Author Topic: potential virus detected.  (Read 9481 times)

0 Members and 1 Guest are viewing this topic.

Offline duff

  • Jr. Member
  • **
  • Posts: 31
    • electduff.org
Re: potential virus detected.
« Reply #15 on: February 04, 2006, 10:12:30 AM »
Finally, Alanrf, if there are points to be given for problem solving, you get my unfettered vote.  Triumph, baby.  Right on.
Dell Latitude C840 / XPSP2 / ZoneAlarm 6.1.737.000 / Avast 4.6.763 Feb2006 / Privoxy 3.0.3 / HiJackThis 1.99.1 / SpywareBlaster 3.5.1 (5440 items) / SpybotS&D(adv.mode) 1.4 LDU 2006-01-27 / AdAwareSEP build1.06r1 / TCPView 2.40

Too many roads are paved with yellow cake.
My memory is a memory.

Offline duff

  • Jr. Member
  • **
  • Posts: 31
    • electduff.org
Re: potential virus detected.
« Reply #16 on: February 04, 2006, 10:18:03 AM »
Oh.  Also.  Olorin's problem is not solved, & on reflection I completely hijacked his thread, thinking at first that I had the same problem.  Perhaps this can be fixed at the moderator level, with a more appropriate title for my <solved> problem. Such a:
"Default Settings Changes on Update Caused Bothersome Display-Related Program Quirks," perhaps.  =)
Dell Latitude C840 / XPSP2 / ZoneAlarm 6.1.737.000 / Avast 4.6.763 Feb2006 / Privoxy 3.0.3 / HiJackThis 1.99.1 / SpywareBlaster 3.5.1 (5440 items) / SpybotS&D(adv.mode) 1.4 LDU 2006-01-27 / AdAwareSEP build1.06r1 / TCPView 2.40

Too many roads are paved with yellow cake.
My memory is a memory.

Offline duff

  • Jr. Member
  • **
  • Posts: 31
    • electduff.org
Re: potential virus detected.
« Reply #17 on: February 04, 2006, 10:18:55 AM »
as.   "Such as:"
Dell Latitude C840 / XPSP2 / ZoneAlarm 6.1.737.000 / Avast 4.6.763 Feb2006 / Privoxy 3.0.3 / HiJackThis 1.99.1 / SpywareBlaster 3.5.1 (5440 items) / SpybotS&D(adv.mode) 1.4 LDU 2006-01-27 / AdAwareSEP build1.06r1 / TCPView 2.40

Too many roads are paved with yellow cake.
My memory is a memory.

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3866
  • Just an avast user
Re: potential virus detected.
« Reply #18 on: February 04, 2006, 10:40:02 AM »
Duff,

I speak as just an avast user and if I have assisted you a little in detecting your issue then I am glad, but if this switch had been turned on by the latest update for all avast users of Outlook I am sure we would be seeing more comments about it in this forum.  I will leave it to the avast team to ponder how it may have been changed for you.

The only time I have been aware of unexpected changes (for myself and others I support) has been after using the "Repair" function of avast but that has typically involved turning on providers that had previously been turned off.

I hope that avast will continue to behave itself for you. 

As for Olorin ... we will continue to try to find a resolution there too.   

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3866
  • Just an avast user
Re: potential virus detected.
« Reply #19 on: February 04, 2006, 10:48:10 AM »
Olórin,

may we get a little information about your system?  Which operating system do you use?  Do you use a firewall on your system?  If you do which one do you use?

Am I correct in understanding that you do not use any email program on your system to send email?


Offline Olórin

  • Newbie
  • *
  • Posts: 6
Re: potential virus detected.
« Reply #20 on: February 21, 2006, 11:11:35 AM »
Duff,
it's alright that you hijacked my thread. i'm glad everything is well for you now. i have been busy and away from my computer. so i'm get right on my problem now.

i'm using windows 2000 sp4. i'm not using any firewall. and i do not use any email program on my system.

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3866
  • Just an avast user
Re: potential virus detected.
« Reply #21 on: February 21, 2006, 11:34:54 AM »
Olórin,

welcome back to the forum.

First may I just suggest that running without a firewall these days is rather like leaving home with the door unlocked.  Unless you have some other layer of protection I would suggest you review some of the suggestions for free firewall software (use the search function on this forum) here in the forum.  OK no more preaching on that from me.

You have told us that you are not using an email program on your system - so it would be logical to assume that you are not receiving email or sending it and therefore the Internet Mail scanner should not be reporting anything amiss.  I mentioned early in this thread the possibility of an infection on your system by an email spambot.  Such programs now usually have their own built in email software and can sit there and send out messages by the 1000s from your system and for many the first clue to such infection has been a warning from the Internet Mail scanner.

To see if your system really is sending out emails can you please turn on the logging I described in reply #8 in this thread and share with us the log produced.  If the log is very large then just share the early part of it with us.


 


Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3866
  • Just an avast user
Re: potential virus detected.
« Reply #22 on: February 21, 2006, 11:38:51 AM »
I notice you have joined another thread on a similar issue - notice DavidR's comment on firewall - you are in good hands with DavidR and Tech - I'll leave you to it.

Offline Olórin

  • Newbie
  • *
  • Posts: 6
Re: potential virus detected.
« Reply #23 on: February 21, 2006, 12:39:20 PM »
yes, but you're still welcome to help. i wouldn't mind learning a thing or 2. i just needed more help cos i dont really know how to get certain things done on avast. so i'm just asking around anywhere where i could get help. and thanks alot for all you're done. i really appreciate it. :)

Offline Olórin

  • Newbie
  • *
  • Posts: 6
Re: potential virus detected.
« Reply #24 on: February 21, 2006, 12:45:41 PM »
this is the log requested.

02/03/06 07:47:45 000017B0:   Started as service, Log = 1(0x00000001)
02/03/06 07:47:45 000017B0:   Build 4.6.763
02/03/06 07:47:45 000017B0:   Windows 2000 Workstation (Service Pack 4)
02/03/06 07:47:45 000017B0:   Using WinSock 2.0
02/03/06 07:47:45 000017B0:   getnameinfo not loaded 127(0x0000007F)
02/03/06 07:47:46 000017B0:   Tray icon settings changed 0(0x00000000)
02/03/06 07:47:46 000017B0:   AutoRedirect settings changed 1(0x00000001)
02/03/06 07:47:46 000017B0:   IgnoreLocalhost settings changed 1(0x00000001)
02/03/06 07:47:46 000017B0:   POP Start settings changed: 1
02/03/06 07:47:46 000017B0:   POP Listen settings changed: xxx.x.x.x xxxxx
02/03/06 07:47:47 000017B0:   POP RedirectPort: 110
02/03/06 07:47:47 000017B0:   SMTP Start settings changed: 1
02/03/06 07:47:47 000017B0:   SMTP Listen settings changed: xxx.x.x.x xxxxx
02/03/06 07:47:47 000017B0:   SMTP RedirectPort: 25
02/03/06 07:47:47 000017B0:   IMAP Start settings changed: 1
02/03/06 07:47:47 000017B0:   IMAP Listen settings changed: xxx.x.x.x xxxxx
02/03/06 07:47:47 000017B0:   IMAP RedirectPort: 143
02/03/06 07:47:47 000017B0:   NNTP Start settings changed: 1
02/03/06 07:47:47 000017B0:   NNTP Listen settings changed: xxx.x.x.x xxxxx
02/03/06 07:47:47 000017B0:   NNTP RedirectPort: 119
02/03/06 07:47:49 000003C4:    Cannot connect to SMTP server 216.82.240.163 (216.82.240.163:25), connect error 10061
02/03/06 07:47:49 000004B8:    Cannot connect to SMTP server 66.179.26.156 (66.179.26.156:25), connect error 10061
02/03/06 07:47:50 000004A0:    Cannot connect to SMTP server 195.245.231.99 (195.245.231.99:25), connect error 10061
02/03/06 07:47:50 000004C4:    Cannot connect to SMTP server 207.217.120.57 (207.217.120.57:25), connect error 10061
02/03/06 07:47:54 000003C8:   --SMTP Mail is clean
02/03/06 07:47:57 000004B4:   --SMTP Mail is clean
02/03/06 07:47:59 000003C4:   --SMTP Mail is clean
02/03/06 07:48:02 000017B0:   Stopped


when i started this thread, i resolved the issue by stopping the internet mail totally. so there wasn't any activity since. and i just started it just now to check whether it is infected with the spambot.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85383
  • No support PMs thanks
Re: potential virus detected.
« Reply #25 on: February 21, 2006, 04:40:55 PM »
i'm using windows 2000 sp4. i'm not using any firewall. and i do not use any email program on my system.
Unfortunately some malware comes with its own email program, so if avast's Internet Mail provider has been detecting suspicious outbound email, it would appear that you have a malware spambot installed on your system.

So disabling the Internet Mail provider because you don't have an email program installed, just stops you getting the warnings and doesn't stop the outbound email. A good firewall would be able to stop unauthorised outbound connections. You absolutely need a firewall.

Download, install  and run this program, Ewido Security Suite. However, without a firewall you will be fighting an uphill battle.

If you haven't already got this software (freeware), download, install, update and run it.
1. Ad-Aware
2. Spybot Search and Destroy
3. Spywareblaster Don't install this until you are clean.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.5.2470 (build 21.5.6354.675) UI 1.0.646/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline CharleyO

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7085
  • Be alert for error code - ID 10T
Re: potential virus detected.
« Reply #26 on: February 21, 2006, 07:43:30 PM »
***

I really have a difficult time understanding why so many have an aversion to using a firewall.    ???

Most of the free ones run fine just as they are installed without modifing the settings.    :)


***
Self-built desktop (8 years old) - AMD64 3200+_Gigabyte GA-K8NS Ultra-939_4 gb RAM_GeForceFX 5800w/256 ram_XP/SP3_Avast 7_MBAM_ZA Free __and__ Toshiba Satellite Laptop_W7-64bit_ 4 gb Ram_Avast 8_MBAM