Avast 9 Heading Towards Bloatware

[AngelfireUk83]

It updated the other day and last few days it blocks comments from DISQUS and now every time I open FF is always opens another tab about its web security add on its annoying, I'm looking into something different but don't know what.

 

[EarthDog]

I havent touched an AV program in years. I use what comes with windows (MSE) and the Windows Defender thing. Along with proper browsing habits, I have not had a virus.

 

[ATMINSIDE]

I havent touched an AV program in years. I use what comes with windows and MSE. Along with proper browsing habits, I have not had a virus.

Fixed that for my usage. Same goes for both 7 & 8.

 

[EarthDog]

LOL, Oops, I edited my post...

 

[ATMINSIDE]

LOL, Oops, I edited my post...

Well, in 7 you had to install MSE, but in 8/8.1 its pre-installed.

 

[EarthDog]

Well, in 7 you had to install MSE, but in 8/8.1 its pre-installed.

Huh... news to me... must be in my images already. I don't recall installing it though (which means nothing, LOL!).

 

[wagex]

i dont use any, im just careful what i do... on occasion i get an itch and download trend micro housecall run it IF it finds anything i delete it.. generally its just cookie crap.

 

[ATMINSIDE]

Huh... news to me... must be in my images already. I don't recall installing it though (which means nothing, LOL!).

Yep, Windows 7 still had the older (worse) Windows Defender, which is what MSE is named within Windows 8/8.1

 

[c627627]

Ah the mandatory 'once every few weeks' antivirus thread in this section of the forums .


So the main points are how it's all about the post zero day definitions and who has the best definitions. Avast definitions are not that good, MSE is an excellent easy to use, better-than-nothing, program but their definitions are also less than stellar.

Big pay-for guys are Kaspersky, Norton, Trend Micro and McAfee.

There is only one freeware alternative and that is Avira. Their definitions can actually compete and beat most pay-for alternatives.


In every single thread someone will post to say how they use 'nothing' and never had a problem ever. Someone else may come along to tell how they used to be like that and had a ransom-ware experience and now they know better. Someone else may compare using antivirus to using protection when being intimate. You can get "burned" if you use the 'just being careful' approach instead of using protection - that's their point. And they are correct. You can't judge a man or a woman by the way they look. Use protection. Can you judge a web site by the way it looks?


I always post this quote:
"Customers who follow safe browsing best practices are not likely to be compromised by any exploitation of the WMF vulnerability. Users should take care not to visit unfamiliar or un-trusted Web sites that could potentially host the malicious code."
Microsoft Corporation
January 3, 2006

followed by this screen shot, the implication being, if you were "careful" and visited Microsoft's own web site when they took it over, you could have been infected yet someone at Microsoft actually issued that press release not six months after Microsft was hacked and foreign material posted on its own web site.

Spoiler

Avira AntiVir Personal 13.0.0.2832

(Compatible with Windows 8 but not Windows 8.1 - use the latest version 14 for Windows 8.1)

[Follow-up Build 2890 does not have the option to disable product updates. It is important to disable automatic product updates (but leave definition updates ON). Product updates may affect the Windows operating system. They should preferably be downloaded only *after* imaging the operating system partition so that if they cause problems you can reimage back to the state before product updates were installed.]


Disconnect Internet connection. Double click on Setup.exe to install the program.
Ignore Avira's warnings to uninstall Comodo Firewall or similar programs which intercept phone-home attempts.

SELECT: Custom and CHECK: I accept the End User License Agreement > Next >

UNCHECK everything when asked to install Avira Toolbars > Next > Next > Next > Next


Welcome to the Configuration Wizard > Next > Next >

Allow the configuration wizard to keep the default Express Setup options. [Do not Select All.]
(UNCHECK: Application, Games, Jokes, Programs that violate the private domain, and Unusual runtime compression.) > Next > Next >

UNCHECK: Performs a quick systems scan after the installation

Next > Finish >

*ABORT any update process when it automatically pops up!* (If you haven't disconnected Internet connection as instructed above.)


Setup the program before connecting to the internet [then block apnstub.exe and ipmgui.exe from accessing the internet].


Subscription to new virus definitions for this program is renewed automatically when you right click on Avira icon in the task bar > Start update

or download the latest key file from:
http://personal.avira-update.com/package/peclkey/win32/int/hbedv.key

and either copy it to
C:\Program Files (x86)\Avira\AntiVir Desktop
and restart or go to Help > License management > click on the blue hbedv.key link > browse to the new downloaded hbedv.key > Open.


Options:
C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe


System Scanner (upper left) > Configuration (upper right) > Yes >
UNCHECK: Follow symbolic links (on right) > System Scanner > Scan > Action on detection >
Set for Automatic, Primary action: Ignore [if you want to just scan folders and get a scan report without deleting files or being prompted what to do if virii/malware are found.]


> Click on + next to Update > Product Update > Do not download product updates.
[This option is only for Avira Antivir product updates (Antivirus definitions will still be downloaded automatically.) Product updates should be downloaded manually by going to Update > Start product update... because they may affect the Windows operating system. They should preferably be downloaded only *after* imaging the operating system partition so that if they cause problems you can reimage back to the state before product updates were installed.]


> General > Security >
Disable being notified every time USB drive has an AUTORUN.INF file:
UNCHECK: Block autorun function
> General > Events > Select: Limit size to max. >
> General > Reports > Select: Limit number to max. >
> General > Alerts > UNCHECK everything except Dial-up connection is used

> OK

> Scheduler [on lower left] > UNCHECK everything.


Set Avira Free Antivirus to Always show in Windows Taskbar.


To disable Notifier nag screen: Windows 2000/XP Control Panel > [in Windows 7/8, click on (view by Category) System and Security first] > Administrative Tools [fourth from bottom] > Local Security Policy > Right click on Software Restriction Policies > Create New Policies SO THAT ADDITIONAL RULES SHOWS UP UNDERNEATH > Right click on Additional Rules > New Path Rule... > Browse... to the path of avnotify.exe default is
C:\Program Files (x86)\Avira\AntiVir Desktop\avnotify.exe
or
C:\Program Files\Avira\AntiVir Desktop\avnotify.exe

> Set the security level to Disallowed > OK

Also block these two files from accessing the internet, using Comodo Firewall or similar software:
C:\Program Files (x86)\Avira\AntiVir Desktop\apnstub.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\ipmgui.exe

or

C:\Program Files\Avira\AntiVir Desktop\apnstub.exe
C:\Program Files\Avira\AntiVir Desktop\ipmgui.exe


The blocked files are to block Ask toolbar check and to block a popup nag.


apnstub.exe is related to a Toolbar check. AntiVir software checks whether the ASK-Toolbar is already installed on your computer. If the Toolbar is already present, AntiVir will not bother you with a slide-up alert asking you to install it. The apnstub.exe utility will do this check three times (the next three times that you reboot your computer). An additional check is done whenever the AntiVir setup dialog is displayed, in order to once again confirm the presence or absence of the Toolbar. If the ASK-Toolbar is already present, AntiVir will not offer you the setup option for installing the Avira-Toolbar.

ipmgui.exe is related to Avira messaging popup nag.



For Windows XP Home or Windows 8 (non-Pro version) you would need to boot into Safe Mode and log in as Administrator, then
go to
C:\Program Files\Avira\AntiVir Desktop\avnotify.exe
and right click on it >
Properties > Security TAB >
[Under Group or usernames] SYSTEM > Edit button > CHECK: Deny for Read & execute > Apply > OK > OK

Make sure SYSTEM is set to Deny for Read & execute before rebooting.


To submit a suspected virus, go to
http://analysis.avira.com/samples/
to upload it.


You can scan multiple drives inside program options: Local Protection > Scanner > CHECK drives you wish to scan. The premium version also offers the option to scan multiple folders here. The free version does not.


In case of error message:

The procedure entry point ?_Xbad@tr1@std@@YAX4error_type@regex_constants@12@@Z could not be located in the dynamic link library MSVCP90.dll

download and install Microsoft Visual C++ 2008 SP1 Redistributable Package
http://www.microsoft.com/downloads/...FamilyID=a5c84275-3b97-4ab7-a40d-3802b2af5fc2


Manual updates can be downloaded from:
http://dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
Unzip the downloaded file and copy all the contents to
C:\Program Files\Avira\AntiVir Desktop


Using two Antivirus programs at the same time:
If there are two Antivirus programs installed, you should not have two Antivirus *Guard* programs active at the same time because this would slow the system down, Windows may even have problems booting with two Antivirus guard components being active. So if installing AntiVir on a system where there already is an Antivirus program installed, do not install AntiVir guard.

Also disable the guard component of one program if using another program to scan an entire disk drive.


Default log file location is
C:\ProgramData\Avira\AntiVir Desktop\LOGFILES
or
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop\LOGFILES


For older versions:
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\LOGFILES
C:\Program Files\Avira\AntiVir PersonalEdition Classic
or
C:\Program Files\Avira AntiVir Personal\
C:\WINDOWS\Application Data\Avira AntiVir Personal\LOGFILES