files- trojans?

[ereal73]

Malwarebytes scan siad these two files were trojans---afw.sys and afwcore---does anyone know if these are part of AIS? Thank you.

[Pondus]

do you have outpost firewall ?

[Pondus]

upload suspicious file(s) to www.virustotal.com and test with 43 malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/

[ereal73]

No. Ais is only firewall running

[DavidR]

The files that you mentioned in your first post are relater to Agnitum's Outpost Firewall, they are on my system and I'm using Outpost Firewall Pro.

Did you ever have Outpost Firewall installed (not that it isn't running) ?

[ereal73]

Had outpost months ago

[ady4um]

As per the instructions of OA, you need to reinstall OA, reboot TWICE into Windows Normal Mode, then reboot once more into Windows Safe Mode and run the Control Panel "Add/Remove Programs".

If, after that, AIS has any problem, do a repair of Avast ("Add/Remove Programs" -> Avast -> repair -> REBOOT immediately).

If, after that, the firewall has any problem, delete the firewall rules and re-create them.

[ereal73]

thanks to all. Did file search and description of both files says indeed belong to outpost firewall. Manually deleted to recycle bin and rebooted. Ais and everything running fine so far. will wait a while before permanently deleting.

[DavidR]

thanks to all. Did file search and description of both files says indeed belong to outpost firewall. Manually deleted to recycle bin and rebooted. Ais and everything running fine so far. will wait a while before permanently deleting.

I would have checked to see if there was still an entry in add remove programs, etc. If so uninstall, if not, see if there is a specific removal tool on the Agnitum site.

Failing that I would check this site and see if there is a removal tool for the version you had, http://thewebatom.net/uninstallers/security-software/, this has a collection of manufactures removal tools, so that should hopefully remove any remnants, registry, etc.