0

Avast keeps going off and popping up saying C:\...\Update.exe has been blocked but doesn't give me any more information. How do I find out what file is being detected and what connection is being blocked? Under the "antivirus" there isn't even a section for logs and under "firewall" I go to logs but there aren't any log entries for today.

Here's a screen shot screen shot of stupid AV message

If I click on new details it takes me to this webpage owned by Avast.

5
  • "How do I find out what file is being detected" -- I'm a little confused by this request, as it tells you the path to find it, and the program name, right there (update.exe)? Nov 2, 2013 at 21:19
  • @techie007 no no, it literally just puts ...
    – Celeritas
    Nov 2, 2013 at 21:37
  • What do you see if you click on "More details..."?
    – cmorse
    Nov 4, 2013 at 3:19
  • @cmorse I can't try it right now as the pop up isn't up but more details takes me to a website that just talks about new virus trends.
    – Celeritas
    Nov 4, 2013 at 4:31
  • Have you tried searching system for Updater.exe? I don't think there would be many of them, especially in Users directory. Sep 24, 2014 at 20:23

2 Answers 2

1

First, Do not turn off your AV protection just for the sake of not getting the alerts. It is definitely for your long term good.

However, try to recognize to which software that the Updater.exe belongs and remove it if it is harmful or unknown.

Main problem with the updaters : They can download files in your computer and install automatically without your permission if you have left the Update automatically option during the installation of the software. If a Trojan program is installed in your system, then it is no longer called "your system" in the security circle.

By reading through the link you have given in your question, i see that URL:Mal could be the culprit that is trying to harm your system.

If one of the software that you installed is trying to access a malicious website or vicious URL then the AV comes into action by detecting it as a kind of virus infection.

It is important to pay attention to this issue or else your web browser might get affected. Then there will be a lot of stuff will happen to your browser (like unknown add-ons, tool bars, unwanted ads,etc.,) and your AV will detect even the normal websites you visit as harmful once your browser is infected.

Now all you have to do is just to confirm whether the detected Updater.exe is harmful and carry on with the removal process(I found Remove URL:Mal and Removal Mal articles that gives a walk through on the removal of URL:Mal infectors). If you are not sure about the existence of such malwares in your system there are plenty of ways to sweep them off using a good anti-malware with an updated anti-virus software.

0

I've encountered a similar problem with other antivirus software. It's aggravating when antivirus software reports a problem with a file but displays "..." or something similar as part of the directory path and lacks an easy way to see the full directory path, especially when there may be many files with the name noted on the system. The developers of such antivirus software often seem to assume that the users of their product are technically unsophisticated and so just want to click on a "remove" button. Such alerts should at least be logged in a file by an entry containing the full path and file name with the log file easily viewed by a user.

To resolve the problem you could install additional anti-malware software and scan the system with it. I've found Malwarebytes Anti-Malware works well with antivirus software from other vendors. You can download the free version and scan the system with it. It may also flag a updater.exe file. Alternatively, you could search the system for every updater.exe file and upload them one by one to VirusTotal, a site now owned by Google that will scan files you upload with many antivirus programs and display a report letting you know how many of them detected a file as malware and the name assigned by each to the malware, if they identify the file as being associated with malware. Other sites that will also scan an uploaded file with multiple antivirus programs:

Jotti's malware scan.

VirSCAN.org

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .