Avast WEBforum

Other => Viruses and worms => Topic started by: mohan on September 07, 2010, 12:29:16 AM

Title: FP - SDFix.exe
Post by: mohan on September 07, 2010, 12:29:16 AM
Please download SDFix.exe from http://downloads.andymanchesta.com/RemovalTools/SDFix_ReadMe.htm. its marked as Win32-Shutdowner-CD[PUP]

SDFix\apps\RestartIt!.exe|>[UPX] [L] Win32:Shutdowner-CD [PUP] (0)
File was successfully moved to chest...


Regards
Title: Re: FP - SDFix.exe
Post by: DavidR on September 07, 2010, 01:23:07 AM
You could have kept this with your other topic as it is basically the same.

As I said there:
Clearly not a false positive as it can a) restart your system and b) it is flagged as a PUP Potentially Unwanted Program. The restart function in the hands of a malicious attack would be one use of the tool, but in the case of SDfix would be if it is required to restart the system to remove in use malware, etc.

So you could chose not to do anything (block) since you downloaded it. It would of course be detected next time round, so you would have to exclude it from scan if you wish to keep it.

However, there is little benefit in keeping this tool lying around if you have used it, these types of tools should be downloaded before they are used (that way you have the latest version) if you suspect you have the infection it deals with.

Another point you are doing a custom scan as PUPs aren't scanned for by default.
Title: Re: FP - SDFix.exe
Post by: polonus on September 07, 2010, 01:29:01 AM
Hi mohan.

Well there is even more to add. Not for nothing it is advised before you run mentioned tool to turn off / disable your av scanner (because it could detect as possibly unwanted program in the case you did not willfully install it yourself), same goes for the other finds you mentioned in separate threads,

polonus
Title: Re: FP - SDFix.exe
Post by: mohan on September 07, 2010, 07:07:54 AM
---double posting - sorry.

Thanks David, I guess my problem stems my issue with the Ask and Chest options not working the way ideally I would understand them to work as
http://forum.avast.com/index.php?topic=59281.msg537597#msg537597, I'll lock this topic down.

Thanks polonus for your response.
Title: Re: FP - SDFix.exe
Post by: DavidR on September 07, 2010, 03:51:33 PM
No problem, I have given a bit of information on how there are differences on the on-access and on-demand processing of detections in your other topic.
Title: Re: FP - SDFix.exe
Post by: essexboy on September 07, 2010, 09:46:02 PM
SDFix and Smitfraud fix have not been updated for several years now.  So they are no longer effective
Title: Re: FP - SDFix.exe
Post by: polonus on September 07, 2010, 09:48:08 PM
Hi essexboy,

So they are better being abandoned, as I take it correct, good thanks for that info,

Damian
Title: Re: FP - SDFix.exe
Post by: essexboy on September 07, 2010, 11:31:02 PM
They have a very limited effectiveness now as malware has progressed
Title: Re: FP - SDFix.exe
Post by: hstpctech on October 14, 2010, 04:53:27 AM
If sdfix.exe is outdated and ineffective, is there something I can revert to? And also the link to sdfix.exe is a 404; the file is no longer available. I got it from megaupload, but was flagged with appl/prcview.e by Avira. In the meantime, there's still an undetected virus on my PC.