NOD32 Scan Flagged These Two

I'm running the trial version of NOD32. I just installed it yesterday. I was previously running McAfee. I uninstalled it and cleaned out the registry before installing NOD32.

Today, my wife started up the computer and went to check for new e-mail. We use IncrediMail. Just as the e-mail was coming in, NOD32's scanner popped up and started scanning. I didn't set up any scheduled scans yet. NOD32 flagged these two..........

C:\Windows\$NtServicePack Uninstall$\related.htm.Win32/Adware.Alexa Application

C:\Program Files\SpyBot - Serch & Destroy\Dummies\dummy.related.htm - Win32 Adware.Alexa.Application


On both, NOD32 said it could not clean, so I deleted. Not sure what these are or why NOD32 started a virus scan. I wasn't near the computer when she started it, and she didn't watch that closely, so I'm not to sure of all the delails. Can anyone help?

 

This is being discussed here:

https://www.wilderssecurity.com/showthread.php?t=59043

and here:

https://www.wilderssecurity.com/showthread.php?t=59070

Cheers

 

I Still can figure out how NOD32 started doing a full scan on its own. I didn't start it, and I know my wife didn't. Very weird.

 

My pleasure.

Cheers

 

You were too fast for me Blackspear. Any ideas on my post #3?

 

We are seeing a few oddities amongst this issue, will have to wait for Marcos, Jan or Bandicoot to come along...

Are you sure you haven't got a scheduled scan on your system, and maybe it missed one, hence upon next boot it starts?

Cheers

 

Contrary to what I said in my OP, I did set up a schedule scan. I forgot I did that. Too many things going on. I set it to scan weekly and to start on Monday the Dec. 20. How it started on the 19th, I don't know.

 

Generally if it misses a scan due to the computer not being on, then it will do so upon next boot.

Cheers

 

Hm well I found (after I discovered NOD finding the Spybot dummy during a scan) that NOD also went off when I was scanning the system with Spybot - twice in a row, in fact. So, activation of "access" of that file should cause AMON or IMON to kick off in such a manner, maybe

 

Man, now I even got the dates all screwed up. I think the Christmas shopping is getting to me.

 

Yeah odd stuff happening, see post number 7 here:

https://www.wilderssecurity.com/showthread.php?t=59088

Will have to wait for Slovakia to awaken in about 4 ½ hours time...

Cheers

 

That sounds good to me.

 

I just want to say thanks for the help. I'm noob to NOD32 and trying to learn. I set it up according to Blackspears suggestions. I'm finding it easier to configure than I thought it would be. So far I like it a lot. I just wanted to make sure what happened today wasn't something I did.

 

Nah, it's an oddity, and something we'll get to the bottom of shortly. We just have to wait for those Slovakians to wake from their slumber

Cheers

 

Correct me if I am wrong, but I thought AMON was NOT supposed to detect spyware and the like. I thought they fell under "potentially dangerous applications" and only an on demand scan with NOD32 was supposed to detect these types of things. What gives? Did they change this and not tell us or did I miss it?

 

This appears to have been found throuh a scheduled scan which poped up:

Cheers

 

Sorry Blackspear, I posted in the wrong thread about this detection, in this thread it is CLEARLY detected by AMON as the poster even included a screen shot of the AMON warning box.

https://www.wilderssecurity.com/showthread.php?t=59043

Maybe the MODs should try to make this into one thread to diminish the confusion, as these two threads are the same subject, or at least the same detection although one is an on access detection and the other an on demand so I guess there is a difference.

 

LOL, that's ok, there are 2 many threads on this subject, making my head ache

And yes, AMON sprung into action on that thread, I wonder if it did so because a signature was written before they had PDA's in a seperate database (well that's what it appears to be, or a flag of some sort that can be switched on or off).

Cheers

 

It was just added in the latest update 1.953,

NOD32 - v.1.953 (20041219)
Virus signature database updates:
IRC/SdBot.CSD, IRC/SdBot.CSE, IRC/SdBot.CSF, Win32/Adware.Alexa, .....

 

Then I have no idea whatsoever, unless AMON somehow picks up part of your settings as in to use PDA's if you have it ticked in IMON.

Cheers

 

Well, are they awake yet? And what is the status of this problem. It seems that practically everyone is having it. I did a scan last night and got the pop up as well.

 

Gee- is today a holiday or something. I don't even see Blackspear, no Marcos, no nothing.

 

It is Christmas week. The whole NOD32 support system wouldn't shut down would they? Let's hope not.

 

LOL, believe it or not, I do sleep

I too am still waiting on a solution to this problem...

Cheers