Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: BobbyZee67 on June 26, 2010, 02:26:10 PM
-
Regretably have had to uninstall Avast5,loved everything about it except that each time I've ran it I've experienced warnings that a certain Windows\system32\mbamswissarmy.sys file was a hidden rootkit rogue problem.
No Avast scans replicated this detection and neither did MSE. At present I am running Avira Antivir and as yet, no problems. Incidentally, I also run SuperAntispyware(realtime protection), and Malwarebytes(realtime protection) disabled without a hint of an infection.
I'm wondering whether the Avast warning was caused by the fact that on both occasions I uninstalled MSE and installed Avast5, I neglected to disable Windows Defender, I also think the checkbox was ticked for Defender to run in realtime. I would certainly appreciate any thoughts on this problem as I would certainly like to return to Avast5.
Cheers.
BobbyZee67
-
It's a MBAM file detected as false positive by avast.
Two residents could conflict. I think three are overkilling...
-
Many thanks for your reply Tech, have posted two or three times before with this problem, even suggesting that it might[be a FP but I had been told to do many things but no suggestion that it probably was an FP.
I never intended to run Defender, I presume each time I installed MSE, it disabled Defender but when I uninstalled MSE, Defender was re-enabled and with realtime protection in addition-overkill, running with Avast5, SuperAntispyware Pro and MBAM!
Cheers Tech,
BobbyZee67[/u]
-
I do not have a problem with avast! V5 and MBAM.
You do not indicate your operating system and Service Pack level in your posts.
I do not use Windows Defender on my XP Pro system.
I keep Windows Defender updated through its portal:
Latest definition version: 1.85.898.0
http://www.microsoft.com/security/portal/Definitions/ADL.aspx
-
It's a MBAM file detected as false positive by avast.
Two residents could conflict. I think three are overkilling...
+1
asyn
-
Avast Pro 5 and MBAM run well on my laptop. It is a W XP. I also run Win Patrol, and Online Armor free firewall. It is a good combination for me.
Regards,
Jerry
-
I also use Mbam/Avast!, never had this detection.
Do a forum search on mbamswissarmy.sys, others have had this who, according to them, only have mbam free.
So turning off Mbam shields when you scan might not make a difference. This has also been submitted as a FP, gone away, then returned.
If you think it might be infected you could upload it here for peace of mind>>http://www.virustotal.com/ (http://www.virustotal.com/)
If it comes back clean, you can try adding it to both Avast! exclusion lists (main settings&file system shield)
-
I would like to thank Tech, YoKenny and others for advice for which I appreciate very much. However, entering mbamswissarmy.sys file into "search box", I see that I'm not the only person who's had this problem! Like I've said before, Avast would be my choice of AV program but until I can be sure that this inherent fault is fixed, I'll have to stick with Avira. This file may well be a FP but with each warning I'm forced to uninstall/reinstall MBAM.
OS: Vista Home Premium SP2,Windows Firewall,MBAM(paid/realtime protection disabled), Avira Antivir Personal and SuperAntispyware Pro.
Cheers all,
BobbyZee67
-
BobbyZee67 I have that file on my computer and Avast is not detecting it
as malware. I have been using Avast for 3 months and that file has never
been detected. Mine is located in System32/Drivers and I have the free
version of MBAM.
Bo
-
If you want to ditch your AV due to a single harmless FP, I suppose that is up to you.
This is a security program FP, not a system file or anything vital. As I said, its been submitted before as a false, Avast! is very quick to address fp's from what I have seen. The fact that the detection returns and it is rare says to me some odd circumstance is involved, like updating one while the other is scanning?
Still, your system, your choice. :)
-
BobbyZee67 I have that file on my computer and Avast is not detecting it
as malware. I have been using Avast for 3 months and that file has never
been detected. Mine is located in System32/Drivers and I have the free
version of MBAM.
Bo
Same here, Avast! has never detected it as malware.
-
I also had to uninstall IS paid V.5, as after restart I am getting "logon' errors on logging into W XP. Also the firewall will not load. Have submitted ticket but no response as yet!
How to solve this issue!
-
I also had to uninstall IS paid V.5, as after restart I am getting "logon' errors on logging into W XP. Also the firewall will not load. Have submitted ticket but no response as yet!
How to solve this issue!
You can try the latest PR build...
http://forum.avast.com/index.php?topic=61045.0
asyn
-
I also had to uninstall IS paid V.5, as after restart I am getting "logon' errors on logging into W XP. Also the firewall will not load. Have submitted ticket but no response as yet!
How to solve this issue!
You can try the latest PR build...
http://forum.avast.com/index.php?topic=61045.0
asyn
Tried that but still am getting "Unable to start Firewall!" message.
-
Tried that but still am getting "Unable to start Firewall!" message.
Which other security related software is installed..??
asyn
-
@ BobbyZee67
I see Avira Antivir Personal
so you need to ask for help in Avira Forum.
-
Tried that but still am getting "Unable to start Firewall!" message.
Which other security related software is installed..??
asyn
Windows Defender..all the others have already been removed...
-
Many thanks for your reply Tech, have posted two or three times before with this problem, even suggesting that it might[be a FP but I had been told to do many things but no suggestion that it probably was an FP.
I never intended to run Defender, I presume each time I installed MSE, it disabled Defender but when I uninstalled MSE, Defender was re-enabled and with realtime protection in addition-overkill, running with Avast5, SuperAntispyware Pro and MBAM!
Cheers Tech,
BobbyZee67[/u]
I agree with Gargamel360, upload the file to virustotal, and when it comes clean exclude it to avoid any conflicts.
Generally speaking, I always try to avoid running multiple realtime scanners that covers same areas . If my AV finds a treat, that for instans SAS, MBAM and Defender also covers, the last thing that I want is a conflict with cleaning that treat.
-
Windows Defender..all the others have already been removed...
Run this in safe mode. http://www.avast.com/uninstall-utility
Reinstall avast afterwards.
Report back.
asyn
-
BobbyZee67 I don't know for how long you will be willing to put up with that
mess called Avira10 but most likely you will uninstall it in a short time. False
positives happens and they have to happen and we,the users, just have to
learn how to handle them. Once you learn how to deal with detections it is
very easy to know the difference between malware and false positives.
I have used both Anti virus applications and Avast to this day it has not made
any erroneous detections but with Avira9 I had 12 false positives in the year
that I used it.
I never get infected and don't depend on my AV to keep me clean but if you
do,then you are better protected by Avast than Avira because of the extra
shields you have with Avast that you don't have with Avira.
Hope to see you back Bobby.
Bo
-
Windows Defender..all the others have already been removed...
Run this in safe mode. http://www.avast.com/uninstall-utility
Reinstall avast afterwards.
Report back.
asyn
did all that but after reboot am still cannot login and am getting the "Logon Process Initialization Failure" has failed message. This is getting really ridiculous, after paying $57 and have to go 6 uninstalls is really a joke, whilst my free version 4.8 was working perfectly. I regret now paying for it.
-
did all that but after reboot am still cannot login and am getting the "Logon Process Initialization Failure" has failed message. This is getting really ridiculous, after paying $57 and have to go 6 uninstalls is really a joke, whilst my free version 4.8 was working perfectly. I regret now paying for it.
Please contact avast..!
http://www.avast.com/contacts
asyn