Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: crofty59 on July 01, 2010, 10:07:05 AM

Title: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 10:07:05 AM
I noticed in Behavior shield there is 1 infected item .
I know the shield monitors all activity on your computer and detects and blocks any unusual activity that might indicate the presence of malware.

Is there any way to find out what was blocked, i checked by clicking on the "show report file" but nothing shows about infections or blocking etc.

I am using Windows xp Pro with SP3 installed.

Cheers
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 01, 2010, 10:24:20 AM
Did you try running any scans to see if anything else is going on?
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 10:29:17 AM
Did you try running any scans to see if anything else is going on?

yes
Ran avast scan , Windows defender and Malwarebytes all clean

Cheers
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 01, 2010, 10:30:25 AM
Where you getting the Behavior shield with the prior build of Avast or is the first time you are seeing it.  I know others were not seeing it until this new build.  I'm not having any problems.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 10:37:27 AM
Where you getting the Behavior shield with the prior build of Avast or is the first time you are seeing it.  I know others were not seeing it until this new build.  I'm not having any problems.

Yes i have had Behavior shield since i have had Avast 5
If i check Behavior shield through "Real Time Shields" button it shows nothing, but if i check through Summary button and click on statistics, then it shows activity like in the attachment i uploaded. 

Cheers
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 01, 2010, 10:42:17 AM
If i check Behavior shield through "Real Time Shields" button it shows nothing, but if i check through Summary button and click on statistics, then it shows activity like in the attachment i uploaded.  

If you click on Behavior shield > Show Report File ... it should give you a new window listing info.  Do you get that window and if so does it give you the name of the infection?

I've never had an infection, so I would hope it is listed here (edited).
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 10:50:56 AM


If you click on Behavior shield > Show Report File ... it should give you a new window listing info.  Do you get that window and if so does it give you the name of the infection?

I've never had an infection, so I would hope it is listed here (edited).

 I clicked and checked there before i posted and no there is no reports of infections there. By the looks i think only a log is generated when you boot the computer.

Cheers
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 01, 2010, 10:55:28 AM
Perhaps you have a FP.  I sent you a PM BTW.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 11:09:19 AM
Perhaps you have a FP.  I sent you a PM BTW.

Could be a FP.
Bye the way i have just noticed that you are now a "avast! Evangelist" Congratulations ;)

Cheers
Title: Re: Behavior shield reports infected item
Post by: YoKenny on July 01, 2010, 11:59:35 AM
@ crofty59

I bet that SafeSurf is female but has not indicated that in her PROFILE but has added system information in the signature.

I do not use Windows Defender on my XP Pro system.

Look at the files in the Virus Chest.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 12:02:35 PM
Hi YoKenny

The Virus chest is empty.

Cheers
Title: Re: Behavior shield reports infected item
Post by: YoKenny on July 01, 2010, 12:16:14 PM
Maybe you did not save the detected file to the Virus Chest ???

I'll have to fire up the XP Pro system to see what I did when I had an infection a while back.

It sure would be helpful if you go to PROFILE then Modify Profile then Forum Profile Information then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 12:24:14 PM
I did not see any pop up about any infection.

I do not think even if i saw a pop up whether there would have been anything to send to the virus chest, as in help it only refers to blocking.

Help File
Behavior shield - monitors all activity on your computer and detects and blocks any unusual activity that might indicate the presence of malware. It does this by continuously monitoring your computer's entry points using special sensors to identify anything suspicious.

Cheers
Title: Re: Behavior shield reports infected item
Post by: YoKenny on July 01, 2010, 12:44:18 PM
This is what I saw when I had a detection that turned out to be a FP when I ran a Full scan on my XP Pro system.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 01, 2010, 02:13:34 PM
I have ran a full scan and nothing shows up.

I suppose all i can do now is assume it was blocked by "Behavior shield" and nothing got on the computer.
Every thing seems fine with the comp.

Thanks for your assistance

Cheers
Title: Re: Behavior shield reports infected item
Post by: RejZoR on July 01, 2010, 08:21:32 PM
That's a lot of activity in BS. Haven't ever seen it so much in daily basis. It's usually just here and there and then nothing for 3 days. But here in your case, the same amount daily. Something looks weird.
Title: Re: Behavior shield reports infected item
Post by: DavidR on July 01, 2010, 09:18:20 PM
That isn't for a day but the Weekly stats. I'm seeing more activity of the Behaviour Shield, typically it is when the system has just started and very little after that. No detections though, not that I expect any.

Title: Re: Behavior shield reports infected item
Post by: sanctuaryforever on July 01, 2010, 11:12:52 PM
Same situation as DavidR, on boot up theres activity but nothing after that and no detections as of yet (not that I personally want to see any :))
Title: Re: Behavior shield reports infected item
Post by: DavidR on July 01, 2010, 11:37:21 PM
Yes it isn't long ago that everyone was saying there is no behaviour shield activity, now they are saying what's all this activity about ;D
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 02, 2010, 06:57:29 AM
Yes it isn't long ago that everyone was saying there is no behaviour shield activity, now they are saying what's all this activity about ;D

Hi
I am not asking about the activity i am having with the behavior shield, but just enquiring is there a way to find out what was the infected item as i do not know what was blocked. ;)

Cheers 
Title: Re: Behavior shield reports infected item
Post by: RejZoR on July 02, 2010, 08:42:36 AM
That isn't for a day but the Weekly stats. I'm seeing more activity of the Behaviour Shield, typically it is when the system has just started and very little after that. No detections though, not that I expect any.



No, i'm talking about huge spikes every day. I don't care how it's displayed, i care what it's displaying... And so many events every day is odd.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 02, 2010, 08:57:09 AM
I am not asking about the activity i am having with the behavior shield, but just enquiring is there a way to find out what was the infected item as i do not know what was blocked.

The OP is trying to find out if he was infected or had a FP.  At this point the answer is unknown.

@ RejZoR, these spikes are not uncommon, and depending on your activity (what you are doing with your machine), you may or may not see more spikes.  I don't think the number of spikes is the issue here, it is as the OP mentioned...does he have an infection or is this a FP.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 02, 2010, 10:12:37 AM
I have just checked the behaviour shield and there is now two infections, going by the shield.
Once again no pop up warning and nothing in the virus chest.

I am now starting to get concerned, once again i can not check.
Can anyone from avast give me a clue to what i could do to check this out.

Once again did scans nothing showed up .

Edit; not sure if this is just a coincidence, but i never received any warnings before i updated to Version 5.0.594
Cheers
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 02, 2010, 10:38:38 AM
I have just checked the behaviour shield and there is now two infections, going by the shield.

I am now starting to get concerned, once again i can not check.
Can anyone from avast give me a clue to what i could do to check this out.

Not sure if this is just a coincidence, but i never received any warnings before i updated to Version 5.0.594.

I'm not sure people were really looking at their Behavior Shield before this build, but I bet they are now.

I think a Avast Team Member, dev. or Vlk should take a look at this.  I'm sure the issue will come up again with others, but it would be nice to be able to help you now.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 02, 2010, 10:50:41 AM

I'm not sure people were really looking at their Behavior Shield before this build, but I bet they are now.

I think a Avast Team Member, dev. or Vlk should take a look at this.  I'm sure the issue will come up again with others, but it would be nice to be able to help you now.

It would be nice  ;D

Cheers
Title: Re: Behavior shield reports infected item
Post by: k.u.r.t on July 02, 2010, 11:29:43 AM
If i check Behavior shield through "Real Time Shields" button it shows nothing, but if i check through Summary button and click on statistics, then it shows activity like in the attachment i uploaded. 

Cheers
Try going to Real Time Shields > Behavior shield and click the "Show report file" button. Does it reveal anything of interest?
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 02, 2010, 11:36:07 AM
All that shows up is when i boot up the computer, shows what time the  Behavior shield started.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 03, 2010, 07:25:20 AM
I don't mean to be pushy, but could anyone answer these

When you get a infected item in   Behavior shield, should there be a pop up warning you.
Should there be a description some where in a log file etc.
Should anything be sent to the Virus Chest or is it just blocked and no file goes anywhere.

Just seems strange if something is blocked, but don't know what it was.

I also ran a boot scan with unpack archives Files, scan for potentially unwanted programs (pups), and Heuristics set high and all was clean.

Cheers
Title: Re: Behavior shield reports infected item
Post by: Torriceli on July 03, 2010, 11:27:21 AM
I got the same problem here (Xp Sp3) in beheviour shield is one infected item but no warning and cant find anything in report file.After a deep scan still nothing.It be nice to know what is hapening.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 03, 2010, 11:40:14 AM
Hi Torriceli,

The problem still has not been resolved.  Do you have free MBAM (Malwarebytes Anti-malware) on your machine http://www.malwarebytes.org/ (http://www.malwarebytes.org/)?  If not, download the free version and run a Full Scan.  If anything comes up positive, report it back here (cut and paste the report).

Otherwise, keep checking back to this thread until we hear from the devs. or the Avast Team as to how to resolve this problem.  Thank you.
Title: Re: Behavior shield reports infected item
Post by: k.u.r.t on July 03, 2010, 04:17:04 PM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 04, 2010, 11:29:12 AM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)

Thanks for you reply.

Yes i have patience

Cheers
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 10, 2010, 03:15:14 AM
I have just recently started using our older computer yesterday. Fully updated
Windows xp Home Edition SP3
Avast Free Edition

I have got the same problem with this computer as with the other one.
And yes i still have patience, just thought it pertinent to inform, that now i am getting it on 2 computers.

Cheers  ;)
Title: Re: Behavior shield reports infected item
Post by: Light Archangel on July 10, 2010, 03:45:14 AM
Hello everyone, my Behavior shield is showing infections like crofty59

It's the only shield that detects something, and i can't see what type of activity was blocked or where was located  ::)

I ran a Full Scan With avast!, Malwarebytes, SUPERAntispyware and all shows clean...

I browse to the same sites, chat with the same people and listen the same music everyday,  and today i looked that the behavior shield blocked "Malicious Activity"
only on: Monday, Thrusday and Friday  :o (Almost the same days of  crofty59)
Coincidence? I don't think so, he lives in Australia and I in the other side of the world! and i'm sure that he don't make the same things that i in my machine...  :P

What's going on?

Thanks for your help to the Question of crofty59 and mine.

BTW: have a happy holidays AVAST Team!  ;D

Greetings
Title: Re: Behavior shield reports infected item
Post by: DavidR on July 10, 2010, 03:59:51 AM
Well I too have XP Pro SP3 and no such detections by the behaviour shield for me.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 11, 2010, 11:28:06 AM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)
I also had a similar problem with the Behavior Shield, however I've run all kinds of scans like Crofty59 and on-demand scans and a behavioral security software, so I know I'm clean.  I'm suspecting this is a FP, but as stated in the quote, we will await the Avast team's investigation.
Title: Re: Behavior shield reports infected item
Post by: DavidR on July 11, 2010, 02:52:58 PM
Are there no details in the Behaviour Shields Report file ?
If not this is a failing that should be rectified in a program or engine update, so that detection information is recorded as it is in the file system shield, etc. etc.
Title: Re: Behavior shield reports infected item
Post by: Light Archangel on July 11, 2010, 11:51:09 PM
There are no details of infection in the report file, except the hour that the shield started (On boot)  ::)
Title: Re: Behavior shield reports infected item
Post by: DavidR on July 12, 2010, 12:12:42 AM
That is what I'm dropping a hint about, the developers need to enter data into the behaviour shield report file on detection otherwise it is worse than useless.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 12, 2010, 07:02:47 AM
That is what I'm dropping a hint about, the developers need to enter data into the behaviour shield report file on detection otherwise it is worse than useless.

You're quite right ;)

I have now had 5 items showing infected in Behavior shield, with no details about any of them.
So i am wondering is all of these a FP or do i have malware on the computer.

Cheers
Title: Re: Behavior shield reports infected item
Post by: Dch48 on July 12, 2010, 07:13:51 AM
My behavior shield only reports 31 items scanned in a week's time and 166 in the last month and has never shown anything infected.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 12, 2010, 07:16:00 AM
My behavior shield only reports 31 items scanned in a week's time and 166 in the last month and has never shown anything infected.

Wish i could say the same :)

Cheers
Title: Re: Behavior shield reports infected item
Post by: gautam7 on July 12, 2010, 08:31:50 AM
Well guyes when i watched the statistics for behaviour shield for for last month it showed nothing. scaned item and infected item everything is zero. is it working at all?? :o

actually my mail shield, antispam, script shield all showing scaned item 0.  ;D whats going on guyes.

i mainly use FF browser, and gmail. this information might help you guys to understand whats happening in my system
Title: Re: Behavior shield reports infected item
Post by: gautam7 on July 12, 2010, 08:33:38 AM
again how can i take a snapshot of this shield so that i can upload it. do i need any software......
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 12, 2010, 10:37:44 AM
gautam7,

Please start a separate thread for your other issues.  This thread is for the Behavior Shield only.  We would be happy to address it there.  Please mention what version of Avast you are using and some information about your machine including any security software you have on your machine.  Thank you.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 12, 2010, 10:56:01 AM
To answer your question DavidR., I can agree with the other posters here that there is absolutely no information given in a Behavior Shield Report File, which is in a Notepad format other than the Behavior Shield "is started."  If you click on Show Traffic History, you can detail it down to the day, and scroll your mouse over it to pinpoint the time, but other than that you get no additional information.

Crofty and I have both run the usual complete Avast scans (Full and Boot), on-demand scanners, and I have a behavioral scanner...all come out clean. 

I PM'd the Avast Team to alert them of the situation but have heard nothing back other than the post you see above and we are being politely patient.  But as you can see, it is happening to others who are now being more observant.  I do believe this is something that has to be investigated by the devs., as you can see from my initial posts.
Title: Re: Behavior shield reports infected item
Post by: YoKenny on July 12, 2010, 12:23:35 PM
again how can i take a snapshot of this shield so that i can upload it. do i need any software......

As you do not have anything in your signature it is hard to recommend how to take a snapshot of the shields.

You could go to PROFILE then Modify Profile then Forum Profile Information then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice.
Title: Re: Behavior shield reports infected item
Post by: TheRedGuy on July 30, 2010, 02:54:15 AM
I have had the same but with 2 instances of infections showing but no way of knowing what they are. Has this issue been resolved at all?

all scans come up clean but avast 5 has no log for the behaviour shield that shows what the infections were
Title: Re: Behavior shield reports infected item
Post by: Light Archangel on July 30, 2010, 06:09:23 AM
We are waiting for an answer  ::)
Title: Re: Behavior shield reports infected item
Post by: crofty59 on July 30, 2010, 07:48:13 AM
I have now had 12 items showing infected in Behavior shield, with no details about any of them.

Would be nice to know if i have a real problem 0n the comp, or just FP with behavioral shield.

Cheers :)
Title: Re: Behavior shield reports infected item
Post by: Snagglegrain on July 30, 2010, 10:10:13 PM
I also have 12 infected items showing in the Behavior Shield for the last one month.
No explanations or reports as to what these infections may have been.
--> In case it's relevant, 1951 items have been scanned since March 2008.
Title: Re: Behavior shield reports infected item
Post by: fr.grieco on July 30, 2010, 11:45:23 PM
Same situation here. 18 infected items in the last month, none before.



Title: Re: Behavior shield reports infected item
Post by: Dch48 on July 30, 2010, 11:52:29 PM
Still nothing here since I installed Avast! back in early May. Only 402 items have been scanned in that time.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on July 31, 2010, 09:02:04 AM
My Behavior Shield has been working all along when others complained it wasn't working, so I have 2,033 items scanned over the past year, with 7 "infected items."  I'd still like to know what this means since the reports are meaningless and on-demand scanners indicate no problem.  It would be nice to know if this will be fixed with 5.1 or prior to that.

Title: Re: Behavior shield reports infected item
Post by: Diazruanova on August 08, 2010, 03:36:31 PM
Same problem here and still no answers from avast?
Title: Re: Behavior shield reports infected item
Post by: crofty59 on October 03, 2010, 07:57:20 AM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)

Just curious has there been any developments with this problem.
I am still having the same problem.

Cheers
Title: Re: Behavior shield reports infected item
Post by: Dch48 on October 03, 2010, 09:09:26 AM
Okay I now have two items showing as being blocked by the Behavior Shield but there's no information anywhere as to what they were or why they were blocked.
Title: Re: Behavior shield reports infected item
Post by: SafeSurf on October 03, 2010, 09:28:56 AM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)
I agree...problem still exists.  Can Avast let us know if this is going to be fixed with the 5.1 release for all OS's?
Title: Re: Behavior shield reports infected item
Post by: polled on October 03, 2010, 02:05:36 PM
I can't see the details of the 2 items that were blocked by the Behavior Shield either.
Title: Re: Behavior shield reports infected item
Post by: crofty59 on October 09, 2010, 01:56:35 AM
The team will be investigating this issue but please have patience as it is the holiday season right now and so the answer might take some time 8)

Just curious has there been any developments with this problem.
I am still having the same problem.

Cheers
I do believe i am patient, but it has now been over 3 months since a reply from avast.
In my opinion this is not very good public relations.

Please don't reply they may be to busy etc.

Cheers 
 
Title: Re: Behavior shield reports infected item
Post by: moonshadows on November 09, 2010, 05:57:44 PM
MY BEHAVIOR SHOWS 18 INFECTED ITEMS AND I GET BOOTED OFF MY COMP. ALOT I RAN BOOT SCANS THE SCANNERS DONT PICK UP ANYTHING .. BUT WHEN I GET BOOTED OFF MY COMP.. WHEN I GET BACK ON THE COMP.. I CHECK THE AVAST SHIELDS AND ITS THE SAME TIME THE AVAST SHIELD PICKS UP A INFECTION .. BUT IT DONT EVER SAY WHAT IT IS ..

I AM RUNNING WINDOWS XP SP3
HAVE ALL UPDATES EVEN PUT IN A NEW INSTALL OF WINDOWS RAN GREAT FOR A FEW DAYS THEN THE SHIELD STARTED PICKING UP INFECTIONS AGAIN.. AND NOW I GET BOOTED AGAIN GRRRR

HELP :'(
Title: Re: Behavior shield reports infected item
Post by: Lisandro on November 09, 2010, 10:57:35 PM
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! (http://www.freedrweb.com/cureit/) instead.
3. Use MBAM (http://malwarebytes.org/mbam.php) (or SUPERantispyware (http://www.superantispyware.com) or even Spyware Terminator (http://www.spywareterminator.com/)) to scan for spywares and trojans. If any infection is detected, it is better and safer to send the infected file(s) to quarantine (Chest), rather than simply deleting them.
4. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest avast! antirootkit (http://files.avast.com/files/beta/aswar.exe) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
5. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or this analysis site (http://www.hijackthis.de/#anl). Or even submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
6. Clean your Hosts file (replacing it) with HostsMan (http://www.abelhadigital.com) tool.
7. Disable System Restore and then reenable it again.
8. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html).
9. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).
Title: Re: Behavior shield reports infected item
Post by: YoKenny on November 09, 2010, 11:31:57 PM
moonshadows

Check your Caps Lock key as you appear to like to SHOUT.
Title: Re: Behavior shield reports infected item
Post by: moonshadows on November 10, 2010, 01:20:22 PM
Sorry about caps ..i am downloading Dr.Web now i now have 21 infections
Title: Re: Behavior shield reports infected item
Post by: moonshadows on November 10, 2010, 02:13:19 PM
here is my hijack this scan


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:05:19 AM, on 11/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Qwest\Quickcare\bin\sprtcmd.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [QuickCare] C:\Program Files\Qwest\Quickcare\bin\sprtcmd.exe /P QuickCare
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6770.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1287671081453
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1288064999781
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} (DellSystemLite.Scanner) - http://support.dell.com/systemprofiler/DellSystemLite.CAB
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SupportSoft Listener Service (sprtlisten) - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\sprtlisten.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe

--
End of file - 5535 bytes
Title: Re: Behavior shield reports infected item
Post by: moonshadows on November 10, 2010, 02:17:59 PM
I ran DrWeb CureIT! it found 1 object but it was my dsl service didnt no what to do with it ,so i just closed it off .

Ran the Secunia scanner the Result

Detection Statistics:
8 Applications Detected in Total
2 Insecure Versions Detected
6 Patched Versions Detected

I been scanning everything i have over and over,but i did notice one thing that is very odd ,i only get booted off my comp. when i am on Yahoo Messenger talking to my boyfriend. i took Yahoo out and redid it but it still happenes ,Why i no its comming from there i had my comp. on for the last few days without yahoo,no comp shut down, but when i sign into yahoo and start talking to him, within the hour my comp. shuts down. Can anyone help on this problem? i only talk to him on there .
Title: Re: Behavior shield reports infected item
Post by: Charyb-0 on December 03, 2010, 05:51:39 AM
I would like to hear some type of response on this. It has been posted since the beginning of July and no one from Avast has responded since the 3rd of July. How about, "A fix is in the works", or "Reporting issues will be fixed in 5.1"? Something???
Title: Re: Behavior shield reports infected item
Post by: crofty59 on December 03, 2010, 06:29:05 AM
I would like to hear some type of response on this. It has been posted since the beginning of July and no one from Avast has responded since the 3rd of July. How about, "A fix is in the works", or "Reporting issues will be fixed in 5.1"? Something???

Wish you luck, I have lost faith with their support, (Avast Personnel)on the forum plus their support tickets, been waiting nearly 3 months.

Cheers 
Title: Re: Behavior shield reports infected item
Post by: Charyb-0 on December 03, 2010, 04:36:01 PM
It makes absolutely no sense to me why Avast just blows this off. The forum helps thousands of people to understand and to solve problems regarding Avast. Not saying that all problems reported on this forum are caused by Avast. How about, instead of using the forum to solve problems, everyone submit a support ticket? I don't think this would be good use of Avast's time and resources. A simple response on the forum by an Avast team member can resolve an issue for hundreds of users therefore reducing the amount of support tickets generated. One solution on the forum versus an unknown amount of support tickets generated? I would choose the "one solution on the forum". It's also a matter of common courtesy to respond in a timely manner. There are many good folks on this forum helping to solve problems so you (Avast) don't have to spend the time and resources in dealing with it. How about showing a little appreciation for this by providing solutions on the forum for the problems that can not be solved by Avast users?

This topic now has 5000 views.
Title: Re: Behavior shield reports infected item
Post by: moonshadows on December 16, 2010, 12:50:20 AM
I gave up waiting for a answer, i ended up buying another comp. :-[