below log from Malwarebytes as requested:
Code:

"C:\Users\MSI\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\"
Oct 23 2012 11802 "mbam-log-2012-10-23 (21-32-26).txt"

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista or Win 7, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=101702
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.searchcompletion.com?si=29053&bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.searchcompletion.com?si=29053&bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchcompletion.com?si=29053&home=true
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.searchcompletion.com?si=29053&bs=true&q=
R1... Read more

1 more replies
Relevance 67.65%

End webcam spying ? for good ? with Webcam Shield and Avast Premier

Essentially, with Webcam Shield you have total control over what (and who!) uses your camera. This means you can now force any app to ask your permission before it can access your webcam.

Simply put, Webcam Shield promises to:
Protect Privacy
Give you total control over your webcam
Help prevent blackmail
With webcams now embedded in so many devices, it?s never been more important to protect yourself and your family from prying eyes and those with unknown motives.

& +

Automatically fix and update over 127,000 drivers for peak PC performance
Less crashing Faster browsing Better graphics Richer audio Fewer device problems

Print, scan, import files. Play crystal clear videos and make crackle-free voice calls. Avast Driver Updater auto-scans and updates your drivers to reduce and prevent problems with:

Printers and scanners, Photo and video cameras, Headphones and speakers, Mouse and keyboards, Monitors and Wifi routers, and other external devices.

MORE : Avast Driver Updater & Scanner | For Peak PC Performance
 

Answer:Avast have new tools: Webcam Shield feature & Avast Driver Updater.

Windows has webcam shield built-in. It works great!
 

0 more replies
Relevance 64.78%

Hi,

This looks like a wonderful resource.

I have a problem where every time I use the net (iexplorer/firefox/safari) I am being redirected to strange sites, sometimes where they run a 'fake' virus scan and I have to end the program in task manager.

Also there are problems uninstalling programs i.e. after restart the computer doesn't get past loading stage no matter how long it is left (went out for 5 hours). Sometimes the computer won't boot up at all, even in safe mode, but 'last known good configuration' does always work.

Sometimes on restart the network icon at the bottom left never appears.

Note I created an empty folder in C:\sccfg.sys because there was a suspicious file in there which kept coming back after deletion.

I tried all the programs in the thread title and none can find anything. They are now all uninstalled except McAfee (and possibly a-squared but its not running). I have also 'Hijack This' installed incase.

I do have access to my Windows Vista boot disk.

I believe I have followed the instructions for this forum.

Thank You:


DDS (Ver_09-12-01.01) - NTFSx86
Run by Jonny at 20:40:22.12 on 14/12/2009
Internet Explorer: 8.0.6001.18865 BrowserJavaVersion: 1.6.0_17
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.2046.701 [GMT 0:00]

SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Wind... Read more

Answer:AdAware, A-Squared, Avast, Avira, IS360, MBytes, Threatfire, Spybot, McAfee = NO FIX

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

One or more of the identified infections is a backdoor trojan.

This type of infection allows hackers to remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Please refer to Microsoft's Online Safety article for tips on creating a strong password.

Do not change passwords or do any transactions from the infected computer until it has been cleaned.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my ins... Read more

16 more replies
Relevance 59.04%

Now I can't access this site on another computer because I get the message: Avast Web Shield has blocked access to this page because the following certificate is invalid, SS1278353 Cloudflaressl.com. I've run the Avast software, Malwarebytes, Adwarecleaner, and 360 Total security to no avail.

What's up?
 

More replies
Relevance 59.04%

Hello everyone I have a problem with my Toshiba laptop. Avast! Pro Antivirus keeps popping up from down right corner of my screen saying that Avast Web shield blocked malwarius web page or file. It's popping up literally every second and i need a solution how to stop this and remove viruses if I even have them. ( I already looked on web for solutions and everyone is saying different so i don't want to mess it all up).Edit: Topic moved from Windows 7 to AII ~ Computerxpds

Answer:Avast web shield problem, need help!

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

1 more replies
Relevance 59.04%

I really like Avast AV very much. I have a question about the Web Shield part of the program. On the program itself, generally 6 of the 7 modules are running. I do not have Outlook or MS Exchange so for that area the program says, "The Program is Waiting for a Subsystem to Start." (or something like that.)

About once a month, maybe twice a month, I will notice 5 of the 7 providers running and the program will have one of the Web Shields running. However, it will say, "The Program is Waiting for a Subsystem to Start." (instead of saying, "The Provider is currently running." The funny part is that when I go to webpages and do a check, the Web Sheld is still scanning them. So on the Web Shield thing, what is Avast waiting for?

This is a common issue with the program based on Internet Searches. I don't know if this is a bug or the way that Avast 4.8 works. Can you also provide information about the two different shields that the program uses? One is the Web Shield, the other is called the P2P Shield.

The updates are working fine. Oh, it hasn't happend often enough, but so far the only way that I can get the Web Shield back to not saying, "The Program is Waiting for a Subsystem to Start." is to do a reboot.

Jack
 

Answer:Question About Avast 4.8 AV Web Shield?

Go to control panel and uninstall avast, when you try it it will display 4 choises choose repair.
Webshield scans scripts, cookies such stuff from yout browser.
And psp shield scans files downloaded from utorrent, limewire you can see them all if you right click avast icon choose on access protection contol psp program-customize.
 

2 more replies
Relevance 58.22%
Question: Avast Behavior

Running Vista Home Premium, and a longtime Avast user. The other day I updated to the latest version of Avast, installation went fine, no issues, but here's what I'm seeing, and pardon my lack of computer lingo if my explanation isn't perfect. Whenever I go to my home page, down the bottom of my screen there's a scrolling of sorts, and it says Avast On Access Scanner Message. While the page loads this "scrolling" increases until the page finishes. It appears that it's checking the content of the page because it does disappear. If I go to a website it does the same thing. Click on any part of a webpage? Same thing. I have never encountered this with previous Avast versions, so I don't know if this is a new feature?

I'm sure it's a safety thing but it's pretty annoying. I've gone into the program and tried to find why it's doing this and the best that I can come up with it this;

Click on the blue Avast Icon in system tray.

In the list of web shield installed providers I disable, or terminate, the web shield option. This seems to stop the onscreen scrolling. Is this safe to do? I'm not 100% sure if it's best to do, but it solves my problem. Any thoughts/opinions by those more knowledgeable than me are welcome.
Thanks.

Answer:Avast Behavior

Hi Junior2007

I don't think it's safe to terminate that web shield. Start it back up, then click on the customize button > advanced button and uncheck the two entries in that window. That should fix your problem.

5 more replies
Relevance 58.22%

Thanks for your time.

I just installed Antivir and felt naked without a web shield, so I reinstalled everything in Avast! except the standard shield.

In theory, this should work, however the apps froze on startup, so I set Avast! to launch after all other applications load and they seem to like each other now.

What I'm here to ask is whether this should theoretically cause any problems.

Please don't reply with, "OMG YOU ONLY NEED ONE ANTIVIRUS" because I am only running one antivirus. My reasoning for running both apps is so that the Avast! web shield will take effect during browsing, and Avira will handle everything locally. The issue I have with using Avast! for everything is that it seems to constantly scan all my files, without letting me set it to just "scan on application read/write" which causes major slowdowns.
 

Answer:Antivir + Avast (Web Shield Only) Compatibility

Wow no one has any experience with this pairing? That's amazing.
OK thanks anyway.
 

1 more replies
Relevance 58.22%

Every time I open firefox, a window or tab I get a frightfully well spoken lady telling me a threat has been detected. I've run malwarebytes (4 PUP detected and removed) and scanned with Avast (no problems detected). Only intrusion found recently is homepage hijacked by search engine which is OutBrowse sp4 but can't find it in programs (control Panel) to remove it. Any ideas pls?

Answer:Avast Web Shield threat detected

Take a read here - there is a LINK to download AdwCleaner which should be able to remove it.
outbrowse removal guide

2 more replies
Relevance 58.22%

Greetings all! I apologize if this isn't the right place for this! I'm trying to help my boss get his computer squared away and I'm having issues with Avast Web Shield popping up constantly. As of the typing of this message, it seems to have slowed down a little bit, but I want to make sure the problem is solved and that there is not going to be any issues going forward for him!
 
I would try to do something myself, but every time I've searched anything online about this, it says that every case is different and that solutions only work in that particular situation.

Answer:Avast Web Shield Working Overtime

You have the option to turn off the Web Shield permanently according to the info in link below.
Turn Off (Disable, Pause) Avast Antivirus 2015
 

1 more replies
Relevance 58.22%

i'm having some problems with my broadband but have just notice that my avast is not running. whenever i try to start it up it says" unable to reach file system shield. shield unreachable. how can i get it going again, thanks

Answer:avast smart shield not running

an happen with a corrupt update. rmove avast with the removal tool click here and reinstall.

1 more replies
Relevance 58.22%

the behaviour shield is yet not improved....

i still see the shield is not yet fully operational on auto decide it should be able to block atleast 50% of malware beahviour atleast...

i see the behav shield records suspicious events but doesnt block them neither no alerts are displayed....why??

I saw all this in my tests...behav shield records suspicious events but doesnt display a pop-up and neither blocks it....

when avast sees something bad is suspicious is going on it should block it....what's the deal with that??
 

Answer:no improvement in avast 7 for behaviour shield.

Likely Behavior Shield uses heuristics analysis so therefore a file that's known to be malicious/suspicious will popup so for Sandbox feature too.

When its set to ask a behavior popup must shown with the option.
 

24 more replies
Relevance 58.22%

Last April, a gentle person from Europe helped someone with this same problem.  I tried to follow the advice, but find I need some help. What I've done: 1)  Run Malwarebytes software daily.2)  Uninstalled Avast and reinstalled it.3)  Installed IE 11.4)  Have trouble with downloads.  I get Current Security settings do not allow download.  I've gone into Internet Options and attempted to change all settings to allow file downloads.  I accomplished this once, but then it does not last.5)  I've run Tweaking.com, Windows Repair All-in-one. The Avast Web Shield is still popping up. Thanks for any help!Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

Answer:Avast Web Shield notifications appear constantly

Please run the following scans in the order they appear.
 
Please run Malwarebytes AntiMalware
 
Please download Malwarebytes Anti-Malware.  After clicking on the link the download will start automatically.
 
1)  Double-click on mbam-setup.exe, then click on Run to install the application, follow the prompts through the installation.
 
2)  Malwarebytes will automatically open.  If this is the first time you have run this version of Malwarbytes you will see an image like the one below.
 

 
Click on Update Now, after Malwarebytes is updated click on Scan.
 
If this isn't the first time you have run this version, then you will see an image like the one below.  Click on Scan
 

 
You will be prompted to update Malwarebytes, to do so click on Update Now.
 
 
 
3)  The scan will automatically run now.
 

 
 
4)  When the scan is complete the results will be displayed.  Click on Quarantine All, then click on Apply Actions
 

 
 
5)  To complete any actions taken you will be asked if you want to restart your computer, click on Yes
 
 
 
6)  Please post the Malwarebytes log.
 
To find your Malwarebytes log,download mbam-check.exe from here and save it to your desktop.
 
To open the log double click on mbam-check.exe on your desktop.  When the log opens, scroll down toward the bottom of the log to Quarantined Items. &... Read more

3 more replies
Relevance 58.22%

Hello!

Brand new computer (well, used, but new to me) and the same old virus problems.

The Avast Behavior Shield turns itself off every time I hit "Connect" on VZAccess manager during the last 24 hours. Avast does warn me that it's off and I click it back on manually. Says it's back on, but I have my doubts.

Particularly as when I tried to surf eBay, the website suddenly thought I lived in the Czech Republic. Yeah, I've changed my eBay password and my PayPal on a friend's clean computer already.

So here's the DDS log with the ATTACH, err, attached.

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.18377
Run by Lois at 19:58:07 on 2017-05-07
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2302.1316 [GMT -7:00]
.
AV: Avast Antivirus *Disabled/Updated* {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Avast Antivirus *Enabled/Updated* {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus *Disabled* {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\s... Read more

More replies
Relevance 58.22%

Hi everyone,

new beta version 17.5.2298 is released.

What's new:
- Tiny Firewall for blocking EternalBlue exploit - (internal) It is a part of StreamFilter, turned ON/OFF by Online Shield
- internal fixes

As many of you are aware Avast and AVG are 1 company now. Cause development of 2 different UIs takes different time, in this beta we introduce Ransomware shield in AVG beta now. You can expect Ransomware shield in Avast in next betas.

If you wanna try Ransomware protection in AVG build, check this link:
- AVG Antivirus Beta 17.5.3017

Download links:
BETA testing - Overview & Download links
 

Answer:Finally,the ransomware shield in avast

Good, but why they need a whole new tiny shield for stopping an exploit and this has to go through beta and be delivered after tests!? There are firewalls for blocking ports like the Windows Firewall and the Avast one in paid solutions. Maybe it is a sign that they need something like Norton's IPS?
 

3 more replies
Relevance 57.81%

Good day,
 
I've been getting a lot of alert from avast as per the topic title. The specifics of it are as below
 
Object: hxxp://69.65.5.105/ (Changed tt to xx in the URL for obvious reason)
Infection: URL:Mal
Process: C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
 
Avast will keep on alerting me at a very random interval. sometimes as often as once every 4-5 minutes. When I stop the FileZilla Server service, the alert will stop too. As soon as I start the service again, avast will immediately start alerting me again. One peculiar things I have noticed since avast started alerting me on this is that I cannot download any file directly from the browser (Chrome, Firefox) anymore. I started noticing this one when I wanted to download DDS. 
 
Anyway, I've got my hand on the DDS software from another PC. Unfortunately running the software gave me the following error message
 
"DDS is not meant to run in 'Compatibility Mode'. The program shall now exit."
 
Thus I'm not able to produce the logs to accompany this post. By the way, I'm using Windows 8.1 Pro (64-bit). I'm pretty sure I'm infected and any help will be much appreciated.

Answer:Avast web shield has blocked a harmful webpage

Hello and Welcome on board ,my Name is Machiavelli and I will assist you with your problem.If you booted into safe mode on your computer then print my instructions!I'm in the 'Malware Staff Team' and will provide you with advice:To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.Below are a few tips:Removing Malware is usually very difficult.We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!Please follow these instructionsIf you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!Please stay in contact with me until your problem is resolvedAs Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.Please don't run any other tools without consulting with me as this can complicate finding and removing all MalwareDon't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!Read my post completelyIf you don't do so, you may make mistakes that could result in your System crashing by your own ... Read more

4 more replies
Relevance 57.81%

Hello,
For several days AVAST keeps popping up all the time messages like this one:
 
"MAIL SHIELD SECURITY EXCLUSION
Avast has indentified a problem with this site certificate.
You can add this certificate as an exclusion, if you are sure about it.
Click the 'View' button for more details about the certificate.
If you want to change your certificates/exclusions, please open the Windows Certificate browser and perform the required operations directly from within the system certificate storage.
Legitimate public sites and mail servers should not ask you to do this.
 
SERVER
Location: smtp.stcable.net
Process: C:\Windows\SysWOW64\regsvr32.exe
CERTIFICATE STATUS
This site attempts to identify itself with invalid information.
Problems:
The certificate is not trusted."

 
I either close it or select "CANCEL" but it starts to worry me. I saw another topic with the same problem but it's closed without solution. Here's the contents of the FRST.txt report:
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by USER (administrator) on ОЛЕГ-PC (14-11-2016 19:47:08)
Running from C:\Users\USER\Desktop
Loaded Profiles: USER & UpdatusUser (Available Profiles: USER & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser:... Read more

More replies
Relevance 57.81%

Hello,
For several days AVAST keeps popping up all the time messages like this one:
 
"MAIL SHIELD SECURITY EXCLUSION
Avast has indentified a problem with this site certificate.
You can add this certificate as an exclusion, if you are sure about it.
Click the 'View' button for more details about the certificate.
If you want to change your certificates/exclusions, please open the Windows Certificate browser and perform the required operations directly from within the system certificate storage.
Legitimate public sites and mail servers should not ask you to do this.
 
SERVER
Location: smtp.stcable.net
Process: C:\Windows\SysWOW64\regsvr32.exe
CERTIFICATE STATUS
This site attempts to identify itself with invalid information.
Problems:
The certificate is not trusted."

 
I either close it or select "CANCEL" but it starts to worry me. I saw another topic with the same problem but it's closed without solution. Here's the contents of the FRST.txt report:
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
Ran by USER (administrator) on ОЛЕГ-PC (14-11-2016 19:47:08)
Running from C:\Users\USER\Desktop
Loaded Profiles: USER & UpdatusUser (Available Profiles: USER & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
Internet Explorer Version 11 (Default browser:... Read more

Answer:Avast keeps asking for Mail Shield Security Exclusions

I'm sorry for the second topic, the browser gave me internet error (or something) and I clicked refresh.

1 more replies
Relevance 57.81%

S y s t e m I n f o r m a t i o n

OS Name Microsoft Windows 7 Ultimate
Version 6.1.7600 Build 7600
System Manufacturer INTELR
System Model AWRDACPI
System Type X86-based PC
Processor Intel(R) Pentium(R) 4 CPU 2.40GHz, 2394 Mhz, 1 Core(s), 1 Logical Processor(s)
BIOS Version/Date Phoenix Technologies, LTD 6.00 PG, 27/01/2004
SMBIOS Version 2.2
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Hardware Abstraction Layer Version = "6.1.7600.16385"
Installed Physical Memory (RAM) 1.50 GB
Available Physical Memory 536 MB
Total Virtual Memory 3.00 GB
Available Virtual Memory 1.69 GB

I installed AVAST Free Antivirus Version 5.0.677

Enabled the REAL-TIME SHIELDS (which include 7 options) all listed below:

File System Shield
Mail Shield
Web Shield
P2P Shield
IM Shield
Network Shield
Behavior Shield

I'm only able to enable 6 of the 7 Shields without locking out all internet web page traffic loading.
Every time I enable the WEB SHIELD it prevents any pages loading.

My questions are why, how do I correct it & what exposure does it present not having it enabled???

Any help to resolve these issues would be really appreciated.!
 

More replies
Relevance 56.99%

I did Custom Install with File/Web Shield Only.
Next day, Chrome asked me to enable/disable Avast Online Shield.
A day after, Chrome asked me to enable/disable Safe Price.

And I read in Avast forum, Safe Zone Browser, etc gets auto-installed.

Whats the purpose of Custom Install if post install Avast any way is going to install the not installed stuffs?

Avast Behavior is like Malware...Once a reputed AV behaves like Fake AV...It has become Worst AV with sneaky, intrusive, etc... behavior.

Uninstalled the Fake AV Avast by Avast Software a.s
 

Answer:Avast Malware Like Behavior...Worst AV

Yash Khan said:





I did Custom Install with File/Web Shield Only.
Next day, Chrome asked me to enable/disable Avast Online Shield.
A day after, Chrome asked me to enable/disable Safe Price.

And I read in Avast forum, Safe Zone Browser, etc gets auto-installed.

Whats the purpose of Custom Install if post install Avast any way is going to install the not installed stuffs?

Avast Behavior is like Malware...Once a reputed AV behaves like Fake AV...It has become Worst AV with sneaky, intrusive, etc... behavior.Click to expand...

It auto updated the install, with out any input ?
If it did that is a serious concern seeing malware could utilize that avenue to trigger malicious installs. wow
 

2 more replies
Relevance 56.99%

Good Day
 
I have an Avast Premier antivirus
and recently this pop-up has been coming up frequently(actualy starting to be annoying now)
I have done a full scan and nothing seems to help.
I have attached the logs i ran with DDS
help would be apreciated,
thanx
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.17207  BrowserJavaVersion: 10.67.2
Run by user at 9:02:46 on 2014-08-08
Microsoft Windows 7 Professional   6.1.7601.1.1252.44.1033.18.1954.340 [GMT 1:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\BlueStacks\HD-LogRotatorService.exe
C:\Users\user\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe
C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explor... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello tonata I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

15 more replies
Relevance 56.99%

I'm sure you've seen these topics before...
I need some help about the constant popups avast has given me FOR EXAMPLE
 
Avast Web Shield has blocked a harmful webpage or file.Object:  htp://filesonlinehere.com/sync/?rmbs=...Infection:  URL:MalProcess:  C:\Program Files (x86)\...\chrome.exe
 

 
If there is anything I need to provide, please elaborate and I will be grateful to supply it

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

18 more replies
Relevance 56.99%

For a week, I have been getting constant alerts from Avast!, and since I updated Malwarebytes, it is also giving me alerts.
 
Avast! Alert: 
Avast! Web Shield has blocked a harmful webpage or file.
Object: http://brozblagrom-c2.com/online/526 (This changes with ever new alert popup, usualy 6 or more will show up at once)
Infection: URL:Mal
Process: C:\Windows\System32\svchost.exe
 
Malwarebytes Alert: 
Malicious Website Blocked
Domain: forteen-meters7.me
IP: 5.45.6.199
Port: 50271
Type: Outbound
Process: C:\Windows\System32\svchost.exe
 
 

DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 9.0.8112.16457  BrowserJavaVersion: 10.45.2
Run by Kistoway at 16:17:04 on 2014-06-28
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3564.1531 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microso... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/539339 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

11 more replies
Relevance 56.99%

Hello Guys,
My system:
Toshiba  / Satellite C55-A   /  Intel ® Celeron  ® N2820
64 bit Windows 8.1
I am at the end of my rope. I have tried everything. First, let me say I am not good at technical things on a computer, just enough to be dangerous. So if some things I say seem crazy, they probably are.  So here is the story. About a week ago I received a email on my go daddy webmail.  www.login.securserver.net. That is how I long into that email. Now, that is not my main email. My main email is gmail, which I use the most.
The email I received on the go daddy email was a Notice of Apperance in Court #00406341. It contained a zip file,  Court Notification 00406341.zip.   Of course being stupid, I unzipped the file, thinking it was something important, since I have some court cases ongoing for business.
With research  I think it is a Kuluoz or another one that starts with  A.  cant remember.
It put a zip file in my downloads folder  Court_Notification_00406341.doc, which shows as File Type: Java Script file, 8.84kb.  That is the only one I noticed, not sure if they are more somewhere.  Then things started getting a little weird. Nothing major, I still get emails, still send them, and my system seems to be running normally, except for Avast Mail Shield security exclusions ,  It keeps poping up at least 40 times a day, saying 
 
Now, here I used to get different info, like websit... Read more

Answer:Avast keeps giving me Mail Shield Security Exclusions

hi,
 
We will start with FRST to remove some items from the log.
 
Usually Iam only on this site once or twice per day so you may not get a reply from me until the next day.
 
Copy/paste whats below in the box into notepad. Save it as fixlist.txt in the same location you have FRST, your desktop. Click the FRST icon like before and this time click on the fix button just once. When done you will find a fixlog on your desktop. Please post the fixlog in your reply. Machine may reboot to finish the process.

HKLM\...\Run: [] => [X]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\Philip\tmp2098815588907764838.exe
C:\Users\Philip\tmp3347511962698503720.exe
C:\Users\Philip\tmp7839474401173251832.exe
2014-03-10 16:57 - 2014-03-10 16:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
SearchScopes: HKU\S-1-5-21-2793440623-1628646824-2415799637-1001 -> {21A3F5B1-BB9E-458A-815D-54E44AA350A8} URL =
CHR HKU\S-1-5-21-2793440623-16286... Read more

5 more replies
Relevance 56.99%

Q. 1.There is a Heuristic Scale and Test Whole file box in File shield.
Should I Scale up it to high (from normal) and check the "Test whole File" box, for better protection?

Q 2. There are two tabs in File Shield settings, "Scan when opening" and "Scan when Writing"
Should I tick the Scan All files in both Opening and Writing for better Protection? (It will scan all files that are being opened or written in the system but there will be negative impact that IDC)

Q. 3. Should I tick "All Packers" or go with Default packers.

Q. 4. Should I activate Avast Aggressive Hardened mode because I don't like Voodooshield as it shows its Pro Version Advertisement in every Startup which is too much annoying for me.
 

More replies
Relevance 56.99%

Hello!
 
I installed Avast recently and have the premium trial version of it at the moment. Every so often, there's a notification that pops up with "Avast! Web Shield has blocked a harmful webpage or file", and some random website. It notifies that it's running through Chrome even when I'm not currently running it (I'm mostly using Firefox). I believe my computer may be infected because I started seeing ads that appear normally where they shouldn't (with a description like ads by deall2ddeualit), and some Firefox addons that enabled these ads that were installed without me knowing about it.
Somewhat related, I allowed a scan from Avast of the computer files while it was booting up and accidentally unplugged the power which turned off the computer mid scan. When I booted it up again, I was entered into something like a temporary account where all my saved documents were pretty much gone. After another reboot, it did the same thing except now it stated that the copy of windows was not genuine. And after a third reboot, everything seemed restored. However, it feels as though start up is somewhat slow now. I'm not quite sure what happened here.
I'm not quite sure where to start, but I believe I need to provide a log? How do I go about doing that?

 

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/545315 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 56.99%

Every time I click on the Account hyperlink to access my YouTube account on YouTube Avast Network Shield blocks the attempt. This is obviously a false alarm but I don't see a option to edit it's block list or to make a exception though I see it for the Web Shield. Is there anyway to fix this or do I have to pause it each time I want to access the account page on YouTube because thats the only thing that works.
 

Answer:Avast Network Shield Blocks YouTube/Account

Outlawstar15a2 said:





Every time I click on the Account hyperlink to access my YouTube account on YouTube Avast Network Shield blocks the attempt. This is obviously a false alarm but I don't see a option to edit it's block list or to make a exception though I see it for the Web Shield. Is there anyway to fix this or do I have to pause it each time I want to access the account page on YouTube because thats the only thing that works.Click to expand...

You're not alone, see Avast forum. Avast has acknowledged the problem and an update should be available soon.
 

1 more replies
Relevance 56.99%

Hello, Thanks for being there for us.
I have a problem with my computer. After downloading a PDF file which instead of opening, suddenly disappeared and I cannot locate it. From there on whenever I open Firefox or iexplorer, Avast starts alerting me that it’s blocking a harmful website or file. Although these alerts stop when I go offline and so far the computer is running properly. Kindly assist me to fix this problem.
 
Thanks alot.
 
Taha

Answer:Avast web shield blocking harmful website whenever i go online

Hello Taha,please run a FRST scan to start with:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

9 more replies
Relevance 56.99%

Purchased avast internet security in November 2011. It's suddenly stopped working. "Fix Now" button not responding and unable to restart program as I'm being advised that the file system shield is unreachable! Any idea what's happened? Please help.
Angie.

Answer:avast internet security: file system shield

You have posted this twice - to avoid confusion:-
Please tick this thread as resolved (click the rigt hand column) and do as suggested in the other thread and reinstall avast.

1 more replies
Relevance 56.99%

Hello I'm having problems with the Avast! web shield popping up very often and have no idea what to do. Pop ups go along the line of
 
Avast Web Shield has blocked a harmful webpage or file.
  Object:  htp://filesonlinehere.com/sync/?rmbs=...
Infection:  URL:Mal
Process:  C:\Program Files (x86)\...\chrome.exe
 
I have posted the DDS log below
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 10.67.2
Run by LEOLEOLEOLEO at 1:06:42 on 2015-01-11
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8141.4816 [GMT -8:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:... Read more

Answer:Avast! Web Shield has blocked a harmful webpage or file

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first t... Read more

11 more replies
Relevance 56.99%

I get this specific error "avast! Web Shield has blocked a harmful webpage or file
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe"
 
Everytime I opened up google, I actually removed avast thinking malwarebytes would remove it, but it didn't. I did multiple threat runs on avast + malware, stuff showed up I got rid of it, yet it's still here. I don't see the error anymore only because I removed the avast, I want to get rid of it could someone help me.
 
I also get something called Nexxtcoup on my google extensions, everytime I remove it, I'll close google and then bam it's back there.

Answer:avast! Web Shield has blocked a harmful webpage or file

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkma... Read more

1 more replies
Relevance 56.99%

Working on a computer with 32-bit Vista. Windows Updates appear to be stuck - any updates are rolled back with the error of them "not being configured properly". Tried Googling and trying individual update solutions, but no luck.
 
PC had Microsoft Security Essentials installed, I removed it and installed Avast. Although Avast installs, the Web shield appears to be permanently disabled.
 
I have run Adwcleaner, Malwarebytes Anti-malware and Eset online scanner.  A few low-level threats were found and cleaned, but nothing has changed with the symptoms above.
 
Thanks for the help!
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Shari (administrator) on P2JOFFICE (21-03-2016 11:16:46)
Running from J:\
Loaded Profiles: Shari (Available Profiles: Denise Pauls & Shari)
Platform: Windows Vista ™ Home Premium (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST ... Read more

Answer:Vista not accepting updates & blocking Avast web shield

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===I need more information. Please run this tool.Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Pleas... Read more

16 more replies
Relevance 56.58%

I did Custom Install with File/Web Shield Only.
Next day, Chrome asked me to enable/disable Avast Online Shield.
A day after, Chrome asked me to enable/disable Safe Price.

And I read in Avast forum, Safe Zone Browser, etc gets auto-installed.

Whats the purpose of Custom Install if post install Avast any way is going to install the not installed stuffs?

Avast Behavior is like Malware...Once a reputed AV behaves like Fake AV...It has become Worst AV with sneaky, intrusive, etc... behavior.

Uninstalled the Fake AV Avast by Avast Software a.s
 

Answer:Avast Malware Like Behavior...Worst Antivirus

Yash Khan said:


I did Custom Install with File/Web Shield Only.
Next day, Chrome asked me to enable/disable Avast Online Shield.
A day after, Chrome asked me to enable/disable Safe Price.

And I read in Avast forum, Safe Zone Browser, etc gets auto-installed.

Whats the purpose of Custom Install if post install Avast any way is going to install the not installed stuffs?

Avast Behavior is like Malware...Once a reputed AV behaves like Fake AV...It has become Worst AV with sneaky, intrusive, etc... behavior.Click to expand...

It auto updated the install, with out any input ?
If it did that is a serious concern seeing malware could utilize that avenue to trigger malicious installs. wow
 

26 more replies
Relevance 56.58%

I keep getting messages from avast saying it is blocking a webpage or file. My task manager shows there are a lot of processes running. My computer is acting really slow now, and it started making buzzing noises, and on startup the fan is making an incredible racket as well. Malwarebytes hasn't found anything. What should I do? I saw other people post, but there were warnings not to repeat these things. 
 
Each warning has three fields, object: infection: and Process: 
usually says http;//f0fff0...... or fa8072 or maybe go.wymedia
 
infection is always url mal
 and process is generally windows syswow64/dllhost or program files....iexplores/exe

Answer:Avast popup - web shield has blocked harmful webpage or file

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

20 more replies
Relevance 56.58%

Hi, My laptop keeps getting a popup from avast stating this below Avast web shield has blocked a harmful webpage or file Object:  http://weath4us.info/qOxXS:f<GM///Infection:  URL:MalC:\users\joseph\AppData\Roaming\CrashRep\GUP.exe Joseph is the user of this laptop.  This popup come up whether I'm browsing the internet or just on my desktop in word or something similar.  I have run spybot and only thing it finds is Browser:cache for internet explorer.  I have windows 10 home on a Toshiba Satellite.  What do I need to do?  Do I have a virus on my laptop? Thanks,Joseph   Here is the log info  --------------------------------------------------------------------------- SecurityCheck by glax24 v.1.4.0.32 [01.11.15]WebSite: www.safezone.ccDateLog: 24.12.2015 00:27:43Path starting: C:\Users\Joseph\AppData\Local\Temp\SecurityCheck\SecurityCheck.exeLog directory: C:\SecurityCheck\IsAdmin: TrueUser: JosephVersionXML: 2.20is-21.12.2015___________________________________________________________________________Windows 10(6.3.10586) (x64) Core Lang: English(0409)Installation date OS: 21.12.2015 01:01:20LicenseStatus: Office 15, OfficeO365ProPlusR_Subscription1 edition Timebased activation will expire :84194 minutesLicenseStatus: Windows®, Core edition The machine is permanently activated.Boot Mode: NormalDefault Browser: C:\WINDOWS\system32\LaunchWinApp.exeSystemDrive: C: FS: [NTFS] Capacity: [... Read more

Answer:Avast Web Shield has blocked a harmful webpage or file.... am I infected

Uninstall Spybot from your machine. Then Download Security Check to your desktop, right click it run as administrator. When the program completes, the tool will automatically open a log file, please post that log here in your next post.
 
Adware Cleaner Scan.
 
Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
JRT Scan.
Please download Junkware Removal Tool and save it on your desktop.
 
Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log is saved to your desktop and will automatically open.
Please post the JRT log.
 
Adware Removal Tool Scan.
 
Download Adware removal tool to your desktop, right click the icon and select Run as Administrator.
 
 

 
Hit Ok.
 

 
Hit next m... Read more

5 more replies
Relevance 56.58%

Cleaning up my daughters computer - Dell Vostro 260 - Intel I5-2400, 4GB RAM, Windows 7 Home Premium 64bit.
 
Ran Malwarebytes, adwcleaner and CCleaner.  Installed avast free and ran boot time scan.   
 
Now receive continuing popups from avast stating:
 
avast! Web Shield has blocked a harmful webpage or file. 
Object:  hxxp://on-bend.com/b/opt/CB8F9...............
Infection:  URL:Mal  Process: c:\Windows\explorer.exe
 
Also appears that MS Update does not work and some downloads are being blocked.
 
Ran DDS as directed.  Only produced Attach.txt file (Below).  Rechecked and the DDS.txt box was checked - reran but did not produce this file.
 
Thanks in advance!!
 
********************************************
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 3/10/2012 10:44:31 AM
System Uptime: 1/7/2005 6:12:05 PM (83176 hours ago)
.
Motherboard: Dell Inc. |  | 0GDG8Y      
Processor: Intel® Core™ i5-2400 CPU @ 3.10GHz | CPU 1 | 3101/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 454 GiB total, 332.036 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Description: Photosmart C6300 series
Device ID: ROOT\IMAGE\0000
Manufacturer: HP
Name: Photosmart C6300 series
PNP Device ID: ROOT\I... Read more

Answer:avast! Web Shield has blocked a harmful webpage or file - explorer.exe

Hi there,this is malware for sure. Please run the following scans:Step 1Please download TDSSKiller and save it to your Desktop.Start tdsskiller.exe with administrator privileges.Accept the EULA and the KSN Statement.Click on Change parameters.Make sure that all available options (except "Loaded modules") are checked and click OK.Click on Start scan.If any threats are found don't delete them but choose the Skip option for all of them.Click on Report to open the log file. (It is also saved at C:\TDSSKiller.<version_date_time>_log.txt).Copy and paste its contents in your next reply.Step 2Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

11 more replies
Relevance 56.58%

I recently had to restore from a system image (full restore of C:\ drive where my program and system files are kept, no changes to D:\ so my personal files weren't reset, and probably some temp files and preferences weren't either) and after doing so, and then reinstalling avast onto this system image (the image was made at a time when I had a different antivirus) I encountered a problem with firefox which seems to be something to do with conflicts with it and avast.
Immediately after the system imaging firefox worked fine, and immediately after avast's installation avast worked fine too. The I updated both of them to the latest state, restarted and logged back on. This time when I opened avast to go to google I got a warning about a certificate on google's page being unrecognised (Unfortunately I can't remember the exact wording), But I was able to follow some of the options on the dialogue brought up by firefox and see a certificate related to avast was causing the issues. I tested by temporarily disbaling avast's web and mail shields and opening firefox again, that time it went to google.co.uk without issues. I turned the web and mail shields of avast back on and I got the same certificate problem again.
Eventually I used the "I know the risks button" in firefox and created an exception, which I think might not have been the best way to solve this. Because I still had problems loading other https pages (for exmaple the links to google plus or gmail from the google home pa... Read more

Answer:Conflicts involving avast's web/mail shield certificates and firefox

It's a known issue with avast! from my experience, take a look.https://support.mozilla.org/fr/questions/981937https://forum.avast.com/index.php?topic=161376.0http://kb.mozillazine.org/SSL_Security_Errorhttps://support.mozilla.org/fr/questions/1032509I think the instructions you are looking for are in the first link.

16 more replies
Relevance 56.58%

I have gotten an error message from Avast when downloading email.

The message says that Avast mail shield cannot scan the emails because
I have an SSL secure connection configured in the mail client, Outlook Express 6.

Both incoming and outgoing server ports have "This server requires a secure connection (SSL)" ticked ON.

I think this setting may be required for att.yahoo.com servers. :confused

Should I just disable the mail guard in Avast?

Thanks
 

Answer:Avast Mail Shield not working with AT&T account and Outlook Express

Have you read this?
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458
 

1 more replies
Relevance 56.58%

Hi there, My laptop and i are in deep trouble. 2 days ago, i was trying to download a game from the internet and it got me to this. i was opening a lot of links and pages, installing and uninstalling a lot of stuffs and right now, im in big trouble. There is an ads keep popping up on the bottom right corner of my desktop, and it keep on popping up throughout the day. at first it was a chinese game ads and then it becomes a chinese shopping ads and others. it pops up everytime i turn on my computer, and i wasnt even on the browser and it pops up. soon after that, my antivirus which is avast keep on giving this message 'Avast! Web Shield has blocked a harmful webpage or file URL: hxxttp://js.union001.com/PClick.aspx?AID=19927&KEY=CF3C8B99B339869B0A2895A79B102D884535DEAF40EC8624Infection: URL:MalProcess: C:\Program Files (x86)\t_201601210117\201601210117\lsas.exe.it is so annoying and i dont know how to fix this. I have read through some of the forum here, but still i do not understand what should i do first. would someone please help me. i do not wish to format my laptop please. im running windows 7 X64bit. im very grateful if someone could provide me steps by steps instruction so that i could catch up on what to do and im new here. thank you very much for any of your help.

Answer:'Avast! Web Shield has blocked a harmful webpage or file' with ads keep popping

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

6 more replies
Relevance 55.76%

Hello! Hope I'm in the right place!
 
Last night I was just playing RuneScape and had two safe webpages open, when suddenly my computer restarted on its own for no reason. After restarting, I logged back in and now my Avast! keeps popping up saying that it has blocked a malicious URL, even when I'm not using the internet. Here is what it says:
 
avast! Web Shield has blocked a harmful webpage or file
 
Object: (Various, I will post pictures)
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe
 
I have ran Malwarebytes, Rkill, aswMBR, and Avast, all have come up clean except Malwarebytes, I will post my logs for aswMBR and Rkill as I do not know how for Avast! and every time I try to export my log for MBAM it keeps crashing. 
 
This isn't affecting my computer's performance, other than the MBAM thing, but it is very annoying and I hope someone can help me solve this issue. 
aswMBR log: aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software
Run date: 2014-04-17 22:32:39
-----------------------------
22:32:39.365    OS Version: Windows x64 6.1.7601 Service Pack 1
22:32:39.365    Number of processors: 4 586 0x2A07
22:32:39.366    ComputerName: DAVIDSIMON-PC  UserName: David Simon
22:32:41.122    Initialize success
22:32:43.930    AVAST engine defs: 14041703
22:32:56.680    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
22:32:56.... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" coming up all the time

Hello,
 
 
I think that you have Zekos (Pigeon) on board:
 
 * C:\Windows\System32\rpcss.dll : 515,072 : 11/20/2010 11:24 PM : d8d58144e133b0d429b69671f1300cb2 [NoSig]
 +-> C:\Windows\winsxs\amd64_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.1.7601.17514_none_c7f0e16b547f887d\rpcss.dll : 512,000 : 11/20/2010 11:24 PM : 5c627d1b1138676c0a7ab2c2c190d123 [Pos Repl]

 
Your topic should be moved to the MRT area where more tools are allowed.
 
 
Regards,
Georgi

18 more replies
Relevance 55.76%

Just like what is described in these two topics (http://www.bleepingcomputer.com/forums/t/531503/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-all-the-time/ & http://www.bleepingcomputer.com/forums/t/537505/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-frequently/).
 
As in the other posts my laptop restarted itself last night and since then whenever I have been connected to the internet I keep receiving notifications from Avast saying that a threat was blocked:
 
Object:http://getmeegan.info/?e=svon&cht=2&dcu=1&cpatch=2&dcs=1&pf=1&publisher=1091&dd=4&country=AU&.....
 
Infection:URL:Mal
 
Process:C:\Windows\System32\svchost.exe
 
The notifications are all the same and come in pairs(two at a time), I have tried following this guide with no luck (http://necroneurology.hubpages.com/hub/How-to-EASILY-remove-the-svchostexe-Trojan)
 
 
If anyone has anytime to help out I would be really grateful.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17126  BrowserJavaVersion: 10.60.2
Run by k at 0:16:26 on 2014-06-25
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.64.1033.18.3986.1200 [GMT 10:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" constant notifications

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/538830 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

12 more replies
Relevance 55.76%

I have a problem similar to this post ( http://www.bleepingcomputer.com/forums/t/531503/avast-web-shield-has-blocked-a-harmful-webpage-or-file-coming-up-all-the-time/ ) and was hoping for some help.
 
2 or three days ago I started having frequent messages from Avast! about harmful pages. 
Ex. http://tinypic.com/view.php?pic=mt76m0&s=8#.U5n3YfldWSo
 
 
The gist of the message is:
 
Object: hxxp://getmeegan.info/?e=svon&publisher=1091&dd=4&country=US&ind=531952001116606
 
Infection: URL:Mal
 
Process: C:\Windows\System32\svchost.exe
 
Avast! takes me to this page when I click more details on the pop-up: http://tinypic.com/view.php?pic=epoho6&s=8#.U5n4VPldWSo
 
The messages information have been consistent, the same Object, Infection type, and Process.
 
 
My laptop has been fine except I get constant messages from Avast causing me to worry.
 
Thank you for reading this.
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17126  BrowserJavaVersion: 10.55.2
Run by Mumsie at 12:14:48 on 2014-06-12
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Launch Manager\dsiwmis.exe
C:\Program Files (x86)\Launch Manag... Read more

Answer:"Avast! Web Shield has blocked a harmful webpage or file" coming up frequently

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

2 more replies
Relevance 55.76%

Hello everyone,
 
LighthouseParty had been trying to help me with my problem and suggested that I would post here as he did everything he could to help. Here is our threat link to see what he tried - http://www.bleepingcomputer.com/forums/t/558159/computer-running-slowly-antivirus-constantly-scanning/#entry3555990
 
I have posted my DDS info below. Thanks for anyone who can help.
 
Eric
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17420
Run by mark at 16:46:36 on 2014-12-02
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6051.4343 [GMT -5:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ===============
.
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\windows\system32\WLANExt.exe
C:\windows\System32\spoolsv.exe
C:\windows\... Read more

Answer:Avast realtime shield constantly pops up infections when connected to internet

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

18 more replies
Relevance 55.35%

I have looking at my network shield in Avast! Pro. I've noticed that whenever I open save file prompt I see http://127.0.0.1.:5357/767aa349-1aa1...-01eb939773ce/ spike.
It does not indicate infection and just goes on, is this stuff normal?

Malwarebytes doesn't see anything wrong. I generally get a http://192.168.1.1:5678/igd.xml spike precedes the 127... spike

Avast boot scan also finds nothing
Typing http://127.0.0.1.:5357/767aa349-1aa1...-01eb939773ce/ into Run gets "Bad Request - Invalid Hostname

HTTP Error 400. The request hostname is invalid."
Can anyone else on Win 7 Home Premium 64-bit try this for themselves?

Open a save file prompt and look at your network shield at the same time and see if that connection or a similar connection shows up.

I don't seem to have any weird issues otherwise.

I have attached the DDS stuff

Answer:Weird spike in Avast network shield whenever opening a save file prompt

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help


Quote:




NOTE: We are aware that users sometimes seek help from several Forums at the same time. Unfortunately, this can cause confusion and actually wastes time and resources - yours, ours and other Volunteers across the community. If you have already posted at another Forum, please advise us, or them, and choose just one.




As this issue is being addressed at the Avast forums, this topic is now closed.

1 more replies
Relevance 55.35%

I've got something screwy going on with my home WinXP box, and I'm hoping someone here can point me in the direction of a solution to the problem.
I'm running XP Home, Service Pack 2, on a machine with (according to the properties tag) 960MB RAM. I've been running Avast antivirus, and allowing it to update definitions automatically. At the time this incident happened, the most recent update it had acquired was from yesterday morning.
There was a power outage at my house yesterday morning, lasting for ~2 minutes. I powered the system back on after that, and everything appeared to be working; I mention this merely for completeness of information.
The first symptom of my problem occured yesterday afternoon. I heard the little 'ding' sound made by a download finishing, during a time where I had no downloads running, and within a few minutes of this, my system seemed to grind to a halt. Anything I already had running would continue to work, but I couldn't open anything new, including the windows task manager, nor could I get new pages to load in the copy of Firefox I was running. I was planning to visit my parents' house at that point, so I powered the system down and took it with me. I had to manually power the system down (done via the on/off switch just above the power cable socket); the attempt to shut the system down fell victim to the same halt as everything else.
For the record, I may have had Spider Solitare up when I heard the ding, an... Read more

More replies
Relevance 52.48%

Fireball for ThreatFire

ThreatFire is behavior-based threat detection system from PC Tools. At least this claimed.

I paid attention on it only because of numerous bugs and incompatibilities it produces with any third party software (especially antirootkits).
And I was looking for a key to solve this. Like in case of AV products co-exists so-called Fake AV - mostly scareware, so obviously some sort of this must exists and in HIPS part.
ThreatFire is perfect example of FakeHIPS. And not only.Click to expand...

Continue reading (Recommended)
Screenshot in case the post is changed or removed: http://tinypic.com/m/e7xgna/1
 

Answer:Problems with ThreatFire - "Fireball for ThreatFire"

Yes, i saw that article (was posted on rM too). Without the info on how it should be done the post looks like a rant against all HIPS products. The author seems to disprove the fact that they need to inject their own custom monitoring DLL into all running processes which potentially may affect overall system performance and stability. Nevertheless, he also created a tool that can bypass TF's protection and disable TF completely. So all that hooking, aside from affecting system performance, seems to be inefficient in the case of ThreatFire.

He also mentions that the insability of TF determined him to start this experiment.

I used TF some time ago and in my own experience it was a bit buggy. After a long time they've released a new version (4.7.0.48) but when I installed it it proved to be incompatible with sandboxie. I reported this to sandboxie and tzuk said that it will be fixed in 3.53.01. Currently the 3.53 version of sandboxie is in beta. At that time I wasn't able to register on TF-s forum to report this problem (the registration email never got to me)

Note that a tool created especially to kill a security app has nothing to do with real malware.

On the same forum they posted a tool that can bypass PrevX self protection.
 

4 more replies
Relevance 51.25%

Hi,

I've just installed Avast! free antivirus on my Windows 7 PC. The installation installed something called the Mail Shield. Is there any point in having this turned on if I only access my emails using Yahoo's webmail service? Does it only scan mail if I use a client such as Windows Live Mail 2011?

Thanks in Advance!

Answer:Do I need the Avast Free Mail Shield if I use Yahoo Mail online

You don't need it if you are using a web based mail like yahoo. You can do a custom install of avast and untick the mail shield.

9 more replies
Relevance 46.74%

Hello i tried a couple of anti spyware and it says it cant remove Memory Shield and Bowser Home page Shield anyone know how to remove them, Thanks...
 

More replies
Relevance 43.05%
Question: ThreatFire

Is it OK to run ThreatFire and AVG8 together? Thanks.
 

Answer:ThreatFire

You should only have one AntiVirus running at a time.
Get Avast because it is a good one.
http://www.avast.com/eng/avast_4_home.html
 

3 more replies
Relevance 43.05%
Question: Threatfire

Anyone tested Threatfire recently? I know I tested it a while ago and it was notorious for bogging down PC's and not working on x64. I just went through a training class from a guy that does corporate penetration testing. After his demo, I'm a little over-protective....
 

Answer:Threatfire

I run Windows 7 and have used Threatfire quite extensively with absolutely no problems.It has a small memory footprint so you should be good to go.Don't forget to update definitiond manually every now and then even though it does so automatically. Go for it!
 

1 more replies
Relevance 43.05%

I have been using Threatfire for years , trusted it over UAC any day
http://www.wilderssecurity.com/threa...atfire.299708/

But Win10 spat the dummy at it , when doing the upgrade from WIN 7 64 bit, so had to uninstall it
I'm running a SSD and tried to re-install Threatfire , once I had Win 10 up and running .
Threatfire ,installed fine , then started the first scan , got passed the firewall, green tick , and then was checking for my AntiVirus, when windows crashed lol, and gave the error message of a page file error. I have just the Anti-virus version of ESET NOD32 and under Win 7 64 bit had no issues with Threatfire.
Restarted Win 10 np. But Threatfire was disable or incomplete, a corrupted installation

Really would like to run Threatfire, any clue how to go about it ,?

I also uninstall Window Defender after trying everything else first https://www.raymond.cc/blog/how-to-d...nder-in-vista/ as I was getting a very annoying , popups about Windows defender group policy ,that WD wont be running, every time Win 10 started.

Under my old OS WIN 7 ( two days ago) Windows defender was just disabled but I had Threatfire.

I'm now trying this out Mamutu as a threatfire alternative
http://www.majorgeeks.com/files/details/mamutu.html

Answer:ThreatFire (is the best)

Threatfire is no longer being developed and is discontinued so i doubt it will work on any new operating system.

16 more replies
Relevance 43.05%
Question: ThreatFire 3.5

Recommended by PC World, but is it any better or worse than those recommended here? Thanx
 

Answer:ThreatFire 3.5

Threatfire is not a substitute for your antivirus program. It is meant to be run along side your antivirus program.
 

5 more replies
Relevance 43.05%
Question: Threatfire

Does threatFire work as good as other virus protection? It says it is behavior based will it catch all viruses if kept updated?
Thanks Bruce
 

Answer:Threatfire

Threatfire needs to be used in addition to your antivirus program. It is not a full blown antivirus program by itself. If it were then PC Tools would not also have PC Tools Antivirus. I really cannot say how good it is first hand since I have never tested it myself. What I will say is not to believe everything you read since many companies always say how good their software is in order to sell it. Also, I have had quite a few people coming here to get malware removed who had threatfire installed. I'm not sure whether Threatfire was installed before or after the malware arrived. But one thing I did notice which can be true for a number of tools, when they don't stop the malware from getting onto your PC in the first place, they can sure as heck prevent you from removing it so easily. Many times you will have to uninstall programs like this just to remove malware. But again, I have to repeat in all fairness that I have not tested/evaluated this program myself as I have no need for it and just don't have the free time to do so. I would expect it to be pretty good since PC Tools acquired this from Cyberhawk which had good reviews. You may want to perform your own evaluation.

Some dislikes that I have heard:

many report is that it slows their PC down too much to tolerate (which may be a reason why so few people actually use it). PC Tools advertizes that it is light on system resource which seems to contradict many user's opinions; however you will have to ev... Read more

5 more replies
Relevance 43.05%
Question: threatfire ???

is" threatfire", a resorce hog,????, anybody using it like to comment please

Answer:threatfire ???

Threatfire is fairly low on resource requirements and an interesting second tier of protection if you don't trust the heuristics of your incumbent AntiVirus software. I tried it and didn't have any problems with it, but decided as I trust avast! to do the job didn't feel I really needed it so uninstalled it.

4 more replies
Relevance 43.05%
Question: Threatfire 3

So i read that this is thee software to get to block malware and get it off your cpu...anyone have other suggestions for the top adware remover and spyware remover?
 

Answer:Threatfire 3

I personaly don't believe there is one best spyware/adware blocker/remover. I use a combo of spybot, widows defender, adaware, and avg internet security. Toss in sensible browsing habits and I seldom have an issue. Threatfire 3 is not one I have ever heard of.
 

4 more replies
Relevance 43.05%
Question: ThreatFire

I've been using Threatfire in conjunction with Avast for quite a while. Seems to be a good combination. ThreatFire is behavior based where Avast is rules based. They team up well and I see no speed degradation, even on my old AMD Athlon 2000+ with 1 GB of memory.

Just got a new rig... Intel i7 920 with 6gb ram. Very fast but I was disappointed when I tried to install ThreatFire as it said it was only for 32 bit systems.

Now the good news. There is a 64 bit beta. Go to the Threatfire support forum and you'll find an entry entitled, "Threatfire doesn't support Vista 64bit?" The last page of the discussion gives a link to the beta software. I'd post it but I don't think I'm supposed to do that.

Its working very well on my W7 x64 in conjunction with Avast.

Answer:ThreatFire

Sounds very interesting, thanks i'll have to give it a try as i'm using Avast! too

9 more replies
Relevance 42.64%

for the last few days i get a pop up after boot up saying threatfire has installed latest updates, my questions are, is this real and why suddenly happening as it has always sat there quietly doing it's thing as i thought?johnny

Answer:threatfire updates?

try the sunday crew;)johnny.

6 more replies
Relevance 42.64%
Question: Threatfire warning

If you play Call Of Duty 4 or 5 And  use threatfire along with your regular anti virus you may start getting kicked from punkbuster with an error message similar to or like this........(Restriction Unknown windows Api function 131134). I did some research and found this site, http://www.punksbusted.com/forums/index.php?showtopic=61350 (look at post 6) I uninstalled threatfire and It solved my problems.

Answer:Threatfire warning

But what are you using for a firewall now?

1 more replies
Relevance 42.64%

Since it seems Threatfire slows everything down running along side MSE,, will Rising PC Doctor do just as a job without blocking my Win Updates????
 

Answer:PC doctor or Threatfire

I did not think Threatfire was being developed anymore. You may want to look at Kingsoft PC doctor. Seems to do a lot of things including scanning for malware. I was still able to download and install updates with it. I would stay away from the registry cleaner and tune up utilities.

http://www.kingsoftsecurity.com/product.shtml
 

3 more replies
Relevance 42.64%

This is technically an issue to post on Trillian's forum, and I have, but my hopes aren't very high that they can solve it, as a preliminary search did not turn up many success stories with this particular error. I'm hoping you guys can maybe help me see something I can't.

I had too many programs open the other day (shame on me) and froze up my desktop. I was able to bring up PC Tools Threatfire and kill several processes to unfreeze it. One of these processes was Trillian.exe. The other programs have all restarted up fine since then, but I continue getting an error with Trillian. The error states: "unable to read from or write to the configuration directory for this account".

After searching for this on the web and in Trillian's forum, I found the recommended solution was uninstalling Trillian, removing both the program folder and %appdata folder left behind, then reinstall. This did not work, so I did I uninstalled, removed the two folders again, removed the one instance left in my registry, scanned and removed all instances of "trillian" from my computer, ran clean up ware, registry cleanup ware, rebooted, disengaged both my firewall and Threatfire, and reinstalled once again. No dice. And the problem is now beyond me. Aside from uninstalling Threatfire and PC Tools Firewall, and trying all the above yet again, I have no clue what to do. I *need* Trillian to work because the only replacement program I know of is Pidgin, wh... Read more

Answer:Trillian/Threatfire Help

Try installing again, then use Revo Uninstaller (moderate setting) to uninstall it. There might be things left in the registry. Revo first uses the program's own uninstaller. Then it goes on to find all the registry entries, things like CLSID which you might never see.
Note: if it asks to reboot after step 3 (finished with the program's uninstaller) select No or later, otherwise the regestry will be overlooked. After Revo is finally done, then reboot.
 

2 more replies
Relevance 42.64%

Just wondering where PCTools ThreatFire belongs, on this list, or the Anti-Malware list....it seems to work well in combination with MSE, but I don't think it would be suited to be a stand-alone program.

Good lists, tw33k!

Answer:Threatfire - any good?

  
Quote: Originally Posted by noobvious


Just wondering where PCTools ThreatFire belongs, on this list, or the Anti-Malware list....it seems to work well in combination with MSE, but I don't think it would be suited to be a stand-alone program.

Good lists, tw33k!


ThreatFire should be near the top of the top 10 worst list. It detects plenty of "nasties" but doesn't want to remove them without paying for it.

For whatever reason, it reminds me of those fake AVs that detect so many viruses.

5 more replies
Relevance 42.64%

Does anyone know if this free software is compatible with Windows 7? I know it is OK for Vista

Answer:PC Tools Threatfire 4.5

W.7 not listed in download infoclick here

3 more replies
Relevance 42.64%

Threatfire is x64 compatible - just a heads up. Only annoyance is that if you want to open up the main windows it takes around 5-10sec. Otherwise, a solid addition to whatever security suite you are now using. Norton 360 isn't complaining either. Uninstalled it. Updates seem wonky.

Answer:Threatfire works in x64

I just uninstalled ThreatFire today. It slowed my computer down. Before I installed ThreatFire, Windows Media Player would open instantly. After installing ThreatFire, Windows Media Player would take 3-5 seconds to open. This on a relatively fast computer......core 2 duo with 8 gigs of ram.

2 more replies
Relevance 42.64%

Does anyone know if the new Threatfire 4 just released fixed the problem with it working with AVG Free? PC World said that PC Tools was working on an update to Threatfire 3.5 to solve the incompatibility with AVG Free.
 

More replies
Relevance 42.64%

Back then, when i wanted to use Avast, I also looked up threatfire and read something along the lines of integration with other av software.

i installed both, but that was a long time ago. over a long period, i switched to AVG Free, and now MSE.

So now, would Threatfire and MSE be compatible/a wise choice to keep in my computer??

I would do whichever benefits the computer more. (either deleting threatfire or keeping it)

Answer:AV software ThreatFire + MSE

I wouldn't run two AV's as they can conflict and combine to slow down your system.

MSE with Win7 firewall are perfectly optimized for no impact on performance. Avast is nearly as good but bothers the user while MSE disappears and becomes invisible.

6 more replies
Relevance 42.64%

Hello

When i try to uninstall my ThreatFire it says:

"Message file "C\Program Files (x86)\ThreatFire\uninss000.msg" is missing. Please correct the problem or obtain a new copy of the program.

And when i try to reinstall it i can't because it says i allready have ThreatFire on my computer.

Hope you can help me!
 

Answer:I can't uninstall ThreatFire!

http://majorgeeks.com/Revo_Uninstaller_d5706.html
We usually use Revo Uninstaller for programs like this. It works like Add Or Remove Programs, only limitation was for 32 bit programs only, no 64 bit programs are shown. The free version should do fine. You will get the same message as you uninstall ThreatFre with Revo, but just continue with the uninstall process. I use the advanced option and almost always remove all the registry entries displayed and then all program files it has found. Removed many Internet Explorer toolbars with this gem.
 

4 more replies
Relevance 42.64%

Hi

Is it wise to use Pc Tool's Threatfire with another AV, e.g. Avast or pc tools antivirus?

If not, is there any realtime freeware malware protection program to run alongside an AV?

Thanks

Uli
 

Answer:PC Tools Threatfire and AV?

Blimey, that was quick. I'd only gone to make a tea.

Thanks loads for your help.
 

1 more replies
Relevance 42.64%

Someone Told Me They Can , But The Site Says MSE Wont Work With An Antivirus.
Im Currently Using avira and threatfire. but i mite add MSE if it will work with my AV.

Answer:ThreatFire,MSE, And Avira

Microsoft Security Essentials Overview is basically a stripped-down version of OneCare aimed at users who either can?t or don't want to pay for antivirus/anti-malware software.Microsoft Security Essentials Review: Installing and Using Paul Thurrott's SuperSite for Windows: MSE Installing and UsingReview: Microsoft Security EssentialsMicrosoft Security Essentials Support - How to VideosMicrosoft Security Essentials auto-updates once every 24 hours and there is no setting within MSE to change the scheduled time or frequency. See the MSE Definitions/Signatures Update FAQ. However, you can always manually download the latest Microsoft Security Essentials updates from the Microsoft Malware Protection Center Portal.Before installation, Microsoft Security Essentials checks for a validated copy of Windows and will disable Windows Defender. You need to uninstall all other "Memory Resident" antivirus applications before you install MSE.

2 more replies
Relevance 42.64%
Question: ThreatFire Level 5

I am really pleased with Threatfire. I use it to complement Sandboxie, as a few of you already know. I always keep it at Level 5 since I do not use any other realtime protection such as Avira, Avast, AVG, Norton, Kaspersky, etc.

Threatfire at level 5 is a whole other animal than it is at level 3. Novice users might prefer level 2 or 3 when running it along side a real time AV. I like level 5 because it is not only an aggressive behavior blocker, but it acts like a software firewall as well. When Windows updates XP, I know about each little behind-the-scenes activity. It is no different when Dr. Web wants to extract scan statistics from my usage of their product; Threatfire informs me of PUP(s) and then is capable of blocking that action. I feel like anything that runs in the background will be exposed with Threatfire AV at level 5. That is the piece of mind that I pursue incessantly, yet not obsessively.
 

Answer:ThreatFire Level 5

how is it different from Paranoid mode in HIPS ???
 

more replies
Relevance 42.64%

Hi,Does anyone run the above free download ?It says its best to run it with your own Antivirus you have installed. Can anyone tell me if its worth adding to security?

Answer:ThreatFire (formerly CyberHawk)

Well should I say this, If I did not use my Win98se comp mainly as Surf Computer. I would install it on my two XP computers. I posted it on another Forum

10 more replies
Relevance 42.64%

i need to install an anti-spyware program..and what do u guys here recommend?
spybot S&D has tea-timer which provides registry protection...

Answer:spybot vs MSE vs threatfire..which one is better

This is a subject that you will never get a straight answer on, because every one has their own opinions and preferences.

Personally, I recommend MSE.

9 more replies
Relevance 42.64%

Can I use threatfire with Nod32 Smart Security? I already have Nod32 installed alongside Malwarebyte's AntiMalware and Super Antispyware. Thank you in advance.Edit: Moved topic from XP to the more appropriate forum. ~ Animal

Answer:Can I use threatfire with Nod32?

Yes. You can use it alongside with other antivirus applications. Threatfire is meant to work with other antivirus programs to protect you and enhances the protection you already have. So it's perfectly safe to use.

1 more replies
Relevance 42.64%

Looks like I'm going to be a more active member again :-D

Let's start with behavioral analysis and heuristic anti-virus/spyware programs such as ThreatFire and SanaSecurity's SafeConnect. Personally I'd like to challenge the statistics of the bar graph on ThreatFire's front page. (ThreatFire AntiVirus - Behavioral Virus and Spyware Protection)

While I have yet to use ThreatFire, I have tried out SafeConnect before and it just seems to be a 'nice to have' program to me. The only problem is that it MUST be installed on a completely updated PC before any infections ever occur. This is because the program establishes what is already in the computer as a baseline of security. Another words, everything currently on the computer at the time of SafeConnect's installation is automatically considered safe.

I want to dig in the minds of my fellow peeps and see how ThreatFire is different from SafeConnect. I'm considering it's use, but only if it doesn't suffer the same installation bug mentioned above, for use on a friends computer that I've been asked to inspect for a keylogger. I'm flying out of state tomorrow to visit a friend and I've been asked to assist a friend of hers regarding a myspace hack. Personally, I don't use myspace but I do understand the methods of password guessing. Someone was caught breaking into her myspace, but they don't know how it was done because the password was actually pretty complicated, 10+ alphanumeric characters without leading or trailing n... Read more

More replies
Relevance 42.64%
Question: Threatfire crawl

I've been told Threatfire makes a nice AV companion, but all it did was slow me down. Tried it three times and the same thing. Using Rising PC Doctor,,seems to actually speed things up!!!! How well does it really work????
 

Answer:Threatfire crawl

Moved your post to software considering you are not actively seeking help with malware removal.
 

2 more replies
Relevance 42.64%

Has anyone heard of the programs Threatfire and BOClean?
Are they useful?
Can I run them with Avast and AVG Anti-Spyware running?
Thanks!
 

Answer:Threatfire and BOClean

I use ThreatFire on several computers, and I like it a lot.
It won't interfere with regular antivirus.
 

3 more replies
Relevance 42.64%

Yesterday, on my Vista Home Premium box, my system tray items wouldn't load properly and clicking on the Start menu produces the busy circle. I started disabling startup items one by one in msconfig and it turns out after I disable Threatfire, everything proceeds to load normally and I was able to access the start menu again. Did ThreatFire do a self-update? Now I have both AVG 8 and ThreatFire, but they were behaving normally before without stepping on each other.
 

Answer:Anybody notice anything with ThreatFire?

8 more replies
Relevance 42.64%

I was just wondering what your guys thought on threatfire is. I am currently using it with eset nod32 ,but wonder if it might be conflicting since I dont have full trust in the makers of threatfire.

Answer:threatfire does it work ??

ThreatFire FAQsAs a general rule, using more than one anti-spyware program like Malwarebytes' Anti-Malware, SuperAntispyware, Spybot S&D, Ad-Aware, etc will not conflict with each other or your anti-virus if using only one of them for real time protection and others as stand-alone scanners. In fact, doing so increases your protection coverage without causing the same kind of conflicts or affecting the stability of your system that can occur when using more than one anti-virus. The overlap of protection from using different signature databases will aid in detection and removal of more threats when scanning your system for malware. However, if using all their real-time resident shields (TeaTimer, Ad-Watch, MBAM Protection Module, Spyware Terminator Shields, etc) together at the same time, there can be conflicts when each application tries to compete for resources and exclusive rights to perform an action. Additionally, competing tools may even provide redundant alerts which can be annoying and/or confusing. PC Tools are the makers of ThreatFire. Why do you not trust them?

3 more replies
Relevance 42.64%

I had a problem with Threatfire and used Control Panel Add/Remove to delete it. When I try to install a newer version of Threatfire, I get an error message that I can't install because the old version is still installed. I checked with All Programs and Threatfire is not listed. Any suggestions?Thank you.Brian W

Answer:Can't Uninstall Threatfire

The progam may have its own uninstaller. If you still have the same version available then re-install to the same folder and then view the folder for an uninstaller.If that won't work then download Ccleaner Slim from the link below and run the registry module to remove the orphan registry entries. I suggest you say yes when prompted to make a backup. Ccleaner cleaner module is a very useful utility. I use it almost daily.http://www.piriform.com/ccleaner/bu...

6 more replies
Relevance 42.64%

hi, has anyone had any trouble removing this program (threatfire), i have read some reports of it causing some trouble for some people,any advise appreciated thanks

Answer:removing threatfire ????

I've used the program of and on for a while and have never experienced problems, but it do use Revo uninstaller as opposed to windows add and remove.

5 more replies
Relevance 42.64%

HiI use Kaspersky Internet Security 2009 and was wondering if I would benifit if I was to use Threatfire? Is there are issues with compatibilty or will they be fine?Cheers

Answer:PC Tools Threatfire

click here

1 more replies
Relevance 42.64%

 I have been running ThreatFire and Zone Alarm together with my ViaVoice speech recognition program for quite some time without any problems. The other day I had an e-mail from ZoneAlarm inviting me to update. I had a good deal of trouble trying to download the update. I then found that ZoneAlarm was not working at all. I uninstalled it and did a new installation using an oldcomputer magazine disc. When I tried to use my speech recognition program ThreatFire produced several messages that a potentially malicious program was found. There are options to kill and quarantine or proceed and to remember the decision. Each of the warnings related to a ViaVoice component. Four of them accepted the instruction to proceed but the 5th caused the computer to freeze. When I shut it down using the start button about 15 programs had to be closed down by the windows task manager. None of these programs are shown as my running by the task manager in the ordinary way. I have uninstalled  ZoneAlarm but the problem persists. If I shut down ThreatFire, the speech recognition program works and the computer does not freeze. I am sending the hijack this log. Can anyone help please.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 09:44:46, on 14/08/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\serv... Read more

Answer:ThreatFire conflict.

I've moved this to the Computer Virus and Spyware Forum.Gerry7, first of all Welcome to the Forums. If sit tight, a Malware Specialist will be along shortly to help you here. However, you might consider looking here and posting the three logs.http://www.computerhope.com/forum/index.php/topic,46313.0.html

3 more replies
Relevance 42.64%

Hi Guys.I have this prog running but it slows the boot-up process to a crawl and sometimes requires a reboot.I've tried to uninstall it using the normal methods but keep getting an error message saying the uninstall file is not found.Any help much appreciated

Answer:unistalling threatfire

Try their special cleaning utility, which can be downloaded from click here. G

3 more replies
Relevance 42.64%

update servers, wont automatically update for 24 hours or so, now has the paid for anti virus scan in free version click here

Answer:new version threatfire

it's an av support tool, you need your normal av to work too, alongside.click here

2 more replies
Relevance 42.64%

Anyone had any experience with the security app. ThreatFire?

It sounds like it would be a worthwhile addition to my AV but want a little input from someone that has actually used it. Also, do you know if it's x64 compatible?

Thanks

Answer:ThreatFire Security App.

Take a look at the CNET review: http://download.cnet.com/ThreatFire-AntiVi...4-10726873.htmlWhile ThreatFire offers some compelling features, competing freeware security programs provide a more comprehensive combination of real-time and on-demand virus scanning.Long story short: it does some things very well, but lacks in other areas.

6 more replies