Author Topic: NET.EXE tries to shut off avast and windows firewall  (Read 2120 times)

0 Members and 1 Guest are viewing this topic.

jjs

  • Guest
NET.EXE tries to shut off avast and windows firewall
« on: June 27, 2012, 11:35:43 AM »
Hi,
NET.EXE tries to shut off avast and windows firewall, what should i do.
It is not detected by avast or S&D.

thanks for any help.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: NET.EXE tries to shut off avast and windows firewall
« Reply #1 on: June 27, 2012, 11:41:07 AM »
upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url and post it here for us to see

alternative.  jotti.org / virscan.org / metascan-online.com
« Last Edit: June 27, 2012, 11:42:40 AM by Pondus »

true indian

  • Guest
Re: NET.EXE tries to shut off avast and windows firewall
« Reply #2 on: June 27, 2012, 11:41:53 AM »
Send the file to avast labs...

Open avast! user interface>>maintainence>>chest>>right click>>click add>>browse the file net.exe>>click open>>it will be added to virus chest>>right click on the net.exe file in chest>>click send to virus lab>>update definations manually>>rescan the file after next VPS to see if detected>>if not send it again..>>and do the process so on until it is detected

NEXT

If U are not able to remove the malware....make a seprate topic in viruses and worms section of the forum

follow the guide: http://forum.avast.com/index.php?topic=53253.0

and attach all logs here  ;)
« Last Edit: June 27, 2012, 11:47:11 AM by true indian »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33920
  • malware fighter
Re: NET.EXE tries to shut off avast and windows firewall
« Reply #3 on: June 27, 2012, 11:55:40 AM »
Hi jjs,

Net.exe could be a process that comes with malware known as w32.dabber.c worm.
This might have come together with an e-mail message you opened recently.
See description here: http://www.liutilities.com/products/wintaskspro/processlibrary/net/
If this scenario rings some bells and the proposed scan by Pondus does not show you that you have the legit net.exe,
indeed go here: http://forum.avast.com/index.php?topic=53253.0
Provide the logs asked for there and a qualified removal expert will have a look
and help you with the cleansing the malcode from your machine,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!