Eliza

Members
  • Content Count

    4
  • Joined

  • Last visited

Community Reputation

0 Neutral

About Eliza

  • Rank
    Newbie
  1. Hello Cecilia, Here we go. I proceeded as planned. Restored both files, and removed any and all installed antivirus from my computer except for Panda. The ostensible Avira resisted. As before, it said that the process was complete, but this lasted only minutes; just like before, the programme returned in my programme list, every time with yesterdays date as the install date. Then performed all three online scans. The Eset online scan removed 7 threats, the others came back clean. Swiped the system with CCCleaner and then tried removing the ostensible Avira. This seems to have worked this time. Very weird, but so far, so good. Restarted as requested by any and all programmes. Then installed AdAware in compatible mode to Panda. No other programmes installed any more, and remember, the real and the fake Avira seem to both be gone. Guess what, AdAware still picked up those two viruses that look to be Avira quarantined files! How weird. Any ideas? Thanks! Eliza
  2. Thanks Cecilia, Your idea of using online scanners is brilliant. I guess I was stuck in an old mode ;-) so that makes this exercise useful, if annoying. Unfortunately, I don't remember exactly how it happened that I thought I was downloading an update. I'm usually extremely careful, checking that I get stuff from the originators websites. Again, comparing the two versions I suddenly had, made me suspect, because the new one was so much bigger than the old one. Now this is my plan: 1 release the two viruses from AdAwares quarantine, 2 then try to uninstall everything but Panda 3 and then run the three scans you proposed. 4 reinstall AdAware and run it and if the suspect Avira is still not gone 5 try FRST again... I'll report back. Eliza
  3. Hi, thanks. Looking at path to the Java Exploiters in AdAware's quarantine, I think that indeed, it may have picked up something Avira had previously found, from Aviras quarantine. That would be a false positive, no? The reason I still think what I installed was no good is also what happened when I tried to uninstall. When I uninstalled the previous Avira version from the Windows Programs menu. It showed a proper Uninstall shield etc, and then I was redirected to Avira's website for a "Sorry to see you go". The fake one (imo) produces a dialogue box when clicked on from Windows Programs, asking "are you sure", and when I press Uninstall, nothing happens, it just keeps running. No redirect. Did you mean I should try to actually restore the viruses from the update, if possible? As for running too many anti-virus programs, I get what you're saying, and thanks for explaining why it's not a good idea. On the other hand, it's my experience that they all have their strengths and find different threats. So periodically I sweep my system with all of them. Thanks
  4. Hi, I downloaded and installed an ostensible Avira update July 3; AdAware picked it up as containing viruses when I ran my next system scan. It is indeed bigger than the previous version of Avira, which was left untouched by the way, and I cannot uninstall. Everything is slow and I don't know if this is a coincidence, but I am experiencing Flash problems. After the first run and disinfection, I ran AdAware again, it came up clean. However, the ostensible Avira is still there, resisting uninstall. Then wanted to run FRST as per instructions. No matter how I switch all of the services of my Panda antivirus OFF, when I double click I first get a msg that I have no authorisation to run the program, and then Panda picks FRST up as a virus and removes it. Pop, off my desktop. Oddly enough, when I tried the 32 bit version as an experiment, it responded normally (with a run shield asking my permission to make changes to the system) and then went on to say that it was not the correct version of FRST for my system. No mention of viruses or anything with the 32 bit version. Because of this ostensible-Avira-infection, I downloaded Avast and also ran MBAM for good measure. These were switched off too when I double clicked FRST. What to do? Eliza