Avira finds trojan in app hosted here at MG!

Discussion in 'Software' started by dlb, Mar 23, 2010.

  1. dlb

    dlb MajorGeek

    I'm sure this is not a huge deal judging from the name and nature of the program being flagged by Avira's AntiVir. I installed the newest release that came out yesterday (version 10 of the free edition) and decided to try out the "nag screen" disabling program NoNotifyAvira which was also on yesterday's front page. Well, it was blocked and removed before the download even had a chance to finish. LOL Actually, it was a fairly impressive response from AntiVir that it killed it so fast, but I also found it humorous that AntiVir zapped an app designed to zap the AntiVir nag screen. roflmao Just an observation . . . nothing to get all freaked out about since I know the mods/owners here at MG do an OUTSTANDING job in thoroughly checking all apps hosted here.

    [dlb]
    :-D
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    At a wild guess as its job is to stop the splash screen of Avira from popping up then Avira itself sees this as a change to its applications process, so flags as malware, can put this down to a false positive or sorts, but guess you knew that already.
     
  3. davec80

    davec80 Private E-2

    Hey, I'm running the free version of avira 9 on two computers. One is an AMD dual core laptop, the other is an AMD quad core desktop.

    I found the nonotifyavira program on 3/22 and installed it on the laptop. I got no warnings about trojans or anything from avira, which still (as I'm typing this) reports:
    Virus definition file: V7.10.05.162, 3/22/2010
    And on the laptop on 3/23/2010, about 2000 Eastern (US), I used avira to scan the nonotifyavira program that I downloaded from MG. No problem found.

    On the desktop today (3/23)...shortly after avira finished downloading updates (3/23 virus definition updates), I downloaded nonotifyavira from MG again. This time, avira is complaining about a trojan in nonotifyavira.

    Think about it folks. This nonotifyavira program is NOT a virus or trojan or malware, and it's NOT a "false positive".

    According to various google hits, it appears that nonotifyavira was released on 3/22. A 3/23 virus definition update from avira flags nonotifyavira as a trojan. I don't believe in coincidences.

    I believe some coder at avira is pretty pissed.
     
  4. dlb

    dlb MajorGeek

    LOL Yup.
    roflmao Double "Yup".

    I've been using these directions for years to disable the Avira 'nag screens', but I saw that there was an app for it, and figured I'd give it a go....
     
  5. davec80

    davec80 Private E-2

    3/28 update:

    As I posted before,
    nonotifyavira released 3/22
    3/23 Virus definition update from avira flags nonotifyavira as a trojan

    Now for the rest of the story...
    If you search the virus descriptions at
    http://www.avira.com/en/threats/index.html
    you will find NOTHING for TR/Virtool.38400, which is the specific trojan name for which avira flags nonotifyavira

    So, it seems Avira identifies nonotifyavira as a trojan, and yet Avira doesn't want to say why they identify it as a trojan. I wonder why?

    roflmao
     
  6. Buck_nekid

    Buck_nekid Specialist

    One note on anyone using those directions. Avira has changed it's install location to:
    Code:
    C:\Program Files\Avira\AntiVir Desktop
    so when using those directions make the adjustment.
     
  7. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Avira also started flagging something in my HP software as a trojan, since yesterday. I searched and discovered it as a false positive but all the popups were annoying. I have it set for now to ignore rather than always ignore because I want to see if it will be fixed on Monday as they promised.
     
  8. Buck_nekid

    Buck_nekid Specialist

    New question on this program. On my XP box I just do it the old fashioned way. On a new fresh install of Win 7 I ran this little app. OK it did stop the splash screen when I boot and it did stop the nag screen but replaced it with a windows error. Now every time I update Avira it gives me a "out of memory error" I've tried contacting the author to see what this actually does but if you goto his page it's in Italian with bad translated English. Has anyone else tried this and gotten this error. Uninstall and re-install of Avira didn't fix it.
     
  9. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Sorry, I haven't used that program; I hacked the registry to disable the huge advertisement. (I'm running 2K and XP). I don't have 7 installed so I can't have a look to tell you what to do.
     
  10. collinsl

    collinsl MajorGeek

    All you need to do to disable the nag screen is to find "avnotify.exe" and set it's security settings to "deny" everything for "system".
     
  11. Buck_nekid

    Buck_nekid Specialist

    Yes, as I said I normally do it the old fashioned way. I gave this program a try 'just to see' on a fresh win 7 install. I never heard back from the developer but I don't recommend this app. As for the problem I had with the out of memory error. I again uninstalled Avira, ran the Avira registry clean tool then reinstalled. It is back to normal now.
     
  12. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    A bit more information. You will not see a security tab in XP Home, this has to be done in safe mode or using a hack to get the security tab to appear in normal mode on XP Home.
    I'm also unfamiliar about Win 7 and a security tab. Do all versions have the tab or do some versions also require you to do this from safe mode?
     
  13. Buck_nekid

    Buck_nekid Specialist

    You do Win 7 the same way you do XP Pro:

    Start > Control Panel
    Administrative tools > Local security policy
    Click on Software Restriction Policy > Action > create new restriction policies
    Right-click additional rules > new path rule
    Click Browse and navigate to C:\Program Files\Avira\AntiVir Desktop and double-click avnotify.exe
    Set the security level to Disallowed > apply > ok
     
  14. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    Thanks. I will add the info to my notes.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds