Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: jjs on June 27, 2012, 11:35:43 AM

Title: NET.EXE tries to shut off avast and windows firewall
Post by: jjs on June 27, 2012, 11:35:43 AM
Hi,
NET.EXE tries to shut off avast and windows firewall, what should i do.
It is not detected by avast or S&D.

thanks for any help.
Title: Re: NET.EXE tries to shut off avast and windows firewall
Post by: Pondus on June 27, 2012, 11:41:07 AM
upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url and post it here for us to see

alternative.  jotti.org / virscan.org / metascan-online.com
Title: Re: NET.EXE tries to shut off avast and windows firewall
Post by: true indian on June 27, 2012, 11:41:53 AM
Send the file to avast labs...

Open avast! user interface>>maintainence>>chest>>right click>>click add>>browse the file net.exe>>click open>>it will be added to virus chest>>right click on the net.exe file in chest>>click send to virus lab>>update definations manually>>rescan the file after next VPS to see if detected>>if not send it again..>>and do the process so on until it is detected

NEXT

If U are not able to remove the malware....make a seprate topic in viruses and worms section of the forum

follow the guide: http://forum.avast.com/index.php?topic=53253.0

and attach all logs here  ;)
Title: Re: NET.EXE tries to shut off avast and windows firewall
Post by: polonus on June 27, 2012, 11:55:40 AM
Hi jjs,

Net.exe could be a process that comes with malware known as w32.dabber.c worm.
This might have come together with an e-mail message you opened recently.
See description here: http://www.liutilities.com/products/wintaskspro/processlibrary/net/
If this scenario rings some bells and the proposed scan by Pondus does not show you that you have the legit net.exe,
indeed go here: http://forum.avast.com/index.php?topic=53253.0
Provide the logs asked for there and a qualified removal expert will have a look
and help you with the cleansing the malcode from your machine,

polonus