Hello,
I'm getting some strange warnings from Avira AntiVir Personal Free edition - when I simply load up Reflector that I just downloaded, and click the icon to open a file, and then browse to my C: drive with the open dialog.
As soon as I do that, Avira starts giving me message after message about "Malware found" - I click to quarantine it, and another pops up, over and over, until I click cancel on the open file dialog of Reflector - and then when I click quarantine on the last message, I don't get another one.
Obviously Red Gate's .NET Reflector doesn't have and isn't trying to give me a Virus/Trojan or whatever, but I really don't know what is going on, or what to do next, exactly.
I'm starting here since it is at least only when I run .NET Reflector that I've (so far) ever gotten this warning/virus message behaviour.
I'm thinking maybe I have a virus or whatever, and somehow the file open dialog in Reflector is making Avira notice it in some way, or some such thing like that.. a stab in the dark, really, but it's the only guess I can think of.
When the open dialog is up, and Avira is reporting one after another, it's always xxxx.exe in the root of C: (where I go first with the open dialog of .NET Reflector) where "xxxx" seems to be just a random alpha string, like xxtsbc.exe, thgnclsp.exe, rnkvgt.exe, etc, etc..
Also, it's not always the same Malware this is identified by Avira. Here's a few of the different ones that come up:
WORM/Palevo.kfc.2 [worm]
TR/Dldr.Harnig.14336L [trojan]
WORM/Palevo.kuh [worm]
TR/Agent.AH.496 [trojan]
TR/Crypt.ZPACK.Gen [trojan]
And others, though some of them have repeated - I haven't sat there and clicked Quarantine over and over too many times, since it really isn't all that fun.
Does anyone have any idea about what might be going on and/or what might be the best way to proceed with figuring this out and clearing it up - so that I might be able to run .NET Reflector without these things popping up. Wherever these detections are coming from, it can't be a good thing.
Although I know that sometimes Avira does produce false positives - this isn't really typical false positive behaviour that I've seen before - where a given file is simply detected as Malware when it's not... this is different, and strange.
Anyway - thanks for reading
Any thoughts or suggestions much appreciated!
Cheers
Lots of virus scanners scan files when they are accessed, I think your stab in the dark is probably close.
I'm getting some strange warnings from Avira AntiVir Personal Free edition - when I simply load up Reflector that I just downloaded, and click the icon to open a file, and then browse to my C: drive with the open dialog.
As soon as I do that, Avira starts giving me message after message about "Malware found" - I click to quarantine it, and another pops up, over and over, until I click cancel on the open file dialog of Reflector - and then when I click quarantine on the last message, I don't get another one.
Obviously Red Gate's .NET Reflector doesn't have and isn't trying to give me a Virus/Trojan or whatever, but I really don't know what is going on, or what to do next, exactly.
I'm starting here since it is at least only when I run .NET Reflector that I've (so far) ever gotten this warning/virus message behaviour.
I'm thinking maybe I have a virus or whatever, and somehow the file open dialog in Reflector is making Avira notice it in some way, or some such thing like that.. a stab in the dark, really, but it's the only guess I can think of.
When the open dialog is up, and Avira is reporting one after another, it's always xxxx.exe in the root of C: (where I go first with the open dialog of .NET Reflector) where "xxxx" seems to be just a random alpha string, like xxtsbc.exe, thgnclsp.exe, rnkvgt.exe, etc, etc..
Also, it's not always the same Malware this is identified by Avira. Here's a few of the different ones that come up:
WORM/Palevo.kfc.2 [worm]
TR/Dldr.Harnig.14336L [trojan]
WORM/Palevo.kuh [worm]
TR/Agent.AH.496 [trojan]
TR/Crypt.ZPACK.Gen [trojan]
And others, though some of them have repeated - I haven't sat there and clicked Quarantine over and over too many times, since it really isn't all that fun.
Does anyone have any idea about what might be going on and/or what might be the best way to proceed with figuring this out and clearing it up - so that I might be able to run .NET Reflector without these things popping up. Wherever these detections are coming from, it can't be a good thing.
Although I know that sometimes Avira does produce false positives - this isn't really typical false positive behaviour that I've seen before - where a given file is simply detected as Malware when it's not... this is different, and strange.
Anyway - thanks for reading
Cheers