Author Topic: "Win32. Small.NNE"  (Read 901 times)

Offline firmpillow

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
"Win32. Small.NNE"
« on: August 14, 2012, 05:56:47 PM »

"Trojen downloader (Win32:Small.NNE) blocked... Avast! often says.

and sometimes (Url:Mal).

this below is a link to a picture of the one of the warnings
                     
http://sphotos-b.xx.fbcdn.net/hphotos-snc7/417381_497284643616906_93941884_n.jpg

Is it a false positive?
http://software.visicommedia.com/en/products/antiphishing/

Kwartet! said:
Quote
Ah, the visicom thingy.

The same problem showed up on the Dutch forum a few days ago (https://forum.avast.com/index.php?topic=102980.0).

Visicom_antiphising intends to block phishing attempts and, according to their website hxxp://software.visicommedia.com/en/products/antiphishing/ they are using Panda malware definitions. Most likely, this is a false positive caused by the fact that Panda (still?) does not encrypt their definitions.

It is obvious that visicom cannot work when avast blocks it from downloading definitions. Did avast store the definitions file in its viruschest? If so, it could be uploaded to virustotal. And maybe from the viruschest to avast as being a false positive.

Regards,
[/i][/u]

but why would it specifically give warning for trojens.? I am confused, a little help?
"Ad-aware" and "windows defender" detects nothing, in my main files, ...

Do I do a system restore to yesturday, or further?
« Last Edit: August 14, 2012, 06:43:25 PM by firmpillow »

Offline Pondus

  • avast! √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 21774
  • Gender: Male
    • Personal Message (Offline)
Re: "Win32. Small.NNE"
« Reply #1 on: August 14, 2012, 07:08:00 PM »
Do a forum search on visicom
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.


Offline Kwartet!

  • Full Member
  • ***
  • Posts: 175
  • Gender: Male
    • Personal Message (Offline)
Re: "Win32. Small.NNE"
« Reply #2 on: August 14, 2012, 07:26:14 PM »
Hi firmpillow,

Consensus seems to be that Panda antivirus should be blamed for not encrypting their malware definitions. http://forum.avast.com/index.php?topic=103158.0, and then the later entries.

Ad-aware and Windows Defender don't find anything on your harddisk, since avast Web shield (see the warning you uploaded) blocked this download. Hurray for webshield.

Webshield generates a report file C:\Documents and Settings\All users\Application Data\AVAST Software\Avast\report\webshield.txt that, on my pc, only contains gems like the following:
*
* avast! Real-time Shield Scan Report
* This file is generated automatically
*
* Started on: Tuesday, August 14, 2012 4:20:27 PM
*
Hey, at least it should not say Real-time shield, but Webshield. But I digress, maybe you could find something meaningful in this file.

Avast virus chest same story: some files that were placed there from scans, nothing from webshield.


Why trojans? Since visicom is not an antivirusprogram, I suppose they omit virus definitions from their signature files?

No need to restore your system, just uninstall visicom, whatever it is named.


Regards,
Athlon64x2, 2GB, XPProSP3, 32 bit | Windows Firewall | FF15 sandboxed by Avast, NoScript, TrafficLight, WOT | AIS7.0.1466, EMET, USB-set | MBAM (on-demand)

Offline firmpillow

  • Newbie
  • *
  • Posts: 5
    • Personal Message (Offline)
Re: "Win32. Small.NNE"
« Reply #3 on: August 14, 2012, 11:14:43 PM »
Thanks!!!.... I just found that out. by reading enough other people posts....and your conclusions, to them.
So I went ahead and uninstalled the anti-phishing via..com thing.

So...No alerts...I'm glad no virus(s).
Thanks for getting around to my question...anyway!!

Wonderful job you (the 2 or 3 involved).
I am impressed...elatedly ...in the end. :D :D  ;D
Thanks...!
(I got the paid version of Avast now...in the meantime so ...even better)

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now