AVZ Anti-Viral Toolkit

[snarff]

hi to all, i may be having a thick afternoon, but i have just downloaded the above toolkit and all i get is numbers instead of words on the programs. in the snapshots of the program on site there is words , but on mine there are numbers were the words should be. and another thing why does not have a install process, when you double click the sword and shield it goes striaght on to the program, cheers.

[Raymond]

AVZ is portable and does not need installation. Just run the sword and shield icon will launch AVZ.

The program is in English and I've checked that it is not possible to change the language. Can you post a screenshot on how the numbers looked like?

[fletch]

I have just downloaded and run it and you get just the numbers when you have not unzipped it correctly,

Right click then extract the files first,

[snarff]

cheers for the reply, no screen shot needed , did not unzip it right , ok now except for i,m getting the message when it starts scanning " drive not ready, exception processing manager" c00000a3 parameters 75b 6bf7c 4 75b 6bf7cb 75b 6b f7c, then the box of , try again-cancel or skip. any thoughts, cheers

[Raymond]

Are you running the software with Administrator rights?

[ginzon]

Question from me Ray

I extracted n was scanning with AVZ 4 avast caught it creating a temp file with Zlob infection after once deleted by avast it created another at that very instance. So i scanned my PC with avast a thorough scan to check whether there was any infection n avz was getting hold of it [i cancelled avz scan without deleting anything so that the infection remains] but there was no threat as such then was AVZ creating that virus stuff just to show at end that it detected something?

OK i would not like to create an extra thread for this query whether mdf files are caught by Avast as threat bcoz it caught one[it showed some name can't remember not "other" so not hueristic] also it catches Alcohol n demon as threat

[ceyfer]

^
^
^

Looks like FP = False Positives

For Analysis - Please specify the threat here : Name of the threat ? or post the screenshot here

Did u adjust the Heuristic settings upper? or just by dafault - u can reach the so called " infected files" archive -winrar and upload to virus total / jotti /etc and see the result ...

If u have .BAK files or patched softwares ( cracked ) AVZ will detects it as malware with threat percentage ...which sometimes are just FP

Don't delete the files even it was detected as malware by AVZ or if u got paranoid just Q it - u need to check it carefully

[ginzon]

Hey related to AVZ 4


Sign of "Win32:Zlob-CQQ [Trj]" has been found in
"C:\DOCUME~1\ISHAAN~1\LOCALS~1\Temp\avz_2384_1.tmp" file.

Sign of "Win32:Trojan-gen {Other}" has been found in
"C:\DOCUME~1\ISHAAN~1\LOCALS~1\Temp\avz_2384_1.tmp" file.

Sign of "Win32:Trojan-gen {Other}" has been found in
"C:\DOCUME~1\ISHAAN~1\LOCALS~1\Temp\avz_2384_1.tmp" file.

Ok the last two are surely heuristic but the first one????

The mdf one i was talkin about...

Sign of "Win32:Hupigon-LXL [Trj]" has been found in "E:\Softwares\Compressed files & Installers\Games\GTA\GTA San Andreas\GTA_SAN_ANDREAS.mdf" file.

[ceyfer]

"Win32:Hupigon-LXL [Trj]" has been found in "E:\Softwares\Compressed files & Installers\Games\GTA\GTA San Andreas\GTA_SAN_ANDREAS.mdf" file.


hmm sounds weird to me - AVZ is not a perfect tool but user must use it with caution

If Avast didn't detect anything bad then u need to take second opinion.

-> If that .mdf file is acessible zip it and try to upload it to virust total
-> If not just download the it's (AVZ) brother AVP Tool and run a scan - ( 27mb download it here )
http://downloads5.kaspersky-labs.com...2008_18-00.exe

win.32hupigon is a backdoor program mostly been associated / binded inside compressed files or executables or any useful stuff for trickery...

let see if it's a Malware or just FP

[ginzon]

i'lll try the the tool n let u know but uploading to virustotal will take me ages 4.1GB i got a 256Kb connection..
cant garuntee a reply bcoz exams r on head