[Jammer09]

Heilsa!
Hello, I Have a fresh install of WindowsXp, ZoneAlarm Firewall, Avast Antivirus, I already registered, and SuperAntispyware on a newly formatted HP 533w machine. I need to know what settings I need to use in all of these programs to give this individual the most protection that can be obtained without hindering their use of the internet very much. If you make some recommendations as to them I would greatly appreciate it?

Oh, when I set Zonealarm to high in its firewall settings it won't allow yahoo and or other sites and tells me it is blocking them. So I set it to medium for now and it is letting me access these sites.

Ves Heill! Farr Heill!

[Jammer09]

Heilsa!

Well, I believe I will just close this and set Zonealarm to High on the internet and medium in programs, don't know what other settings to set it at. I haven't really used it to much just have installed it for a couple of people as of yet. Now for Avast it is registered and set to standard resident protection and it caught a Trojan today scanning. Its not through scanning yet I will post its details when it is through if need be. As for SuperAntispyware got that under control, thanks!

Ves Heill! Farr Heill!

[coastie65]

Hi Jammer, That ought to be all right. If you have trouble connecting to the internet, then you can try Medium settings on the firewall. Normally, they will tell you whatt the recommended settings are. coastie

[Jammer09]

Heilsa!

Thank you very much for your reply and advice!

Ves Heill! Farr Heill!

[Jammer09]

Heilsa!

Well, I closed this thread out so I will need to start another one here in Privacy & Security if it turns out that this so called infection turns out to be anything. Anyway, the infection was picked up by Avast and I put it in the Avast Chest. It is called Xsplit.exe. It was already on the PC before we formatted and reinstalled WindowsXp as Avast found it in the files that we transfered over to the new External HDD before we did the reinstallation. Avast has it as a infected file, a Win32: Trojan-gen {Other} File ID 6 and its size is 299520. I googled this Xsplit.exe and found this so far http://www.simtel.ne...released%7CDESC it is located at the bottom of the page as Xsplit 1.0 and is claiming to be some sort of file splitter, whatever that is! Anyway, I am still investigating this situation and if it turns out to be anything important or that I can't handle then I will post in Privacy & Security! Thank you!

Ves Heill! Farr Heill!

[coastie65]

Hi Jammer, The Xsplit.exe seems to be a utility although I have never heard of it. As for the the Win32: Trojan-Gen thing, That needs to go. I found the same thing a week or so ago, but I think it has been in there for a while as I have been cleaning stuff out for about a month now ( I got hit big time). It was in my restore volumes. Avast! cleaned and then I just deleted all the restore files and reset a restore point. coastie

[lilxkid24]

How did you just reformat and get a trojan already? o 0

[Jammer09]

Heilsa!

This Xsplit.exe is the Win32 trojan that I was speaking of as that is what Avast is classifying it as. Now, I uploaded the zip file that it came in to total scan or something
like that and not everyone is saying that it is a trojan, it was about
50/50. I restored the file and tried to upload it into total scan and it wouldn't register any file for scanning so I put it back in the Avast Chest for now.

I do not own this PC and it would appear that the owner had downloaded and possibly install this Xsplit utility somehow from somewhere and had it in his "My Documents" folder of which we transfered over to his new "External HD" that we got before the format and reinstall that we did. That is where Avast found this file at is on external HD in the backup that we made of "My Docs" before the format

I am going to ask the owner, if he downloaded and installed this supposed utility and why etc... and see what he says. Maybe it piggy backed from something else onto the PC by itself through some other way before the format and reinstall that is. I am sure that it was on there before the format and reinstall, but SuperAntispyware and MalwareBytes Antimalware, and CA didn't pick it up at all at any time either.

Ves Heill! Farr Heill!

[coastie65]

Hmmm, my research showed it as a Utility that was used to split large files into smaller bits for easier transferring. I was aware of the Win32: Trojan-gen though as i had run across that thing in here some time back. coastie

[SpiritWind]

Hi :

When it comes to "Win32: Trojan-gen {Other}" Detections by Avast, the General Advice

on the Avast Support Forums is to "investigate" by identifying the "Name" and "Location"

by use of the "Warning" section of the Avast Logs . Next "Step" is to Upload the "Detection"

to www.virustotal.com for "Analysis" . Depending on WHAT these 2 "say" determines

the likelihood of a possible serious malware infection . Based on the "Name" it appears

to be a False-Positive !? I recently received a "trojan-gen ( other)" detection as I was starting

an OFFline Scan using RootkitRevealer, so I selected the "No Action" Choice .

At times, it is recommended to run Avast's "Boot-Time" Scan to see what, if anything, "it"

detects . The Volunteer "Helpers" on the Avast Forums are wiling to provide their Advice

IF the preliminary investigation has been done .

[coastie65]

Avast! ran a boot time scan automatically after the detection in my case. It appeared to stop the boot at the Welcome screen and then run the scan. After taking care of things, I deleted my Restore files to be on the safe side ( that is where things were), subsequent scans have been negative. coastie

[Jammer09]

Heilsa!
Nice to here from you all! SpiritWind, long time no hear. LOL! Yeah, I restored that Xsplit.exe and tried to upload it to virustotal and it wouldn't give me an analysis of it said nothing was there or couldn't read it or something. But when I upload the Zip file that I think it got downloaded in that says Xsplit.zip it gave me an analysis and some said it was a Trojan and some said it wasn't. It was actually 50/50. Now my concern is, what can this thing be used for if it was put there by something else and not the owner. If it is that utility that I saw to be used to split up large files like you say then from my understanding that could be used or if missused could tear up some stuff.
But the owner of this PC does things rather haphazardly on this machine and downloads stuff some times not knowing exactly if it is what he needs. Like tonight we were looking for and installing drivers for his Motorola cell phone and he made the comment that even if we installed the wrong ones its no big deal and they don't take up that much space. So my point being is he might have been looking for some sort of application, program, utility etc... and installed this one and it either was not what he wanted or was and used it and forgot it or just left it there and I am going to do away with it totally if and when I find out everything about it if I can and it is safe to do so and how to do it or just go ahead and remove it with Avast and delete all files and folders concerning it. As of right now it is not installed on this PC it is just there in the Avast chest and everything else dealing with it is where we saved it on the external HD that we installed.


Any advice as to how to go about this situation? Or do you want me to post this situation in another thread?


Oh, by the way SpiritWind this SuperAntiSpyware, Avast and ZoneAlarm have me sold. I am a firm believer in them now. Throw in MalwareBytes AntiMalware if needed, maybe RougeRemover, and Panda AntiRootkit and your really pretty setup.


I do have a couple of other real quick questions. What is it with ZoneAlarm and Avast's compatability or so it states when you upgrade ZoneAlarm? It asked me if I wanted to shut something off due to something in ZoneAlarm not being compatible with something in Avast? I just said not to shut it off and kept on going. Now in the section of ZoneAlarm that is monitoring the Antivirus says that there is no antivirus on this computer.


Also Windows says there is no Firewall so I told windows that I will monitor the Firewall myself. Again this is not on my PC it is on the one that I am working on. And what I said before about them stands I am sold on them especially SuperAntispyware, its great!


Ves Heill! Farr Heill!

[coastie65]

Hey Jammer, Windows will always say there is no firewall if the windows firewall isn't activated. You did ok. That Xsplit.exe stuff, I really don't see a practical use for it, as I think it is for some super huge batch of files, such as the Library of Congress. :D I have Avast! in here as well as Superantispyware, although it is not active. I still have Spysweeper as my Active antisyware app. I also have Malwarebytes installed. coastie

[Jammer09]

Heilsa!
Thanks Coastie! I was wondering about that firewall and windows situation as I did not remember it doing that or ZoneAlarm and the situation with Avast and it conflicting somehow or another with it before ZoneAlarm updated itself. After it did that both those situations arose. Well, it doesn't matter really I just wanted to know if I did what was correct and everything is working so don't fix right? LOL! Thanks again!

Well, would still like to know what ZoneAlarm was telling me to do about Avast though? I'm a Knowledge Freak!

Ves Heill! Farr Heill!

[SpiritWind]

:D Hi :



Concerning Avast - Zone Alarm "compatibility" ; I do not have Zone Alarm but I occasionally

see Posts about "it" on the Avast Support Forums . Would recommend you look through

some of the Threads there ( "avast 4.x Home/Pro" & "General Topics" forums ) and IF your

"concerns" are not discussed to your satisfaction, feel free to start your Own "Topic" .

Might also want to ask about the "Trojan- gen ( other )", mentioning the Info which I

recommended ( in a separate Thread ) !?

[Jammer09]

Heilsa!

Will do thank you very much!

Ves Heill! Farr Heill!