Prev: Queries about Norton Antivirus Corporate Edition and Client Firewall
Next: AVG with MBAM
From: sobriquet on 8 Jan 2010 16:41
Hi.

Is this something to worry about, or is it ok, as it appears that AVG
is blocking it, whatever it is?

----------------------------------------------------------------------------------------------
http://img34.imageshack.us/img34/6813/avgmeldingr.jpg

C:\Users\pionier\AppData\Local\Temp\IXP001.TMP\InstallMgr.exe

Trojan Horse Downloader.Generic8.AAMM
----------------------------------------------------------------------------------------------

What would be the best response (typically speaking) when AVG comes up
with such a notification?

Thx in advance for any feedback/suggestions, Niek
From: David H. Lipman on 8 Jan 2010 17:54
From: "sobriquet" <dohduhdah(a)yahoo.com>

| Hi.

| Is this something to worry about, or is it ok, as it appears that AVG
| is blocking it, whatever it is?

| ----------------------------------------------------------------------------------------
| ------
| http://img34.imageshack.us/img34/6813/avgmeldingr.jpg

| C:\Users\pionier\AppData\Local\Temp\IXP001.TMP\InstallMgr.exe

| Trojan Horse Downloader.Generic8.AAMM
| ----------------------------------------------------------------------------------------
| ------

| What would be the best response (typically speaking) when AVG comes up
| with such a notification?

| Thx in advance for any feedback/suggestions, Niek

Can't really tell.

%TEMP%\IXP001.TMP\InstallMgr.exe

Is kind of standard syntax for a packaged installer.

You would have to get a 2cnd opinion of InstallMgr.exe via Virus Total.

The question is, what are you tring to install ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: FromTheRafters on 8 Jan 2010 20:07
"sobriquet" <dohduhdah(a)yahoo.com> wrote in message
news:909827ea-0a6a-45fe-8d1c-b9cb1738b42a(a)p8g2000yqb.googlegroups.com...
> Hi.
>
> Is this something to worry about, or is it ok, as it appears that AVG
> is blocking it, whatever it is?
>
> ----------------------------------------------------------------------------------------------
> http://img34.imageshack.us/img34/6813/avgmeldingr.jpg
>
> C:\Users\pionier\AppData\Local\Temp\IXP001.TMP\InstallMgr.exe
>
> Trojan Horse Downloader.Generic8.AAMM
> ----------------------------------------------------------------------------------------------

Unclear, some legitimate programs can look like malware to the scanner
(false positive declaration or FP).
Some legitimate programs are 'rightfully' detected as riskware or
potentially unwanted programs.

Many will use virustotal.com or jotti.org (or an editor) to submit the
file to further scrutiny.

> What would be the best response (typically speaking) when AVG comes up
> with such a notification?

Quarantine or deny access (almost never ignore).

> Thx in advance for any feedback/suggestions, Niek

You're welcome.


From: sobriquet on 15 Jan 2010 22:04
On 8 jan, 23:54, "David H. Lipman" <DLipman~nosp...(a)Verizon.Net>
wrote:
> From: "sobriquet" <dohduh...(a)yahoo.com>
>
> | Hi.
>
> | Is this something to worry about, or is it ok, as it appears that AVG
> | is blocking it, whatever it is?
>
> | ---------------------------------------------------------------------------­-------------
> | ------
> |http://img34.imageshack.us/img34/6813/avgmeldingr.jpg
>
> | C:\Users\pionier\AppData\Local\Temp\IXP001.TMP\InstallMgr.exe
>
> | Trojan Horse Downloader.Generic8.AAMM
> | ---------------------------------------------------------------------------­-------------
> | ------
>
> | What would be the best response (typically speaking) when AVG comes up
> | with such a notification?
>
> | Thx in advance for any feedback/suggestions, Niek
>
> Can't really tell.
>
> %TEMP%\IXP001.TMP\InstallMgr.exe
>
> Is kind of standard syntax for a packaged installer.
>
> You would have to get a 2cnd opinion of InstallMgr.exe via Virus Total.
>
> The question is, what are you tring to install ?

Some legitimate application (rosetta stone).. but sometimes these pop
ups from AVG also tend to pop up more or less randomly or as you
explore the drive or try to copy files between different locations on
the computer.

>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp

 | 
Pages: 1
Prev: Queries about Norton Antivirus Corporate Edition and Client Firewall
Next: AVG with MBAM