Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: em1500uk on December 04, 2012, 10:22:28 PM

Title: Just a general query
Post by: em1500uk on December 04, 2012, 10:22:28 PM
I did post on this forum several months ago asking about Avast's use with a dial up connection. I will need to change my anti virus program soon as updates for this one I'm currently using (Avira AntiVir 9) will be ending toward the end of this year, so in a few weeks. I have no desire to use their version 10 or 2012 as their forum seems to have been filled with problems regarding one or the other, plus both seem to be bundled with stuff I don't want, like a toolbar or something if I remember correctly?

Avast is the only other free anti virus program I know of as we use the latest free version on our PCs at work (we are a charity by the way). It seems to work well enough there, but it's a completely different operating system (Windows 7) and we use a broadband connection. I know I have to completely remove AntiVir off first before installing Avast and I have got instructions from the Avira site as to what to do, but it's after that that's a bit of an unknown as I've not changed between anti virus program providers before.

I just wondered if there had been any recent problems with the latest Avast version on Windows XP Home SP3? I only ask as I don't really want too much fuss in changing from one anti virus program to another. I'm not particularly very technical with PCs(!)

My system's hardware:
Windows XP Home SP3 (32 bit I think - can't see anything about 64 bit being mentioned in System Properties)
AMD Athlon II X2 260 Processor / 3.21 GHz / 2GB of RAM installed (I think?) but 1.75 GB of RAM is available / 500GB hard drive and 452GB is available

I do have a couple of other security programs already installed and wondered about the compatibility of those with Avast too...

Sygate Personal Firewall 5.6.2808 (yes, I know this is an extremely old firewall that's no longer updated, and hasn't been updated for quite some time, but it's worked OK for me for many years and it's been fairly simple to use, which I do like)
SpywareBlaster 4.6
Spybot S&D 1.6.2 (no Teatimer or SD resident installed - I just update the program once a week and use the scanner whenever I want to plus the Immunize feature)
These along with AntiVir 9 are the only security programs that I've ever installed on this PC (I got it as new in July 2011 when my very old one went up the creek!)

I have also seen that Visual C++ is needed for certain programs to run and I believe this includes anti virus programs, so probably includes Avast? I don't really understand what Visual C++ does, but anyway, I see I have this version of it on my system in my add/remove programs: 2008 Redistributable x86 9.0.30729.17. Do I need a new version of this (if there is one as Windows Update hasn't told me otherwise?) for the latest Avast to install and run properly?

Lastly, is there anywhere else that I can download the Avast installer from? I see that on the official site, it's based on CNet and I never like downloading anything from that site.

Sorry for the essay (and probably silly questions!)
Title: Re: Just a general query
Post by: Pondus on December 04, 2012, 10:28:35 PM
Quote
Spybot S&D 1.6.2 (no Teatimer or SD resident installed - I just update the program once a week and use the scanner whenever I want to plus the Immunize feature)
spybot is waste of disk space.....  http://forum.avast.com/index.php?topic=109902.0

replace it with Malwarebytes    http://filehippo.com/download_malwarebytes_anti_malware/


Quote
Lastly, is there anywhere else that I can download the Avast installer from? I see that on the official site, it's based on CNet and I never like downloading anything from that site.
Filehippo.com

Title: Re: Just a general query
Post by: -midnight on December 04, 2012, 10:39:20 PM
http://www.avast.com/index
Title: Re: Just a general query
Post by: Pondus on December 04, 2012, 10:50:15 PM
http://www.avast.com/index
and that goes to the CNET link he/she dont like   ;)
Title: Re: Just a general query
Post by: -midnight on December 04, 2012, 10:55:12 PM
I think I downloaded Avast from webattack.com
Title: Re: Just a general query
Post by: em1500uk on December 04, 2012, 11:44:19 PM
Quote
Spybot S&D 1.6.2 (no Teatimer or SD resident installed - I just update the program once a week and use the scanner whenever I want to plus the Immunize feature)
spybot is waste of disk space.....  http://forum.avast.com/index.php?topic=109902.0

replace it with Malwarebytes    http://filehippo.com/download_malwarebytes_anti_malware/


Quote
Lastly, is there anywhere else that I can download the Avast installer from? I see that on the official site, it's based on CNet and I never like downloading anything from that site.
Filehippo.com
Thanks for that recommendation :) I have seen MalwareBytes mentioned before on other forums, but never really thought to go out and get it!

Oh and I'm a she by the way not a he ;) ;D
Title: Re: Just a general query
Post by: Gopher John on December 05, 2012, 12:41:39 AM
I used SyGate Firewall for a number of years and was happy with it.  It hasn't been updated for quite a while  and is considered abandonware since the publisher was purchased by (I believe) Symantec.  I moved to Online Armor Free Firewall  http://download11.emsisoft.com/OnlineArmorSetup.exe (http://download11.emsisoft.com/OnlineArmorSetup.exe) and was pleasantly surprised with it.  It's quite easy to use and can be updated thru it's internal updater.

When Avast had a special offer for AIS, I switched to it.  Otherwise, I'd still be using it.
Title: Re: Just a general query
Post by: INGBEAN on December 05, 2012, 12:58:52 AM
I have also seen that Visual C++ is needed for certain programs to run and I believe this includes anti virus programs, so probably includes Avast? I don't really understand what Visual C++ does, but anyway, I see I have this version of it on my system in my add/remove programs: 2008 Redistributable x86 9.0.30729.17. Do I need a new version of this (if there is one as Windows Update hasn't told me otherwise?) for the latest Avast to install and run properly?

Lastly, is there anywhere else that I can download the Avast installer from? I see that on the official site, it's based on CNet and I never like downloading anything from that site.

Hello em1500uk!

The Visual C++ component will be installed automatically by avast! itself, no problems are expected on this side.

The correct "direct links":
http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe (avast! Free)
http://files.avast.com/iavs5x/avast_pro_antivirus_setup.exe (avast! Pro)
http://files.avast.com/iavs5x/avast_internet_security_setup.exe (avast! Internet Security)

INGBEAN
Title: Re: Just a general query
Post by: em1500uk on December 09, 2012, 12:21:11 PM
I have also seen that Visual C++ is needed for certain programs to run and I believe this includes anti virus programs, so probably includes Avast? I don't really understand what Visual C++ does, but anyway, I see I have this version of it on my system in my add/remove programs: 2008 Redistributable x86 9.0.30729.17. Do I need a new version of this (if there is one as Windows Update hasn't told me otherwise?) for the latest Avast to install and run properly?

Lastly, is there anywhere else that I can download the Avast installer from? I see that on the official site, it's based on CNet and I never like downloading anything from that site.

Hello em1500uk!

The Visual C++ component will be installed automatically by avast! itself, no problems are expected on this side.

The correct "direct links":
http://files.avast.com/iavs5x/avast_free_antivirus_setup.exe (avast! Free)
http://files.avast.com/iavs5x/avast_pro_antivirus_setup.exe (avast! Pro)
http://files.avast.com/iavs5x/avast_internet_security_setup.exe (avast! Internet Security)

INGBEAN
Thanks for that, but I did notice that another user had an issue with the Visual C++ install in the Avast's set up here (http://forum.avast.com/index.php?topic=108170.msg869123#msg869123), although they say they're using XP SP2, so maybe that made a difference?
Title: Re: Just a general query
Post by: DavidR on December 09, 2012, 01:15:33 PM
There would be no difference in the requirement for C++ with XP SP2 or SP3 or other OS for that matter as the requirement is needed for avast.

What may or may not be an issue is if C++ is already installed on the system or not. From your first post you appear to have the correct version as the build number is the same as mine except for the last to digits .17 mine has 4 digits after the 2008 Redistributable x86 9.0.30729.

That said if you didn't have the correct version then I would expect you to be getting C++ related errors displayed - this is commonly the 'Side-By-Side Configuration is Incorrect' Error.
Title: Re: Just a general query
Post by: em1500uk on December 09, 2012, 04:57:21 PM
Is it wise to go out and find the latest update of the Visual C ++ version that I have and install it before attempting to install Avast? As I'm on dial up at home, I do have to go elsewhere to download installation files etc as mostly the file size is too large to cope with. As soon as I remove my current AV, I just want to install Avast there and then without having to go without having an AV on my PC for several days... I'd like to have all the necessary Visual C++ fille there to install separately just in case I encounter any problems.
Title: Re: Just a general query
Post by: CraigB on December 09, 2012, 05:09:14 PM
Avast should typically install visual C++ during the install which will be the x86 9.0.30729.4148 version, after installation if you perform a windows update then version x86 9.0.30729.6161 will be installed, once that is installed you can then uninstall all the visual C++ 9 versions prior to the last installed, you only need the latest version of each number.

Edited for the visual C++ numbers that I previously forgot :)
Title: Re: Just a general query
Post by: DavidR on December 09, 2012, 05:18:06 PM
@ em1500uk
Well I honestly don't believe that will be a problem if your installation of C++ is the 2008 SP1 redistributable version, but it certainly wouldn't hurt to download it and save it to your hard disk just in case.

You need 2008 SP1 - this is the one:
Microsoft Visual C++ 2008 SP1 Redistributable Package ATL Security Update (http://www.microsoft.com/downloads/en/details.aspx?FamilyID=2051a0c1-c9b5-4b0a-a8f5-770a549fd78c) and you should download the x86 version (vcredist_x86.exe).

Title: Re: Just a general query
Post by: mchain on December 09, 2012, 05:18:40 PM
hi em1500uk,

I've noted two things:

Suggest running the vendor tool at least twice to ensure all old remnants are removed, reboot after each time.  A run with sfc /scannow will not hurt either before installing the new a/v.

As for the C++ version, craigb and DavidR has you sorted out.

EDIT:  You can also ask here about the newest version of Avast.edu, which is free.  I personally do not know where this link is, but someone else here will know.

Hope this helps.
Title: Re: Just a general query
Post by: em1500uk on December 09, 2012, 09:47:40 PM
@ em1500uk
Well I honestly don't believe that will be a problem if your installation of C++ is the 2008 SP1 redistributable version, but it certainly wouldn't hurt to download it and save it to your hard disk just in case.

You need 2008 SP1 - this is the one:
Microsoft Visual C++ 2008 SP1 Redistributable Package ATL Security Update (http://www.microsoft.com/downloads/en/details.aspx?FamilyID=2051a0c1-c9b5-4b0a-a8f5-770a549fd78c) and you should download the x86 version (vcredist_x86.exe).
Thanks very much. It is only precautionary as I sat to save waiting for a few days.
Title: Re: Just a general query
Post by: em1500uk on December 09, 2012, 10:17:20 PM
hi em1500uk,

I've noted two things:
  • No link was provided for vendor uninstall tools for a specific a/v vendor.  You can get these tools you need here:  http://singularlabs.com/uninstallers/security-software/ (http://singularlabs.com/uninstallers/security-software/)  As it appears you are planning ahead for this move to Avast!, that is only proper.  First step in removing the old a/v is to use Add/Remove to uninstall it, then reboot, and then run the vendor uninstall tool, and reboot once again. 
     
  • You can get the version of Avast! where a listing is posted for all versions of Avast! here, including the Endpoint versions:  http://www.avast.com/download-software (http://www.avast.com/download-software)
    Here, at least, with this link, you can see what you are getting when you click without having to go to c|net downloads to get it (I avoid c|net downloads totally, always go to the vendor page only).

Suggest running the vendor tool at least twice to ensure all old remnants are removed, reboot after each time.  A run with sfc /scannow will not hurt either before installing the new a/v.

As for the C++ version, craigb and DavidR has you sorted out.

EDIT:  You can also ask here about the newest version of Avast.edu, which is free.  I personally do not know where this link is, but someone else here will know.

Hope this helps.
Cheers - I have uninstallation instructions from the Avira site and I have a link to get their registry cleaner directly from them, so hopefully in that area I should be OK :) Glad I'm not the only one that doesn't bother with CNet. I've not been to that site for downloads in many years. Normally go to FileHippo or the vendor site these days anyway.

Two questions with regards to your post: one what on earth is sfc /scannow (guessing it's a command prompt thing, but I don't really know how to use that) and two what is Avast.edu all about? Obviously it's another version as you say, but I've never even heard of it!

Another thing that has worried me about moving from Avira to Avast is wondering whether Avast will grind my PC to a halt so it's unusable and wondering whether or not I will be able to receive the updates for it due to the fact that I have a dial up connection :-\ My connection speeds lately (over the last month or so) have been 44kbps or 45.2kbps but for some time before then they've been up and down, lowest being about 21.6kbps. I take it that the cloud services that are included in version 7 will have to be disabled and I'll have to do updates manually, as I'm presuming the cloud services will be no use to me due to my connection speed and not being online all the time? I don't mind setting off an update myself as that's what I do with Avira currently and it manages it, but the updates most of the time now are really small, like 200kb or so, but that's probably cos my mum checks for updates several times during the day when she's in. Sometimes a big update gets released and it struggles and I have to download a file via a broadband connection, then bring it home and perform a separate update using the file and that works. I'm just curious to know what an optimum set up for someone on dial up would be?

I am very sorry for all these silly questions, but I'm only an average PC user and this is the only PC I have and just don't like the idea of things going wrong. I know some things (but not a lot!) and despise having to sort problems out with it. Guess I just want an easy life ;D
Title: Re: Just a general query
Post by: em1500uk on December 10, 2012, 03:11:20 PM
Any replies to my last post would be good... Thanks in advance :)
Title: Re: Just a general query
Post by: DavidR on December 10, 2012, 03:30:59 PM
Avast is relatively light on resources.

I have never used avira, so I don't know exactly what areas it covers. I have had avast for over eight and a half years now and have only had broadband for the last two, so I'm well aware of the difficulties with dial-up, but that wasn't a problem for me and using avast.

Avast does incremental updates so the updates are measured in KBs and not MBs, probably averaging out at about 100KB. There are on average two auto updates for virus definitions during the day, avast also uses streaming updates so that more urgent signature updates are released rather than waiting for the next auto update. These are generally very small so far today I have received 23 of those ranging in size between 1KB and 35KB. Most of these were delivered shortly after I booted earlier today.

There really isn't much optimising to do in relation to do with dial-up, I would leave it on the default settings and see how you get on with those.

Title: Re: Just a general query
Post by: em1500uk on December 10, 2012, 05:15:09 PM
Thanks for the reply DavidR :) I'm only concerned as I feel that Avast is my only best option for an AV program right now and I don't want to be left with no AV program on my system at all, or left with one that I can't update. I simply refuse to go on to Avira's version 10 or the newer 2012 version as both seem riddled with problems these days and I'm not familiar with AVG, but apparently that's rubbish and I don't know of any other free AV programs that I could use, hence why I'm considering a move to Avast very soon.

You say a lot of the streaming update files were picked up on your PC starting up, will this affect my system loading time and will having the cloud services and automatic updates on affect my internet speed/browsing due to the connection speed being so slow in the first place?
Title: Re: Just a general query
Post by: DavidR on December 10, 2012, 06:42:33 PM
As you can see from the image a bunch of them (which were available but my system was off) about 9 from 1KB - 6KB which shouldn't be much of an issue.

The regular auto update check happens shortly after boot and that is likely to be more resource intensive (CPU and RAM than internet connection), if your system has a reasonable CPU and qty of RAM (which it does seem to be reasonable) that shouldn't be a problem. If it proves to be an issue there are manual changes to settings to delay it until later after the boot. But lets not get tied down with that right now unless we need to cross that bridge later.
Title: Re: Just a general query
Post by: mchain on December 10, 2012, 10:22:27 PM
hi,

Here is the link for Avast! .edu:  http://www.avast.com/education (http://www.avast.com/education)

There is an application form to fill out.  Note that this is an Endpoint solution, you can get that at the link provided earlier.
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 01:49:37 AM
As you can see from the image a bunch of them (which were available but my system was off) about 9 from 1KB - 6KB which shouldn't be much of an issue.

The regular auto update check happens shortly after boot and that is likely to be more resource intensive (CPU and RAM than internet connection), if your system has a reasonable CPU and qty of RAM (which it does seem to be reasonable) that shouldn't be a problem. If it proves to be an issue there are manual changes to settings to delay it until later after the boot. But lets not get tied down with that right now unless we need to cross that bridge later.
Thanks for the info. Never released that the streaming updates were so tiny! Obviously altogether they add up to much more, but even then, as you say, the updates are still KB and not MB which is good where dial up is concerned. Thanks for the info on auto update after start too.
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 01:51:41 AM
hi,

Here is the link for Avast! .edu:  http://www.avast.com/education (http://www.avast.com/education)

There is an application form to fill out.  Note that this is an Endpoint solution, you can get that at the link provided earlier.
Just had a look but I don't think I qualify for that as I don't work in a school or any other educational facility and I'm based in the UK.
Title: Re: Just a general query
Post by: DavidR on December 11, 2012, 01:52:31 AM
As you can see from the image a bunch of them (which were available but my system was off) about 9 from 1KB - 6KB which shouldn't be much of an issue.

The regular auto update check happens shortly after boot and that is likely to be more resource intensive (CPU and RAM than internet connection), if your system has a reasonable CPU and qty of RAM (which it does seem to be reasonable) that shouldn't be a problem. If it proves to be an issue there are manual changes to settings to delay it until later after the boot. But lets not get tied down with that right now unless we need to cross that bridge later.
Thanks for the info. Never released that the streaming updates were so tiny! Obviously altogether they add up to much more, but even then, as you say, the updates are still KB and not MB which is good where dial up is concerned. Thanks for the info on auto update after start too.

You're welcome.
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 08:31:27 AM
As you can see from the image a bunch of them (which were available but my system was off) about 9 from 1KB - 6KB which shouldn't be much of an issue.

The regular auto update check happens shortly after boot and that is likely to be more resource intensive (CPU and RAM than internet connection), if your system has a reasonable CPU and qty of RAM (which it does seem to be reasonable) that shouldn't be a problem. If it proves to be an issue there are manual changes to settings to delay it until later after the boot. But lets not get tied down with that right now unless we need to cross that bridge later.
Thanks for the info. Never released that the streaming updates were so tiny! Obviously altogether they add up to much more, but even then, as you say, the updates are still KB and not MB which is good where dial up is concerned. Thanks for the info on auto update after start too.

You're welcome.
Will not being connected to the internet at the system start up affect this i.e will the program continually keep looking for updates without stopping do you know? Or will it give up after so long?
Title: Re: Just a general query
Post by: DavidR on December 11, 2012, 12:49:34 PM
<snip quotes>
Will not being connected to the internet at the system start up affect this i.e will the program continually keep looking for updates without stopping do you know? Or will it give up after so long?

With dial-up in the avastUI, Settings, Updates, Update Parameters, you can set it to I only connect to the internet using a dial up modem. So it should check for the presence of a connection.
Title: Re: Just a general query
Post by: mchain on December 11, 2012, 05:27:45 PM
hi em1500uk,

Suggest running the vendor tool at least twice to ensure all old remnants are removed, reboot after each time.  A run with sfc /scannow will not hurt either before installing the new a/v.

As for the C++ version, craigb and DavidR has you sorted out.

EDIT:  You can also ask here about the newest version of Avast.edu, which is free.  I personally do not know where this link is, but someone else here will know.

Hope this helps.
Cheers - I have uninstallation instructions from the Avira site and I have a link to get their registry cleaner directly from them, so hopefully in that area I should be OK :) Glad I'm not the only one that doesn't bother with CNet. I've not been to that site for downloads in many years. Normally go to FileHippo or the vendor site these days anyway.

Two questions with regards to your post: one what on earth is sfc /scannow (guessing it's a command prompt thing, but I don't really know how to use that) and two what is Avast.edu all about? Obviously it's another version as you say, but I've never even heard of it!

I am very sorry for all these silly questions, but I'm only an average PC user and this is the only PC I have and just don't like the idea of things going wrong. I know some things (but not a lot!) and despise having to sort problems out with it. Guess I just want an easy life ;D
hi,

Any advanced user tips given here that will not damage your system is perfectly ok to use.  The reason for running sfc /scannow before installing Avast! is to ensure all protected system files are intact and in their original versions before beginning the install of Avast!  If your system ever reports a corrupt system file now or in the future, this is one way to repair that issue.  Microsoft does recommend this as a step to repair corrupted system files, just so you know.

You are correct, sfc /scannow is a command prompt.  You run this by Start>Run>sfc /scannow  Enter the command "sfc /scannow" (without the quotes) in the run box and click OK button.  If running XP, you will need the installation disc for XP.  /scannow will ask you for this cd disc when run.  If Vista or newer, /scannow will run automatically.

Note that there is a space between sfc and /scannow, ergo, sfc(space)/scannow.  This will take a bit of time to run, so be patient and allow it to complete.     sfc /scannow  (you can copy/paste this command directly into the run box to avoid any syntax issues.)
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 08:03:45 PM
Hi! Just tried that scan now thing you suggested but part way through it said I needed an XP SP3 disc, which I don't have. I only have SP1a! So I just cancelled the process. Hope that's not caused me any bother. I wouldn't have thought so. See, I didn't install this system. My local PC shop did that for me and updated it to SP3.

Is the reason you asked me to do this with regards to the recent tcpip.sys file being deleted on some XP systems. Will that happen to me?! I think I read somewhere that all the XP systems that had been affected had patched versions of this on? I don't think the file I have is patched looking at its properties. I wouldn't have thought the guy in the PC shop would've tampered with it either.
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 08:33:13 PM
Just did a system restore to a system checkpoint a little while earlier, just in case it had messed something up.

I sincerely hope that tcpip.sys file (among other system files) aren't deleted when I install Avast. I really don't want to lose my internet connection or anything else for that matter. As far as I'm aware, my system is clean. There's nothing untoward happening in the task manager or anywhere else...
Title: Re: Just a general query
Post by: em1500uk on December 11, 2012, 10:47:47 PM
Has the tcpip.sys thing been sorted out does anyone know? I'm going to try moving to Avast tomorrow evening and I really don't want to install Avast and then it ends up deleting important system files without me knowing and trying to stop it :-\ When something's detected, do you get given options as to what to do with the file by default?
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 12:13:47 AM
hi,

At least we still have time to avert any potential problems here.

Sorry you had problems running sfc /scannow on the XP system.  Suggest going back to your service shop and getting an updated XP Pro or XP home (whichever applies) disc from them (mine was free) that includes SP3 already slipstreamed into the new disc.  sfc /scannow should now work when the service pack on the disc matches what is installed on the system.  If not free, then it would be a nominal cost for you.

You can ask your tech if he modified this tcpip.sys file while it was in the shop.

As for tcpip.sys deletion errors, default settings with Avast! should not automatically delete this file.  At worst, if the file has been modified by your service tech, it should only quarantine it.  If it does quarantine it, you can then restore it from the virus chest.

Here are some possible solutions posted in the following links at the Avast! forums:

http://forum.avast.com/index.php?topic=110804.0 (http://forum.avast.com/index.php?topic=110804.0)  Read the entire thread but pay particular attention to reply # 3.  Clicking that link provided within that post will lead you here:  http://forum.avast.com/index.php?topic=110781.0 (http://forum.avast.com/index.php?topic=110781.0)

Reply # 14 will link to another site by an Avast! reseller for the final fix, should you need it.  File name is Fix avast! XP NETWORK http://www.avastantivirus.ro/suport-tehnic (http://www.avastantivirus.ro/suport-tehnic)  Even tho this is in a foreign language, this fix will work for you; it is produced as a .zip file and can be downloaded and transferred to/run on the XP system if need be.

Suggest not changing any of the default settings within Avast! except for the opt-in setting to install Google Chrome.  If you run the installation program as is, Avast! will install Chrome for you.  You must opt-out of Chrome install when the opportunity presents itself twice; first time is at the very beginning of the install process, and the second time is after the system is rebooted.  Just untick the two boxes to opt-out of Google Chrome install twice if you do not want it.  If you want Google Chrome, there is nothing to modify here.

Reason for mentioning the above is not to complicate matters here.  Just want the install process to go smoothly and exactly as you expect it to.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 02:05:42 AM
Thanks for all that mchain :) I got this PC way back in July 2011, so I doubt the guy in the shop would even remember what he done with it! I won't have time to get into the shop to get another newer CD either, so I'll just have to chance it tomorrow night I reckon and hope for the best :-\ I honestly don't think it has been patched or that any other files on my system are screwed up in some way or other, else surely I'd have noticed by now or had some sorta warning? I did look at the properties of the tcpip file and it said it was from the Microsoft Corporation and it had a date from 2008 sometime connected with it, which would tie in with the release of SP3. I'll post back with the exact detail in the morning.

So, when a detection is made, do you get a pop up asking you what to do with the file? From reading other topics on here, I see some people say they got a pop up with regards to deleting it, but then they chose ignore and to never ask again. Just clarifying as I saw a screenshot in another topic with file system shield settings and there were some options there: 1 move to chest, 2 delete and 3 was no action I think. Can those kinda things be altered, particularly the delete option?
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 02:37:03 AM
So, when a detection is made, do you get a pop up asking you what to do with the file? From reading other topics on here, I see some people say they got a pop up with regards to deleting it, but then they chose ignore and to never ask again. Just clarifying as I saw a screenshot in another topic with file system shield settings and there were some options there: 1 move to chest, 2 delete and 3 was no action I think. Can those kinda things be altered, particularly the delete option?
Best option is to enter the "Real-Time Shield" section in Avast! GUI first and then go to File System Shield>Expert Settings tab.  You then will see the picture displayed below.  Modify your settings as shown:  Ask option will let you decide what you want to do.  Repair does not work if the infectious agent is a worm or Trojan.  Repair will/should work if a file is infected by a virus agent only.

Default action by Avast! is set thusly:  Automatically quarantine infected agent; if it fails, then it will Ask; if that fails, then it will do nothing.

Best to modify this setting before you connect to the Internet for the first time after a successful install of Avast!

Any problems, major or minor, please come back to this thread for the help you require.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 05:40:57 AM
So I can alter the shield settings before I've registered?
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 08:20:47 AM
Here's the properties of my tcpip.sys file that I searched for: file version 5.1.2600.5625 (xpsp_sp3_gdr.080620-12-49) Copyrighted to Microsoft Corporation. The date it was modified was 20th June 2008, so presumably, if the guy in my local PC shop had modified it somehow, it would show a date in July 2011 I would've thought?

I've also now had some automatic updates for my system now pop up for me to download. Can I still continue with removing my current AV and installing Avast later and just wait to download these later?
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 01:25:56 PM
Is anyone able to confirm whether or not that file is the original Windows file please? I'm guessing not, but this is of a great concern to me. I know I ain't even changed anything yet, but I am a bit of a worrier as you might have guessed! It would be nice to know if this tcpip.sys file FP was actually fixed...
Title: Re: Just a general query
Post by: DavidR on December 12, 2012, 01:48:17 PM
We can't confirm if it is an original file from your information or not. Whilst it appears to be an original (but the date differs from mine, but that isn't unusual) you need to calculate the MD5 hash # to confirm if anything has been changed in the file.

Mine on XP Pro SP3:
MD5 hash = 9aefa14bd6b182d61e3119fa5f436d3d
Also see image for other properties.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 01:59:03 PM
Oh damn :(
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 02:16:04 PM
Reply # 14 will link to another site by an Avast! reseller for the final fix, should you need it.  File name is Fix avast! XP NETWORK http://www.avastantivirus.ro/suport-tehnic (http://www.avastantivirus.ro/suport-tehnic)  Even tho this is in a foreign language, this fix will work for you; it is produced as a .zip file and can be downloaded and transferred to/run on the XP system if need be.
When would this fix need to be run if I needed it? Only if the tcpip.sys was deleted?
Title: Re: Just a general query
Post by: Asyn on December 12, 2012, 02:20:41 PM
When would this fix need to be run if I needed it? Only if the tcpip.sys was deleted?

Yes.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 03:14:56 PM
And also, while I'm at it, how do I restore the file from the virus chest and tell Avast to ignore it (if I encounter such issues).
Title: Re: Just a general query
Post by: DavidR on December 12, 2012, 03:38:44 PM
You should never Ignore (avira term), exclude a file without fully investigating if a detection is false. Acting in haste could mean you are allowing malware to run. This can be checked on sites like virustotal (below) with 40+ scanners scanning the file you upload.

Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner (https://www.virustotal.com/) and report the findings here, post the URL in the Address bar of the VT results page. You can't do this with the file securely in the chest, you need to Open the chest and right click on the file and select 'Extract' it to a temporary (not original) location first, see below.

Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect\*
That will stop the File System Shield scanning any file you put in that folder.

####
If only GData and avast detect it - GData uses avast as one of its two scanners so counts as 1 detection and almost certainly an FP.
Send the sample to avast as a False Positive:
Open the chest and right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update. A link to this topic wouldn't hurt.

@@@@
- In the meantime (if you accept the risk), add the full path to the file to the exclusions lists (see Note below):
File System Shield, Expert Settings, Exclusions, Add and
avast Settings, Exclusions

Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the File System Shield and avast Settings, exclusions lists.

Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the \* to \file_name.exe where file_name.exe is the file you want to exclude.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 04:27:11 PM
Thanks for that DavidR. I've printed it out for reference just in case. Will I still be able to access the internet if tcpip.sys gets placed in the chest? Just curious as if I can't access the internet, then I'm not sure how I'd be able to carry out an online virus scanner on it.
Title: Re: Just a general query
Post by: essexboy on December 12, 2012, 04:36:47 PM
If avast has not alerted on the TCPIP by now then it never will...  From what I have seen it only affects modified TCPIP and not the standard MS one
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 04:51:45 PM
If avast has not alerted on the TCPIP by now then it never will...  From what I have seen it only affects modified TCPIP and not the standard MS one
I'm still to install Avast essexboy. I'm going to give it a go later tonight and just hope for the best. As I've said before, I do worry about all this kinda stuff as I'm not exactly very technical when it comes to PCs.
Title: Re: Just a general query
Post by: essexboy on December 12, 2012, 05:11:54 PM
Avast will update when it installs, if it should alert on TCPIP then select ignore
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 05:19:12 PM
So I can alter the shield settings before I've registered?
Yes, you can.  Every version of Avast! is a 30-day trial version until it is registered.  This would mean it is fully functional out-of-the-box for 30 days from first install, and setting modifications can be made at any time during that 30 day period, even before the first automatic antivirus update occurs.

You get the same protection in trial as in a paid or registered product during the 30 days.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 05:56:17 PM
Thanks all for putting up with me ;D 8) I am really sorry to have bombarded you all with so many questions and such, but it's what I'm like when it comes to these things.

@ essexboy - do you yourself have any idea if the TCPIP false positive that others reported last Wednesday has been fixed? I did look on the Avast official site and checked out Virus Update History and I see that an update was released on December 8th: "8.12.2012 - 121208-1 This VPS update contains only fixes to existing definitions or removal of false alarms." so I wondered if that update was the one that was meant to have fixed it?
Title: Re: Just a general query
Post by: essexboy on December 12, 2012, 06:41:54 PM
Very probably yes, having said that I ran Avast on my XP system and it did not make a squeak
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 07:31:39 PM
Help!

Just hit a big problem.

I removed AntiVir 9 via the add/remove programs and let the system reload normally. I then restarted the system again and went to F8 and Safe Mode. There were 2 names to choose from: Administrator (which I didn't even know was there!) and my name Emma and as far as I'm aware, I'm on an administrator type of account anyway, so I went for my name and all of my desktop icons came up whereas on the Administrator name they weren't there. So anyway, I went and double clicked on the Avira's registry cleaner (which I got directly from their website) and then this error comes up:

Regcleaner.exe Unable To Locate Component
Application has failed to start because mfc100.dll was not found. Reinstalling the application may fix this problem.

So...I'm at a loss as to what to do now. I'm only on a dial up connection at home so I can't download anything huge and I'm not in work till Friday now. I daren't go online as the only thing protecting me now is my Sygate Personal Firewall by blocking odd incoming and outgoing traffic.

Ahhh this is all I wanted in the run up to Christmas. I knew this wouldn't be straightforward :(
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 07:46:27 PM
Oops!

Never run a registry cleaner of any sort.  The fact that you errored out is actually a blessing.  Even seasoned techs never run such a program.  One wrong registry entry removed, you can have a dead Windows system at worst, and at best, can have mysterious errors or bugs in your system that were not there before running such a program.  For example, MS Word now has problems, so...

If you really want to ensure AntiVir 9 is gone completely, go here and run the vendor removal tool from here:  http://singularlabs.com/uninstallers/security-software/ (http://singularlabs.com/uninstallers/security-software/)

Use entry # [04] only to remove all left-over remnants.  Then reboot and you should be good to go.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 08:00:56 PM
Ah! So that's me being a dumb dumb then! Sorry :-[ You did put that link up earlier in the topic. I thought both of these were the same thing. Erm, I must now ask this...what about CCleaner? I have this program and use this from time to time, including the registry cleaner part of it.
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 08:06:58 PM
OK, since you have no a/v protection atm, do not go online again until you do.

Workaround is to go and get the files you need from another computer.  A friends computer will work just fine, copy to a clean (no virus!) usb drive and transfer the files to your XP and run them from there.  Friend's computer must be virus-free as well.

As for the error, that can be fixed at the microsoft site here:  http://support.microsoft.com/kb/2019667 (http://support.microsoft.com/kb/2019667)  If memory serves right, DavidR already covered that earlier in your thread.

EDIT: CCleaner is best used only for temporary file removal.  Even tho the registry cleaner is mild, it still can cause system damage if the wrong entry is removed.  I know you have best intentions here, but try to never use a registry cleaner.  That is, unless you are comfortable with redoing XP from scratch again in the worst case scenario.  You can avoid all that by not using one.

EDIT 2:  Also, do not use the disc wipe feature or wipe free space feature in CCleaner.  I have personally seen horror stories where the entire drive was wiped clean and all personal data was lost, not to mention the OS had to be installed once more...
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 09:17:04 PM
Didn't think I could go online until I had an AV program again. Don't think my mother is too impressed with me LOL! I just can't believe I thought what you'd posted before and what I'd gone out and got was the same thing. I'm so annoyed with myself as it's now a delay I could've done without but hey ho, it's my fault. I know our system's are clear at work, but I'm not back there till Friday as I say. I might be able to get it tomorrow at a library perhaps... I don't have anyone nearby that I can go to right now to use their internet connection.

As in, the file I downloaded from DavidR's link earlier will solve that dll error?

Wow. I must say I hadn't really thought of registry cleaning like that before. I'll take that on board for sure! But won't a registry then become cluttered and slow a computer down, or is that all a myth? You'll be glad to hear I've never used the disc wiping thing in CCleaner and have never had an urge to. This forum is certainly proving to be an education so far!
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 09:35:10 PM
 :D :D

Glad to help you out with your learning curve.  Seems to be going up exponentially so far.

As for the error, best to re-install that C++ before you encounter errors with the Avast! install.  To do that, look in Add/Remove for the C++ program, uninstall that, have the downloaded C++ program handy, reboot, then install the new C++.

Re registry cleaners, the Windows Registry is extremely robust, and can tolerate many errors within it without apparent symptoms.  Rather, it is the other way around, registry cleaners can cause system damage so severe that the mildest form of damage is a slowdown, and the mid-range is installation errors, and worst, a dead system.  Sounds counterintuitive, but this sort of program is snake-oil at best.  You are right, you are the master of your system, but don't let that go to your head, and damage it any further.  Remember, your computer is designed to do exactly what you tell it to do, and we often are the weakest link in the chain, and this is sometimes only due to simple ignorance.
Title: Re: Just a general query
Post by: em1500uk on December 12, 2012, 10:33:49 PM
It's safe to remove the previous VC++ before installing the other one? I did forget to ask before, do I run that vendor removal tool in safe mode? Take it the VC++ removal/install can happen in normal mode or whatever you like to call it?

I'll cease with using the registry cleaner in CCleaner in that case. I'll know now for future reference.
Title: Re: Just a general query
Post by: mchain on December 12, 2012, 10:45:46 PM
Yes, it is a necessary step.  The point is to ensure a clean and error-free install of C++

If you can run in normal mode, always use that unless the uninstall program specifically states to run in Safe Mode.  An example of that is the Avast! removal tool here:  http://www.avast.com/uninstall-utility (http://www.avast.com/uninstall-utility)  You should be aware that this removal tool can be destructive if you do not follow instructions for use exactly.  For example, it must be placed on the admin desktop and nowhere else, and so on.

If it does not say to run only in Safe Mode, no need for Safe Mode.  Safe Mode really is only for when normal admin mode cannot be run or entered for whatever reason.
Title: Re: Just a general query
Post by: em1500uk on December 13, 2012, 08:36:11 AM
I'll sort out the VC++ thing this morning then before I go out for the day. If I can get the vendor removal file whilst I'm out, it'll be all the better, but if not, I'll have to wait until Friday. Still can't get over the fact that I thought that and the thing I found were the same thing :-[ It seems funny Avira have that registry cleaner tool, if it's not something that's recommended to be carried out.

Oh and regarding your comment on the Avast removal tool being placed on an admin desktop and nowhere else. Well, seeing as I got what appeared to be 2 user accounts up in safe mode last night (me - Emma - and an Administrator one) how can I check that my account is an admin account? I have always thought my name was the admin account and the only one as that's the only name that appears on my screen after I place my PC in stand by mode and then wake it up again. The admn name appearing in safe mode surprised me and confused me somewhat.
Title: Re: Just a general query
Post by: mchain on December 13, 2012, 08:52:40 AM
I'll sort out the VC++ thing this morning then before I go out for the day. If I can get the vendor removal file whilst I'm out, it'll be all the better, but if not, I'll have to wait until Friday. Still can't get over the fact that I thought that and the thing I found were the same thing :-[ It seems funny Avira have that registry cleaner tool, if it's not something that's recommended to be carried out.

Oh and regarding your comment on the Avast removal tool being placed on an admin desktop and nowhere else. Well, seeing as I got what appeared to be 2 user accounts up in safe mode last night (me - Emma - and an Administrator one) how can I check that my account is an admin account? I have always thought my name was the admin account and the only one as that's the only name that appears on my screen after I place my PC in stand by mode and then wake it up again. The admn name appearing in safe mode surprised me and confused me somewhat.
For checking the status of your account, to see whether or not it is admin or user-limited, see the three .jpegs attached below.

Start>Control Panel>User Accounts

Note that the account now operating in, is a user-limited account, not an administrative one.  You cannot install programs or make system changes to the computer whilst in limited user mode.

EDIT:  Default Administrator account is created when Windows XP is first installed.  This account is known as the "hidden" administrator account, and is not usable/viewable unless the user enters Safe Mode.  "Emma" is the user created administrative account and is visible in standard normal user mode as well as Safe Mode.  Since the file in question would normally be downloaded to the desktop in standard normal admin mode, aswclear.exe would only be found in the Emma account, not in the hidden admin account.

Reason for having the hidden admin user account is for situations such as your main admin account becomes corrupted and unusable (it does happen) and you can then go into safe mode to create a new admin account you can use in normal admin mode from the hidden admin account.  You then would transfer all important documents from the corrupted admin account to the new one.  It also allows you to work in Safe Mode when normal admin will not work in Safe Mode either.  Using Administrator (Safe Mode) account is reserved for those occasions where normal admin will not work as it should.
Title: Re: Just a general query
Post by: em1500uk on December 13, 2012, 11:14:37 AM
Thanks for that, but I went into control panel myself this morning and worked it out LOL! I found the user accounts section. VC++ (the version DavidR gave me a link to) has been installed and the other was successfully removed beforehand.

I've now downloaded the removal tool from that Singular Labs site, but I notice that this zipped file I've now downloaded is also a registry cleaner file ??? I click on the info link and it takes me to the official Avira page where I got the other from file yesterday (which as you know was a registry cleaner from my previous posts). So, do I run this tool in normal mode or safe mode later on when I get home or what? Confused.com right now!
Title: Re: Just a general query
Post by: mchain on December 13, 2012, 09:30:18 PM
You are correct.  The file available is an Avira registry cleaner.

I actually ran this cleaner on my system to see what it would find and do.  Many, many, registry entries found that had nothing to do with AntiVir 9.  See attached removal log below.

As this machine was once in corporate use, most entries found were in a Domain location, and also seemed to have many entries for rogue antivirus programs in there as well. 

For your purposes, only tick those entries for removal that have anything to do with AntiVir antivirus, and no other.  The point here is to cause no harm to your system.  Note also any reference to Avast! was not removed.

Either the avira_registry_cleaner_en.exe or the .zip file will work.  NOTE: (TIP)  Whenever a .zip file is run or extracted, the extraction process will always produce more files and folders, and can become a mess if extracted to the desktop.  Always create a new folder and place your .zip file inside that new folder.  That way, any extracted files/folders will stay within that new folder.  No mess and makes it easier for you to find it later.

If, in the past, you know of another a/v program or two once installed, use the singularlabs to finalize removal of these programs, if any.
Title: Re: Just a general query
Post by: em1500uk on December 13, 2012, 10:03:16 PM
Thanks for coming back to me. I'll have to look at that log you posted at work tomorrow as I've been responding via my smartphone at present. The instructions I got for manual uninstallation from Avira says to use that registry cleaner in safe mode, so that's what I'll do I think. I have used an older version of this registry cleaner when I moved from version 8 to version 9 a few years back on an old PC, but can't remember what the AntiVir entries looked like... I've only ever had AntiVir 9 on this PC, so I shouldn't have to look for anything else.

Going back to the recent tcpip.sys false positive last week, just to clarify, Avast won't automatically delete this or anything else without saying "do you want to delete this? Yes or no?" so that you have the chance to choose? Only ask as my mum uses this PC too and I'll have to explain this to her too.
Title: Re: Just a general query
Post by: em1500uk on December 14, 2012, 11:08:48 AM
Just looked at that log you left yesterday. Blimey. There's a lot of stuff there. None of that looks relevant to Avira AntiVir 9, but hopefully the only keys it finds on my system is that of the program I've uninstalled.
Title: Re: Just a general query
Post by: em1500uk on December 14, 2012, 07:11:06 PM
Hey! Just tried running that registry cleaner and I got the same error again so I gave up. I decided to run the Avast install exe and it's on my system now. It didn't ask for a reboot whilst I was installing anyway, but I'm going to restart the PC in a bit and see what happens. Keep your fingers crossed for me!
Title: Re: Just a general query
Post by: em1500uk on December 14, 2012, 07:54:28 PM
OK. I've restarted my PC and system loading time seems alright at present. Browsing on Firefox does seem slower than when I was using Avira AntiVir 9, though I guess this is down to the cloud services and auto updates one assumes?

My connection speed on dial up has dropped now though from 45.2kbps/44kbps (which is good for a 56k modem!) to 37.2kbps at present. Not sure if that's got something to do with the awful weather outside (blowing a gale and very rainy right now) or cos of Avast's updating processes.

No alert about tcpip.sys being a bad thing and no notification of anything else bad on my system either so far. Obviously I've been a good girl for the past year and a half since I've had this newer system/hardware!
Title: Re: Just a general query
Post by: mchain on December 15, 2012, 01:16:25 AM
hi

Working with you has been a pleasure.  Any problems with issues, come back here.

Suggest looking below at my sig to see if any of the security programs will work well for you whilst on a dial-up.  At least WOT (Web Of Trust) should be no problem for you.  As for the bandwidth issue, may very well be temporary, but Avast! does use some bandwidth to perform real-time protection for you.  The automatic updates are minimal, ranging from 200Kb to 400Kb, depending on when the twice-thrice daily main updates come in.  Streaming updates (the ones that come in between main updates) are much smaller, and occur much more frequently, up to fifteen times or so a day.
Title: Re: Just a general query
Post by: em1500uk on December 15, 2012, 02:30:15 AM
I thought I'd been left for a moment ;D

Thanks to you and all the other contributers here for your help. I'm sorry for all those questions as my worries may not have been necessary! From using it a bit earlier, it seems OK so far, although when I was updating AdblockPlus in Firefox, I then went to look at something else on the PC whilst it was sorting itself out and the screen froze, meaning I had to force shutdown myself and restart, but I don't think it's anything to worry about. I should've just left it to do one thing at a time. Wires must've got crossed somewhere I reckon.

Still find it odd that the Avira registry cleaner wouldn't work even though I'd installed that other VC++ file. The Avast install used it OK and I'm sure that registry cleaner was meant to work with it too. I did Google it and found a topic on the Avira forum where someone else had the same error and couldn't run it and they'd got the correct VC++. Very strange.

My connection speed went back up to 45.2/44kbps earlier and it's remained connecting at that speed now anyway so it must've been a blip before, either at my ISP or noise on the phone line or something.

I have seen WOT before, but never used it. I did use McAfee site advisor 4-5 years ago or so. It seemed good at first, but then went rubbish so I got rid of it and then never got a replacement. I have disabled Avast's web rep in Firefox itself but haven't uninstalled it. I'll go and take a look at WOT again. I use SpywareBlaster already and that works OK. That's a good small program and never a bother to update for me.