Hi everyone, I recently installed AVG 8.0. After the scan completes it shows no infections, but does show 216 in "warnings count". All of my other scans show clear, so I'm assuming this is a false positive? I think I read on this board awhile back that some anti virus scanners can actually read another programs virus database if it's not encrypted, but I'm not sure. I just thought I'd get a second opinion. I'm using Vista home professional. I've included the partial text file of the scan. Thanks for any help.

SWAS


"Scan ""Scan whole computer"" was finished."
"Infections found:";"0"
"Infected objects removed or healed";"0"
"Not removed or healed.";"0"
"Spyware found:";"0"
"Spyware removed:";"0"
"Not removed:";"0"
"Warnings count:";"216"
"Information count:";"0"
"Scan started:";"Friday, May 09, 2008, 12:54:36 PM"
"Total object scanned:";"1570771"
"Time needed:";"2 hour(s) 20 minute(s) 41 second(s) "
"Errors encountered:";"0"

"Warnings"
"File";"Infection";"Result"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00000001-C003-4A2F-9142-7CB1D78DE6C1}";"Found Adware.InternetOptimizer";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00000049-8F91-4D9C-9573-F016E7626484}";"Found Adware.Isearch";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00110011-4B0B-44D5-9718-90C88817369B}";"Found Adware.Generic";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{002AF282-E42D-4B51-9F70-F1570C02FAAD}";"Found Adware.Generic";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00C9C6A4-1889-46BC-B73A-F4DDCC042735}";"Found Adware.Vundo";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00DBDAC8-4691-4797-8E6A-7C6AB89BC441}";"Found Downloader.ConHook.l";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{01E69986-A054-4C52-ABE8-EF63DF1C5211}";"Found Adware.CramToolbar";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{01EB5130-FC0C-4d75-B9CE-4801B1B854F5}";"Found Adware.Begin2Search";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{037CE595-57CB-4EB5-9775-97BC112F3BB3}";"Found Trojan.Bomka";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{06EECACB-F7C6-4ab9-B6AE-2DC4ED4588BB}";"Found Adware.Generic";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{086AE192-23A6-48D6-96EC-715F53797E85}";"Found Adware.Generic";"Potentially dangerous object"

There's already been a lot of discussion about this - see here:
http://www.bleepingcomputer.com/forums/topic143321.html

I presume you have either Spywareblaster installed, or are using Spybot's immunisation protection? AVG say they will fix these false positives when they issue a service pack for AVG8 sometime in the next few weeks.

Thanks for the link Alan. I did try the search function, but maybe I wasn't specific enough. I was pretty sure it was something goofy like that. Thanks again.

swas

Yes this is known by AVG - They don't want to fix it

David

Yeah you have to love how new versions of software are always better than the previous ones LOL

Not all the time

Now did you read my method on how to avoid the clash between SpywareBlaster and AVG 8?

Yeah, I think I'll just ignore it as long as avg doesn't find any "threats". I'm pretty disappointed in them after this.

Yes you should be.

Just enable SpywareBlasters protection after the scan

The situation has changed now, David (and swas). AVG have now definitely acknowledged that this issue will be fixed when they release their Service Pack 1 for AVG8 in the near future.

I too installed the avg 8.0 LIMITED antivirus program on my XP ; fully updated it then started it off on a scan...............after only one hour of scanning I was looking at a growing list of warnings about trojans,worms, backdoor products and the like................. if I did not' know' my computer I would have felt I AM gravely ILL and in desperate need of a full reformat and reinstall..................I have yet to allow the thing to complete a scan....it may take all day and all night

then probably see a worm crawl out the bottom with a trojan in tow and a sign saying 'the back door is this way '................

Now thats better

I had a lot of problems with AVG 7.5 because it kept stealing files from my utility programs. Now, with AVG 8, I keep getting a set of System Restore files. I really don't believe there are any viruses on my computer - I have no virus activity and I keep it clean. I'm getting a bit frustrated because it also seems that AVG 8 has slowed the response on my computer - more protection means a slower computer I guess.

I even flushed System Restore but then it started finding things in there again within a couple of days.

When I first installed 8, I began to think in terms of getting the paid program because there is so much protection, but now I'm a bit frustrated and considering a different app. If they could get the bugs out I might keep it but I don't like the way it's going.

In the few minutes since I made the previous post, AVG has popped up yet another set of four System Restore files it thinks are bad. Opening the more info arrow at the bottom, it lists them all as svchost.exe.

What happens if you upload the files that AVG thinks are bad to the usual online multiscanners?

http://virusscan.jotti.org/
and
http://www.virustotal.com/

Haven't tried. I have no unwanted services and it was svchost that it was tagging. But to update my report, I got those notifications, and quite a few of them, for the first few days. I told it to ignore them each time. Eventually, the problem went away and it's running smoothly now. So I'm guessing they fixed it.

Hi,
Just had a quick question so didn't want to start a new topic...
I just uninstalled spywareblaster and spybot S&D.
Even after that has all been uninstalled, Avg 8.0 still picks up these Active X compatablities.
Anyone know why?

Regards,
Extremeboy

Here's a thought: did you undo Spybot's immunisation before you uninstalled it? And did you disable Spywareblaster's protection before you uninstalled it? If you didn't, then I suspect their registry changes would remain, and that's why AVG8 is still picking them up.

The solution I suppose would be to reinstall them one at a time. Enable, then disable, the protection. Then uninstall.

If on the other hand you did all this already - then we have a mystery here!

Thanks Alan D,
I'll try that and get back to you. What you said makes sence so I will try it.

Regards,
Extremeboy

Ok,
I disabled Spywareblaster's feature and then I uninstalled it.
Then I disabled all of Spybot's S&D's immunize feature and uninstalled it.
Now I am running AVG 8.0 once more, and I see a bunch of Active X compatablities warning signs...

Extremeboy

Well, that beats me, I'm afraid.

Did it make any difference at all? Do you detect as many activeX warnings as you did before?

Nope not a differnce at all. I still got about 199 warnings or more...
Any other ideas people from BC?

Hi,
Just wanted to tell you that my AVG 8.0 is working now.
I don't know what happened the last day when I was doing a full scan with my computer. I think it was because right after the uninstallation of spybot and spywareblaster I did a full scan with AVG. I think that the effect didn't change yet right after the uninstallation. I think after a shutdown the effects applied so that probably means that spybot and spywareblaster is completly removed and thats why I am not getting a whole big list of false positives anymore.
Thanks Alan D.

Regards,
Extremeboy

That's good news - and makes sense, too! I presume, as you say, that the restart was needed to clear the registry entries after the unimmunisation and uninstall. (Which pretty much tallies with my personal first rule of thumb when faced with any strange computer behaviour - do a restart and see if it resolves itself!)

Does anyone have any more updates on when AVG is supposed to fix the nearly 216 "false positives?" It has been since late April that this has been happening and I have read some statements that it would be fixed by late May/early June. With it now June 14, this is really slow.

Many of us are not professional techs. Rather, we do our best to stay up-to-date on things and rely on the anti-virus professionals to keep their programs updated and free of false positives. It seems to me that AVG is really not addressing this in a timely fashion.

Any update information on a realistic time table is greatly appreciated.

Thanks to all.....

Hi chapin33,
AVG says that they will fix the reported issue and it will
be fixed with the next major update of AVG scheduled for June this
year. I am not sure what changes are going to make, but hopefully that these false postitives will ger fixed...

Regards,
Extremeboy

I understand that AVG's service pack (which will fix this and other issues) is in beta-testing stage, but I agree with chapin33 - considering the way they rushed this thing out in such a mess, they are really dragging their heels about fixing it - after all, it is a mess that they created.

I ran a full scan with AVG 8.0 just yesterday, the 24th of June, and am still showing the same 217 Active X warnings that I've been getting since the original install about a month ago. Luckily, I had some past experiences with false positives and suspected a conflict with SpywareBlaster due to the blocking mechanisms SB uses. BTW, I also use SpyBot which uses similar blocks in the registry (as I understand things anyway). Came here to BC first to see what was said about it before getting my knickers in a knot. This is taking way too long for AVG to fix. Reckon I will just give them about another week since they apparently said it WOULD be fixed in June. If not, I plan uninstall and go get Avira Antivir even if I have to resort to the Premium version to resolve the updating issues. Avira seems to get very high marks on this site and others like Gizmo's.

Grisoft released a new version yesterday. Here's the link.




http://www.filehippo.com/download_avg_antivirus/

That's interesting...
Did the false postives and other minor errors got fixed? Did the conflict between Spywareblaster is gone?
Just wondering before I install this new one.

Regards,
Extremeboy

Don't know. I don't use it. I just got it in my feeds.

Thanks. I'll just try it out tonight.

Regards,
Extremeboy

Seems the New updated AVG 8 still has the Active X false positives
Wonder when they will get that fixed...

Had the same problem with the "new" AVG upgrade - still showed over 200 Active X issues (presumably from SpywareBlaster also running on my computer). I am done with AVG. Uninstalled it last week and am now using Avira Antivir which seems to be highly recommended by many.

Avira appears to be swamped with perhaps too few servers for signature updates as others have posted. Avira is located in Germany, so if you wait until 4:00 p.m. or later (CST - U.S. or GMT-6:00) to get them, things go much faster. Supposedly, you can get around the issue with slow udpdating on the VDF files by using a manual install, but I don't know exactly how to do this.

Once you get past the initial install and the first update, things go more smoothly. My experience is that it takes around 3 to 5 minutes to get new updates especially early in the morning and during weekdays when it is not uncommon for Avira to post 5 or 6 new updates. On the weekend, only one new update seems to be the average. When you click on the update button, a dialog box opens showing the "Status" of the update - you will likely connect to various download sites before you hit on a good connection, then the update will either fail or install as designed, so wait until the entire process is finished and get confirmation (one way or another). If you get a failure, initially, wait a few minutes, and try again. Hope this helps with anyone trying to run Avira for the first time. So far, notwithstanding the update annoyance, I am happy with the simple interface.

Yes, Avira is a very good antivirus...

Regarding updates 'problem'... As far as I know, it's not a problem with servers, but it is just the way a free version updates its signatures... Let's say: free versions of Avira have a low priority on their servers...

I installed Avira too. I thought it was great, the scan speed is fast(takes about 1 1/2 - 2 hour) and there is not much issues with it. The only thing I don't like about Avira is that once they find an infection its stops scanning and waits for the person to decided whether or not they want to ignore it or remove etc... I usually don't do anything when its scanning, like take a break and go out for a while. That's why I chose AVG, it scans for the whole computer and then lets you decide if you want to remove it etc. Other than that Avira is a good anti-virus program. Regards to the updates, I can't update it for some reason but I need to schedule an update time and it will update I can't update by myself by clicking start update....