Bit Defender Fails To See Ave.exe Virus Ect

That got on my pc after browsing a infected web page, via java runtime,the only waring i got was this which as you can see says it was blocked, but it did not stop the rest of it , and failed to even detect it on my system when it was obvious to me that i was infected, so no point in scanning with this useless program, good job for me that i have pc tools spyware doctor too which on a scan found and quarantined 35 infections all related to this AVE.EXE some where registry entries that it had made ,which swd also repaired them , so not only have they failed to configure a fully working security suite ,but it's not reliable in detecting old malware that other vendors don't seem to have a problem with

Find more posts tagged with

Comments

awencel

link to info on ave.exe

That got on my pc after browsing a infected web page, via java runtime,the only waring i got was this which as you can see says it was blocked, but it did not stop the rest of it , and failed to even detect it on my system when it was obvious to me that i was infected, so no point in scanning with this useless program, good job for me that i have pc tools spyware doctor too which on a scan found and quarantined 35 infections all related to this AVE.EXE some where registry entries that it had made ,which swd also repaired them , so not only have they failed to configure a fully working security suite ,but it's not reliable in detecting old malware that other vendors don't seem to have a problem with

What other programs do you use besides Spyware doctor. I'm finding that there are holes in bitdefender's definition updates and their virus detection of older ones.

dave r

What other programs do you use besides Spyware doctor. I'm finding that there are holes in bitdefender's definition updates and their virus detection of older ones.

No others at the moment, but ive used the 30 day trial A-squarred they also have a firewall too, but it's a separate entity,

This used to be one of the best, but i have my doubt's if that is still the case,As that malware i had should of been detected by bd but it didn't, just like it should of updated to the latest build automatically i'm still waiting,lol but maybe the pc's time and date may not be set correctly???

jibble

I got an almost identical virus, but it was not ave.exe or av.exe. Completely different set of files. And I have no idea how to clean it all up.

Watch out for this one as well. Detail here.

kamaranti

link to info on ave.exe

That got on my pc after browsing a infected web page, via java runtime,the only waring i got was this which as you can see says it was blocked, but it did not stop the rest of it , and failed to even detect it on my system when it was obvious to me that i was infected, so no point in scanning with this useless program, good job for me that i have pc tools spyware doctor too which on a scan found and quarantined 35 infections all related to this AVE.EXE some where registry entries that it had made ,which swd also repaired them , so not only have they failed to configure a fully working security suite ,but it's not reliable in detecting old malware that other vendors don't seem to have a problem with

I had the same problem this morning.

Here a full copy of my chat with Bitdefender, where I complain about the same issue: this is an old virus, it was blocked, and it nevertheless hacked my system.

(names were removed - just to be decent)

customer: vista antimalware 2010 was started after I blocked ava.exe access with BD internet security 2010...

You are now speaking with BD of Technical Support.

BD: Welcome to BitDefender LiveAssistance!, customer! Thank you for your interest in our security solution BitDefender.

customer: Hi BD. How did this happen...? And what should I do?

BD: Hello!customer.

BD: Please tell me, what version of Windows are you currently using? Windows 98 / Me / 2000 / XP / Vista /7, 32 or 64 bit?

customer: vista 32

BD: May I also know your location?(resident country)

customer: usa

BD: Can you please tell me that your bit defender is opening up?

customer: Now I am also starting to get alerts from it...

customer: yes, and it ran last night

customer: I double checked the firewall rule and can confirm that ava.exe is denied access.

BD: I request you to please update it and scan your computer using the bit defender.

customer: Last update was 9:38 am this morning. It is now 10:27

BD: Please also visit http://www.bitdefender.com/KB627 and perform the instruction in order to disinfect your computer if your bit defender will fail to disinfect .

customer: Actually it was 9:31:08

customer: So what do I do with all these open windows of vista malware?

BD: Its ok you can scan your computer if problem persist then go the link that I provided.It will resolve this issue for sure.

BD: I recommend you not to click on them and manage to go to the link that i provided you can also use any other computer to create the rescue CD and then you can run it on the infected computer.

customer: I am sorry, but this should not really happen. It is going to take my time waiting for BD to do this job. And what about a next link I happen to click in Firefox? This was a regular link in google search for army ranks.

customer: Rescue CD???

customer: Are we going back to the times of rescue CD's???

BD: You can just click on the link that I provided and you will be able to go through the article once you will read it carefully you will come to know what to do.

customer: I am sorry BD, but I am running anti virus software on my PC and this, from waht I can find on the internet is malware that has been around since 2009? Why did it get through your software?

customer: I am out of breath! I am going to make a rescue CD instead of doing my taxes??

customer: What kind of virus scan would you like me to run?

customer: (to ask you a simpler question...)

BD: I request you to please scan the computer using the bit defender first and I am positive that t will be able to remove the malware but if not then you can refer to the link.

customer: regular scan, deep system scan, quick scan?

BD: You have to Run the deep system scan.

customer: which takes 5 hours on my pc....

BD: Then copy the tool from the link that I provided and copy it on a blank CD ,run the Cd to disinfect the computer.

customer: Okay, here I am noticing another problem. My scans are scheduled to run every night. Every morning I find a report that all is okay. And now I notice in the BD dialog that the last system scan was 4/11. While I just closed a window of a scan that ran this morning.

BD: Did you run the deep system scan today?

customer: no, a regular scan

BD: It is recommended to run the deep system scan.

customer: the last deep scan was on 4/11. System scan 4/20

customer: Okay, so creating the rescue CD and running it will remove the malware without further scanning?

BD: Yes exactly.

customer: And my first question: how did this happen???

BD: I might be possible that due some wrong configuration of firewall and real time protection you are facing this issue.

customer: What exactly does that mean? What is my responsibility and what is BD?

customer: I mean, I blocked ava.exe.....

BD: Its recommended to always turn on the firewall real time protection and male sure they are set to AGGRESSIVE to block these malwares to access your computer.

BD: Is there any thing else i might be able to assist You with at the moment?

customer: So the difference is 'scan http traffic' ?

customer: Can I kill ava.exe in the task manager at this moment?

BD: Yes.

customer: I still have one question unanwered: I blocked ava. exe with BD firewall, and it is nevertheless running. Why??

customer: And the answer is not 'set to aggressive' ...

BD: In this case we will have to further investigate this issue by e-mail in order to find a solution for you. Therefore we will send you by email a couple of diagnostic tools which will provide us the necessary data. Would this be ok with you?

customer: I appreciate your support. I doubt that it is anything special in my case, but I have no choice but to further investigate this. So please go ahead and mail me the tools.

BD: Please follow the steps in the email and make sure to send us the necessary files that will be created, so that we can analyze them and get back to you with the steps you need to take in order to solve this issue.

customer: Okay. I am seeing all the steps involved in removing this and I am REALLY aggravated. The pdf was updated on march 10. This should be part of your software, and I should not have to do this!

customer: I am going to hang up because I am really aggravated and don't have much else to say.

customer: Thank you

customer: Please send me a log of this chat.

BD: Well i am extremely sorry but at the moment I am not able to send you the log.

customer: Never mind, I copied and pasted it myself.

BD: Is there any thing else i might be able to assist You with at the moment?

customer: That whole rescue CD is a generic solution and I have to go through 15 pages of instructions. How about just using this:Kill Spyware Processes ( Help )

ava.exe

Get rid of Files and Folder ( Help )

C:\Documents and Settings\All Users\Application Data\LastSun Ltd

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\ava.exe

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\BASE\

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\DELETED\

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\LOG\

C:\Documents and Settings\All Users\Application Data\LastSun Ltd\AV AntiSpyware\SAVED\

%UserProfile%\Start Menu\Programs\AV AntiSpyware

%UserProfile%\Start Menu\Programs\AV AntiSpyware\AV AntiSpyware.lnk

Delete following folders ( Help )

LastSun Ltd,

AV AntiSpyware

Delete Registry Values ( Help )

HKEY_CURRENT_USER\Software\LastSun Ltd\AV AntiSpyware

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\uninstall\AV AntiSpyware 1.8

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “AV AntiSpyware”

customer: Or this:

customer: 1. Click Start->Run (or WinKey+R). Input: “command”. Press Enter or click OK.

2. Type “notepad” as shown in the image below and press Enter. Notepad will open.

3. Copy and past the following text into Notepad:

Windows Registry Editor Version 5.00[-HKEY_CURRENT_USERSoftwareClasses.exe]

[-HKEY_CURRENT_USERSoftwareClassessecfile]

[-HKEY_CLASSES_ROOTsecfile]

[-HKEY_CLASSES_ROOT.exeshellopencommand][HKEY_CLASSES_ROOTexefileshellopencommand]

@=””%1″ %*”[HKEY_CLASSES_ROOT.exe]

@=”exefile”

“Content Type”=”application/x-msdownload”

4. Save file as “exefix.reg” (without quotation-marks) to your Desktop.

NOTE: choose Save as type: All files

5. Double-click to open exefix.reg. Click “Yes” for Registry Editor prompt window.

6. Download an anti-spyware like Spyware Doctor, update it and run a full system scan.

BD: Well I requested you to scan using the bit defender so you actually need not to download any other security solution

customer: Well, it's running but it doesn't search for ave.exe, it just goes through everything, which will take a couple of hours.

BD: I recommend you to please let it go.

customer: Yes, I will let it go.

customer: Thank you for your patience - because I am aware that I am very pissy.

BD: Is there any thing else i might be able to assist You with at the moment?

customer: no thank you. have a good day

An hour later:

customer: Hello, I was expecting to receive a chat support follow up?

You are now speaking with BD of Technical Support.

BD: Welcome to BitDefender LiveAssistance!, customer! Thank you for your interest in our security solution BitDefender.

BD: Hello!customer.

customer: Hello BD again. In the past I used to receive follow up emails right away, but I have not received any yet.

customer: You were going to send me diagnostic tools

BD: Yes I Escalated your issue to the related department and they will get back to you within the shortest time possible having further resolution to your issue i request you to please wait for some more time.

customer: Okay. Thank you.

BD: Is there any thing else i might be able to assist You with at the moment?

customer: no thanks.

BD: Thank you for choosing BitDefender LiveAssistance! customer. Do not hesitate to contact us if you need further assistance. Goodbye.

dave r

Not good to say the least, Thats why i have always had the paid(full) version of spyware doctor, it has always found things that bd didn't, but why bd didn't even know of the existence of the virus associated ave.exe so why would it find it on a on demand scan if the real time protection doesn't detect it?

Just scripted nonsense by sound of it

awencel

Not good to say the least, Thats why i have always had the paid(full) version of spyware doctor, it has always found things that bd didn't, but why bd didn't even know of the existence of the virus associated ave.exe so why would it find it on a on demand scan if the real time protection doesn't detect it?

Just scripted nonsense by sound of it

I've addressed this issue among other AV<random>.exe and AVE.SUITE trojans in my link. It's true that BD doesn't have the real protection it should, but the price is still stellar for the time. I'll be looking at comparisons of anti-virus programs of 2011 in November, but this will do for the time being. BD is still in the lead though:

http://forum.bitdefender.com/index.php?sho...amp;#entry83748