Virus message

[Guest]

I have ATI Multimedia center and when I try to start the TV It starts to try
and install the multimedia center and then a pop up sceen from my antivirus
pops up with the following

Virus Detected
File name Atitvtv.exe
Threat W32/Behavior:SelfStarterInternetTrojan!Ma
Status File blocked, failed disinfection

I use Earthlinks protection center. The virus scan does not detect it. I
also ran AVG antivirus but I still cannot get rid of it.

Thanks

 

[David H. Lipman]

From: "Zoomer" <[email protected]>

| I have ATI Multimedia center and when I try to start the TV It starts to try
| and install the multimedia center and then a pop up sceen from my antivirus
| pops up with the following
|
| Virus Detected
| File name Atitvtv.exe
| Threat W32/Behavior:SelfStarterInternetTrojan!Ma
| Status File blocked, failed disinfection
|
| I use Earthlinks protection center. The virus scan does not detect it. I
| also ran AVG antivirus but I still cannot get rid of it.
|
| Thanks

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

You left out two very importnat facts...

What was the anti virus software that detected "W32/Behavior:SelfStarterInternetTrojan!Ma"
in "Atitvtv.exe"

and

What is the full path to "Atitvtv.exe".

Please submit a sample of "Atitvtv.exe" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.

 

[PA Bear]

Is the ATITVTV.EXE file that Earlink Protection Center's ant-virus application identified located in...

C:\Program Files\ATI Multimedia\tv <=this folder?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Security, Shell/User)

 

[PA Bear]

David H. Lipman wrote:

What was the anti virus software that detected
"W32/Behavior:SelfStarterInternetTrojan!Ma" in "Atitvtv.exe"

See http://www.earthlink.net/software/pcc/ (& http://www.earthlink.net/software/main/ => includes an accelerator! <eg>).

NB:

<QP>
IMPORTANT: If you decide to download and install the Protection Control Center, it will uninstall any current anti-virus software you may have on your computer.
</QP>

Ever hear of "Advanced Antivirus™, Spyware Blocker™, and Firewall™ protection tools"? Me neither.
--
~PA Bear

 

[David H. Lipman]

From: "PA Bear" <[email protected]>


|
| See http://www.earthlink.net/software/pcc/ (& http://www.earthlink.net/software/main/ =>
includes an accelerator! <eg>).
|
| NB:
|
| <QP>
| IMPORTANT: If you decide to download and install the Protection Control Center, it will
uninstall
| any current anti-virus software you may have on your computer. </QP>
|
| Ever hear of "Advanced Antivirus™, Spyware Blocker™, and Firewall™ protection tools"? Me
| neither. --
| ~PA Bear

No, I haven't. Does Eric H. & Suzi T. have info on them ?

 

[Guest]

The earthlink protection center shows the file as a deleted virus. It was the
program to watch TV in the ATI multimedia center. The other ATI programs such
as DVD player still worked. I uninstalled the ATI multimedia center and tried
to reinstall, but now I get a "error 1334 the file ativbidecoder.ax cannot be
found in file Data1.cab" then the installation aborts.

 

[David H. Lipman]

From: "PA Bear" <[email protected]>

| Is the ATITVTV.EXE file that Earlink Protection Center's ant-virus application identified
| located in...
|
| C:\Program Files\ATI Multimedia\tv <=this folder?

Then it is likely to be a False Positive.

Who is the OEM for the Eartlink Protection anti virus engine and signatures ?

 

[David H. Lipman]

From: "Zoomer" <[email protected]>

| The earthlink protection center shows the file as a deleted virus. It was the
| program to watch TV in the ATI multimedia center. The other ATI programs such
| as DVD player still worked. I uninstalled the ATI multimedia center and tried
| to reinstall, but now I get a "error 1334 the file ativbidecoder.ax cannot be
| found in file Data1.cab" then the installation aborts.
|


Did this software have a quarantine and is it possible the file was moved to Quarantine ?

Knowing the OEM to the AV sofware would help.

 

[Guest]

I do not know who the OEM is for earthlinks av software. I disable it but
kept my AVG av active and reinstalled the ATI multimedia center with no
problems. After I enabled Earthlinks protection center the same error came
up. I disable it again and the TV works. I will be contacting Earthlink to
report the problem. Thanks

 

[David H. Lipman]

From: "PA Bear" <[email protected]>


|
| Nope. Sounds familiar, though, doesn't it? H***, even AOL clearly states the third-party
| apps in their "tools" (even if they may not be so forthcoming about other things:
http://aumha.net/viewtopic.php?t=21433).
|
| I've run into this Earthlink crap before. ALL of it can cause all sorts of problems
| (especially that d*** accelerator). I have my OP's uninstall all Earthlink software
| (they're all on dial-up). Oh, it takes some prodding & poking to get 'em to do so, but in
| the end they see for themselves that it was the cause of their problems. --
| ~PA Bear

I never liked how ISPs now package "crap" with their service. Often not needed and it
bloats the PC with junk. it doesn't take much to take the PC over the edge in the "Chaos
and Complex Systems" in a computing platform postulate.

AOL has been fortcoming in their collaboration with Kaspersky Labs in providing..
Active Virus Shield -- http://www.activevirusshield.com/antivirus/freeav/index.adp

Don't use the included ToolBar (generates Pop-Ups ads) and use a throwaway email account (so
as not to receieve spam) and it is a good AV solution.

/* However, I will NOT recommend it. */

Art Kopp has actively tested it and believes the contrary and he would recommend it.