Re: TURN OFF EMAIL SCANNING (was Re: Do not turn off email scanning)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jim Carlock (anonymous_at_127.0.0.1)
Date: 03/18/04 

Date: Thu, 18 Mar 2004 00:33:32 -0500

Just ran the test again and selected the following folder:

C:\infected\testing

AVG not only checked that folder but the folder above it as well.
This time it moved the file to the vault and appeared to move the
other files as well, but it didn't actually move the other files, it
copied files in a folder that it wasn't told to check. <g> Good
grief !!! It's acting like a virus itself! LOL

It's got some definite issues. This time it didn't heal the files, it's
the healing process that leaves the file on the HDD with the
same name, just slightly modified in some manner ( I think ).

I'll figure this out in a moment...

Okay, this time I copied the infected file to:
  C:\infected\test\
And I also copied several other infected files to:
  C:\infected\backup\

I asked AVG to do a custom scan and I selected the
following folder:
  C:\infected\test\

The dialog popped up with the following message:
Test run: Manual
Files tested: 5
Time elapsed: 0 sec.

Infected files detected: 1
Viruses removed by healing: 1
Files moved to VIRUS VAULT: 0
Viruses Still On The Drive: 0

Something is definitely wrong !!! LOL It tested 5 files, when I told
it to test only 1. It scanned 5 files, it says so! All of them are infected
with the same virus (NetSky.J as reported by AVG). It only
reported 1 infection. It moved the one file to the VAULT.

I still like AVG, but it definitely has some serious issues. 

-- 
Jim Carlock
http://www.microcosmotalk.com/
Post replies to the newsgroup.
"PA Bear" wrote:
AVG 6.0 (free) or AVG 7.0 Pro (paid)?
Jim Carlock wrote:
> Just adding my 2 cents.
>
> I'm using AVG at the moment, but I still don't want something
> going through my email disabling, renaming and messing with
> viruses to make the viruses appear not to be viruses. It just gets
> too confusing.
>
> I really like the AVG product. It's the best I've seen, but it still
> suffers from the same problems that EVERY virus scanner does.
>
> It wants to take control where it should only be scanning and
> maybe moving the attachments to a quarantine folder, it is
> actually modifying files and once the file is modified it is no
> longer a virus and it'll never see it as a virus again. It leaves the
> file on the computer in the modified format. This is a clearly
> NOT proper. I really would like to see AVG present a
> dialog with the following options:
>
> Move the infected file to an INFECTED folder.
> -or-
> Delete the file.
> -or-
> Disinfect and move the file to a MODIFIED folder.
>
> The name of the MODIFIED folder can be named something
> else, and I am hereby declaring this to be public domain material
> that CANNOT be patented nor copyrighted.

Relevant Pages

  • W95/Spaces.1445 and worm/datom virusses
    ... These 3 files ARE the virus ... Let AVG ... These files are located in the %Windir% folder. ...
    (microsoft.public.windowsxp.security_admin)
  • Search doesnt find folder
    ... An AVG virus scan showed three trojans, all located in a folder and its subfolders on my E: ... When I used XP's Search function to find crack.exe, it found an occurrence, but not on either of the hard drives or their partitions, and it didn't appear on my desktop. ...
    (microsoft.public.windowsxp.general)
  • Re: A virus which Im having incredible removing
    ... > I have the reccomended AVG free virus remover from Grisoft. ... information folder. ... You can use DOS and ...
    (microsoft.public.security.virus)
  • Re: Is this really a Worm?
    ... may be left-over files from a virus that AVG had previously cleaned. ... Folder in Program Files is empty, ...
    (microsoft.public.windowsxp.general)
  • Re: ie,...again
    ... re-install Windows. ... >> tried safe mode, and I'm still getting the same ... >Switch to AVG Anti-Virus destination folder using these ...
    (microsoft.public.windows.inetexplorer.ie6.browser)