bugtraq - Re: [security] Unusual Activity in Ad-aware 6 Personal, Build 6.181

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040622164515.GA11586@eiv.com>
Date: Tue, 22 Jun 2004 12:45:15 -0400
From: Shawn McMahon <smcmahon@....com>
To: bugtraq@...urityfocus.com
Subject: Re: [security] Unusual Activity in Ad-aware 6 Personal, Build 6.181

On Sun, Jun 20, 2004 at 10:36:16AM -0400, fedhead said:
> 
> My apologise if I am posting in the wrong list but I am not sure if this is
> a known issue in Ad-aware or if this even is an issue with Ad-aware.

It's normal operation of Ad-aware.

> Seems benign enough. Every night when it runs, after the first scan of the
> registry, it creates four files in the C:\Program Files\Lavasoft\Ad-Aware
> 6\cache folder which Norton AV catches as trojan scripts:

Every day, you get infected again.  Every day, Ad-Aware finds it.

Sounds like you've got an issue with Norton AV, not with Ad-Aware.

> The most unusual part is that it happens at the end of the registry scan in
> Ad-aware. A google search doesn't turn up any relation between this exploit
> and Ad-aware so it could be something unique to my system but at this point
> I am at a loss as to what it could be.

Try "ad-aware cache" for your Google search next time.

http://www.lavasoftsupport.com/index.php?act=ST&f=42&t=14501&st=0#entry115743


-- 
Shawn McMahon      | Let's set the record straight. There is no argument
EIV Consulting     | over the choice between peace and war, but there is
UNIX and Linux	   | only one guaranteed way you can have peace - and you
http://www.eiv.com | can have it in the next second - surrender. - Reagan

Content of type "application/pgp-signature" skipped