Got a strange message from AntiVIR

Discussion in 'Malware Help (A Specialist Will Reply)' started by jimpeel, Oct 18, 2006.

  1. jimpeel

    jimpeel Sergeant

    During the overnight scan of my PC I got a message from the Avira AntiVIR program.

    "During the scan anvirus or unwanted program was found! What should be done with the file?"

    It then listed the standard options

    It listed the file C:\WINDOWS\Digital Ear\uninstall.exe and said the file "Contains the signature of the dropper DR/Braban.L.1.

    I clicked on the message to see what they meant and when I got to their webpage I searched for "DR/Braban.L.1" and got the message "No threats were found matching your criteria!"

    Is this simply another case of unfortunate file naming like in the thread http://forums.majorgeeks.com/showthread.php?t=96978 ?

    Hell, I don't even know what Windows Digital Ear is.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi Jim, have you installed this app to convert music files http://www.digital-ear.com/digital-ear/index.asp at all?


    If so its quite possible that an updated virus data file has flagged this as a false positive, have a look in your Add/Remove listings for Digital Ear to see if its there.


    But if you wish to double check, then please run the below guide,

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    Downloading, Installing, and Running HijackThis

    Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.


    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
      • CounterSpy - ONLY IF you were not able to run Windows Defender
      • Bitdefender - from step 6
      • Panda Scan - from step 6
      • runkeys.txt - the log from GetRunKey.bat
      • newfiles.txt - the log from ShowNew.bat
      • HijackThis
    NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
     
  3. jimpeel

    jimpeel Sergeant

    Halo,

    Actually, the c:\windows\digital ear folder only has one file in it and that is the uninstall.exe file; but uninstall ... what? There is nothing anywhere else on the unit that has anything to do with "digital ear".

    I checked the site you sent me to and it is foreign to me. I have never visited it nor downloaded anything from it.

    I am simply going to delete the "c:\windows\digital ear" folder and its attendant singular file.

    Thanks for the help and I will see if the message reoccurs. If it does I will do as you instructed. I have most of the files as I have done this excercise before; but after all was said and done it found nothing.
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi Jim, thats the best option in deleting it, I would also have all files un-hidden and just have a search for any other digital ear files, then run CCLeaner and both file and registry cleaner components to mop up any junk, then do a quick set of scans again to see if that file or any other are highlighted.

    Can only summise that that folder and component was added by another application that may use Digital Ears technology... but that depends on if you have ever installed any music comversion software. Just seems a weird place for a a folder that would normally be in Program Files.
     
  5. jimpeel

    jimpeel Sergeant

    The only conversion software that I have delved into is movie conversion as I am interested in converting DivX to DVD. I don't do much in the music realm.

    I have CCleaner and will run it full blown and kill everything there is to kill. The AntiVIR program did not find anything on the overnight scan last night.

    Thanks for the help and suggestions.

    J
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds