NOD32 Scan Flagged These Two

Discussion in 'NOD32 version 2 Forum' started by Piper, Dec 19, 2004.

Thread Status:
Not open for further replies.
  1. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA
    I'm running the trial version of NOD32. I just installed it yesterday. I was previously running McAfee. I uninstalled it and cleaned out the registry before installing NOD32.

    Today, my wife started up the computer and went to check for new e-mail. We use IncrediMail. Just as the e-mail was coming in, NOD32's scanner popped up and started scanning. I didn't set up any scheduled scans yet. NOD32 flagged these two..........

    C:\Windows\$NtServicePack Uninstall$\related.htm.Win32/Adware.Alexa Application

    C:\Program Files\SpyBot - Serch & Destroy\Dummies\dummy.related.htm - Win32 Adware.Alexa.Application


    On both, NOD32 said it could not clean, so I deleted. Not sure what these are or why NOD32 started a virus scan. I wasn't near the computer when she started it, and she didn't watch that closely, so I'm not to sure of all the delails. Can anyone help? :)
     
    Last edited: Dec 19, 2004
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
  3. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA
    I Still can figure out how NOD32 started doing a full scan on its own. I didn't start it, and I know my wife didn't. Very weird. o_O
     
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    My pleasure.

    Cheers :D
     
  5. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA
    You were too fast for me Blackspear. :) Any ideas on my post #3?
     
  6. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    We are seeing a few oddities amongst this issue, will have to wait for Marcos, Jan or Bandicoot to come along...

    Are you sure you haven't got a scheduled scan on your system, and maybe it missed one, hence upon next boot it starts?

    Cheers :D
     
  7. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA


    Contrary to what I said in my OP, I did set up a schedule scan. I forgot I did that. Too many things going on. :doubt: I set it to scan weekly and to start on Monday the Dec. 20. How it started on the 19th, I don't know.
     
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Generally if it misses a scan due to the computer not being on, then it will do so upon next boot.

    Cheers :D
     
  9. Detox

    Detox Retired Moderator

    Joined:
    Feb 9, 2002
    Posts:
    8,507
    Location:
    Texas, USA
    Hm well I found (after I discovered NOD finding the Spybot dummy during a scan) that NOD also went off when I was scanning the system with Spybot - twice in a row, in fact. So, activation of "access" of that file should cause AMON or IMON to kick off in such a manner, maybe o_O
     
  10. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA
    Man, now I even got the dates all screwed up. I think the Christmas shopping is getting to me. :D
     
  11. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Yeah odd stuff happening, see post number 7 here:

    https://www.wilderssecurity.com/showthread.php?t=59088

    Will have to wait for Slovakia to awaken in about 4 ½ hours time...

    Cheers :D
     
  12. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA

    That sounds good to me. :)
     
  13. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA
    I just want to say thanks for the help. I'm noob to NOD32 and trying to learn. I set it up according to Blackspears suggestions. I'm finding it easier to configure than I thought it would be. So far I like it a lot. I just wanted to make sure what happened today wasn't something I did.
     
  14. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Nah, it's an oddity, and something we'll get to the bottom of shortly. We just have to wait for those Slovakians to wake from their slumber ;) :D

    Cheers :D
     
  15. Piper

    Piper Registered Member

    Joined:
    Dec 18, 2004
    Posts:
    34
    Location:
    California, USA

    :) :)
     
  16. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    Correct me if I am wrong, but I thought AMON was NOT supposed to detect spyware and the like. I thought they fell under "potentially dangerous applications" and only an on demand scan with NOD32 was supposed to detect these types of things. What gives? Did they change this and not tell us or did I miss it?
     
  17. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    This appears to have been found throuh a scheduled scan which poped up:

    Cheers :D
     
  18. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    Sorry Blackspear, I posted in the wrong thread about this detection, in this thread it is CLEARLY detected by AMON as the poster even included a screen shot of the AMON warning box.

    https://www.wilderssecurity.com/showthread.php?t=59043

    Maybe the MODs should try to make this into one thread to diminish the confusion, as these two threads are the same subject, or at least the same detection although one is an on access detection and the other an on demand so I guess there is a difference.
     
  19. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    LOL, that's ok, there are 2 many threads on this subject, making my head ache ;) :D

    And yes, AMON sprung into action on that thread, I wonder if it did so because a signature was written before they had PDA's in a seperate database (well that's what it appears to be, or a flag of some sort that can be switched on or off).

    Cheers :D
     
  20. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    It was just added in the latest update 1.953,

    NOD32 - v.1.953 (20041219)
    Virus signature database updates:
    IRC/SdBot.CSD, IRC/SdBot.CSE, IRC/SdBot.CSF, Win32/Adware.Alexa, .....
     
  21. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Then I have no idea whatsoever, unless AMON somehow picks up part of your settings as in to use PDA's if you have it ticked in IMON.

    Cheers :D
     
  22. jayt

    jayt Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    345
    Location:
    PA - USA
    Well, are they awake yet? And what is the status of this problem. It seems that practically everyone is having it. I did a scan last night and got the pop up as well.
     
  23. jayt

    jayt Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    345
    Location:
    PA - USA
    Gee- is today a holiday or something. I don't even see Blackspear, no Marcos, no nothing. :p
     
  24. Shaker

    Shaker Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    153
    Location:
    Norther California

    It is Christmas week. The whole NOD32 support system wouldn't shut down would they? o_O Let's hope not. :(
     
  25. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    LOL, believe it or not, I do sleep ;) :D

    I too am still waiting on a solution to this problem...

    Cheers :D
     
Thread Status:
Not open for further replies.