IPB

Welcome Guest ( Log In | Register )

2 Pages V  < 1 2  
Reply to this topicStart new topic
> Can't Download New Version Of Adaware At All, Download either disappears or is flagged as a Trojan
243r
post Aug 10 2007, 07:02 PM
Post #21


Newbie
*

Group: Members
Posts: 3
Joined: 10-August 07
Member No.: 35,007



I got the same problem when AVG scanned earlier today and when I quit AVG, it deleted my saved copy of aaw2007.exe. Then I checked AVG for update and there was a new update available. I updated AVG; downloaded another copy of aaw2007.exe; and scanned with the updated AVG. AVG no longer found a problem with aaw2007.exe. Problem apparently solved.
Go to the top of the page
 
+Quote Post
LS CalamityJane
post Aug 10 2007, 09:03 PM
Post #22


Lavasoft Staff
Group Icon

Group: Administrators
Posts: 8,748
Joined: 19-April 06
From: Central Florida, USA
Member No.: 65



QUOTE(243r @ Aug 10 2007, 02:02 PM) *
I updated AVG; downloaded another copy of aaw2007.exe; and scanned with the updated AVG. AVG no longer found a problem with aaw2007.exe. Problem apparently solved.

Thanks 243r for verifying smile.gif


--------------------
Please do NOT send Private Messages to Staff or helpers to request assistance! We do not give a personal support via PM The way to request help is to post a NEW TOPIC in the appropriate forum.

Look for the *New Topic* Button near the top right when viewing the forums.

Here in the forums, replies are posted to topics only. Thank you for your understanding and cooperation!
Plus and Pro Ad-Aware users (only) may use the Support Center for personal assistance:
Support Center


Microsoft MVP/Windows - Security 2003-2009
Go to the top of the page
 
+Quote Post
nobodyz
post Aug 10 2007, 10:06 PM
Post #23


Newbie
*

Group: Members
Posts: 2
Joined: 4-May 06
Member No.: 1,240



QUOTE(LS CalamityJane @ Aug 10 2007, 12:03 PM) *
Thanks 243r for verifying smile.gif


Additional verification and new information:
I, too, got the AVG update and when re-scanning the same files aaw2007.exe
AVG finally stopped calling it Trojan horse Downloader.Generic5.PIO.

However, when I went to the AVG vault to "restore files" it had kidnapped
(meaning aaw2007.exe) while it "restored" copies, I guess, of the file, it
still kept a copy inside the virus vault, identified as Trojan horse Downloader.Generic5.PIO.

So while I am grateful to have the aaw2007.exe file accessible again, I don't know
why AVG still has the need to have a copy of it in the vault labelled as a Trojan
horse.

Repeat: The restore file function WORKED. The aaw2007.exe is no longer being
removed by AVG. I have written them as a customer complaining since this
is AVG's 3rd false positive in as many months. Thanks.
Go to the top of the page
 
+Quote Post
LS CalamityJane
post Aug 10 2007, 10:44 PM
Post #24


Lavasoft Staff
Group Icon

Group: Administrators
Posts: 8,748
Joined: 19-April 06
From: Central Florida, USA
Member No.: 65



Hi nobodyz,

Thank you for the confirmation and additional info.

I'm glad you reported it to them, as I know they will appreciate the feedback and will probably try to do something about the number of false postives.

I have to say in AVG's defense that:

1. False postives (or false detections) can and do happen in any security program. The sheer volumes of new malware coming out daily is huge and therefore there are more mistakes can be made. Most security product companies have a method for you to report (or investigate) suspect false detections.

2. They did respond quite promptly to our report and for that we are grateful. I used the same method to report a false postive as they have posted here in their forums:
YOU SUSPECT A FILE TO BE A FALSE POSITIVE
http://forum.grisoft.cz/freeforum/read.php...0,backpage=,sv=

Anyone can submit a suspect file and I would encourage anyone who has a detection by any program (including ours) that belongs to another program that you know you have had for a while and that you trust to check it out first by submitting it to the company for analysis.

That way they can examine the file and determine if this is, indeed, a false detection, they can then fix it ASAP.

I can assure you that NO security company likes having false positives and we all want them corrected as soon as possible so the users reporting these really helps us all.

Likewise, should our program, Ad-Aware ever detect a file that you think might be a false detection, we encourage you to report it to OUR research team here:
False Positives
http://www.lavasoftsupport.com/index.php?showforum=93


--------------------
Please do NOT send Private Messages to Staff or helpers to request assistance! We do not give a personal support via PM The way to request help is to post a NEW TOPIC in the appropriate forum.

Look for the *New Topic* Button near the top right when viewing the forums.

Here in the forums, replies are posted to topics only. Thank you for your understanding and cooperation!
Plus and Pro Ad-Aware users (only) may use the Support Center for personal assistance:
Support Center


Microsoft MVP/Windows - Security 2003-2009
Go to the top of the page
 
+Quote Post
cat.1956
post Aug 10 2007, 11:28 PM
Post #25


Newbie
*

Group: Members
Posts: 2
Joined: 9-August 07
Member No.: 34,892



ok, please don't be impatient with me, I do understand that this is a false positive but I don't understand what it is doing - I have pasted the series of actions appearing in the virus vault. The first instance of aaw2007.exe had already been installed and I had not yet removed the download. The third is the same file that I downloaded again as an experiment to assess the validity of the alert. Why does the fourth instance appear from system volume information instead of documents and settings.

Trojan horse Downloader.Generic5.PIO

c:\documents and settings \cat\desktop\aaw2007.exe
c:\documents and settings \cat\local settings\temp\9ff198uf.exe
c:\documents and settings \cat\desktop\aaw2007.exe
c:\System Volume information\_restore{6D1D403B-E5C7-4E7B-A455-4190EE90FBE2}\RP14\A0002688.exe

This is all so confusing to me- if someone would please be so kind as to explain how to interpret this information, I would be so very grateful.

Thank you for your kind consideration
Go to the top of the page
 
+Quote Post
Pierre67
post Aug 11 2007, 07:37 AM
Post #26


Valued Member and Beta Tester
***

Group: Valued Member
Posts: 911
Joined: 6-June 07
From: Umina Beach, NSW, Australia
Member No.: 28,321



If you running AVG as your antivirus ensure it is up to date. Their previous update caused the false positive problem.

A lot of persons had the same problem.


--------------------
sincere regards, Peter.


IF IT AIN'T BROKE - DON'T FIX IT!!!
Go to the top of the page
 
+Quote Post
spike-nz
post Aug 12 2007, 02:32 AM
Post #27


Advanced Member
***

Group: Volunteer Security Advisor
Posts: 3,059
Joined: 18-June 06
From: Auckland, New Zealand
Member No.: 4,454



Hi cat.1956,
QUOTE
Why does the fourth instance appear from system volume information instead of documents and settings.
...c:\System Volume information\_restore{6D1D403B-E5C7-4E7B-A455-4190EE90FBE2}\RP14\A0002688.exe

The item being flagged in this instance was detected in a System Restore Point (RP), which is why it is located there.

Had it been a genuine infection (rather than an AVG "false positive" as in this case) you would have had to purge/delete your restore points to avoid a possible reinfection following a system restore.

Regards,

Spike
Go to the top of the page
 
+Quote Post
structor1
post Aug 12 2007, 05:54 AM
Post #28


Newbie
*

Group: Members
Posts: 1
Joined: 12-August 07
Member No.: 35,132



I use AVG, but it didn't prevent the download of Ad-Aware 2007.
I Downloaded Ad-Aware 2007 Free version, 17+Mb program. Tried to install it. Have NEVER had a problem with a download or installation before.

But, this one keeps giving me: "Error 1722, problem with this Windows Installer Package. A program run as part of the Setup did not finish as expected. Contact your support personnel or package vendor".

Then the wizard terminates the install without finishing it.
Can anyone translate this into plain English, and tell me who has what, and how to get it????
Go to the top of the page
 
+Quote Post
spike-nz
post Aug 14 2007, 02:13 AM
Post #29


Advanced Member
***

Group: Volunteer Security Advisor
Posts: 3,059
Joined: 18-June 06
From: Auckland, New Zealand
Member No.: 4,454



Hi structor1,

Please see this FAQ in the Ad-Aware 2007 FAQs: How do I resolve the "Error 1722" problem?

It begins:
QUOTE
This problem relates to the MSI installer from Microsoft; it is associated with either an outdated or corrupt Windows Installer or with permission for Windows Script Hosting (WSH)

Regards,

Spike

Go to the top of the page
 
+Quote Post
LS CalamityJane
post Aug 14 2007, 12:25 PM
Post #30


Lavasoft Staff
Group Icon

Group: Administrators
Posts: 8,748
Joined: 19-April 06
From: Central Florida, USA
Member No.: 65



This topic regarding the AVG false detection has now been resolved, so I will go ahead and close this thread.

Those of you posting here with other problems that are not resolved, please feel free to start a new topic of your own:)

Thanks everyone for your input.



--------------------
Please do NOT send Private Messages to Staff or helpers to request assistance! We do not give a personal support via PM The way to request help is to post a NEW TOPIC in the appropriate forum.

Look for the *New Topic* Button near the top right when viewing the forums.

Here in the forums, replies are posted to topics only. Thank you for your understanding and cooperation!
Plus and Pro Ad-Aware users (only) may use the Support Center for personal assistance:
Support Center


Microsoft MVP/Windows - Security 2003-2009
Go to the top of the page
 
+Quote Post

2 Pages V  < 1 2
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



- Lo-Fi Version Time is now: 20th November 2009 - 10:45 PM