Search
Forum Home | Login
myonno
myonno
Join Date 12/2012
+1

Does Start8 modify explorer.exe?

February 22, 2013 9:55:59 AM from Stardock ForumsStardock Forums

After scanning my pc i always get a information from Avira Internet Security Suite about a suspicious malware HEUR/Modified.SystemFile in modified explorer.exe. Is it possible that Start8 is the reason of this finding?

start8
Locked Post
Search this post
Advanced Search
Subscription Options
Reason for Karma (Optional)
Successfully updated karma reason!
myonno
Neil Banfield
Join Date 04/2001
+1103 sdemployee
Reply #1 February 22, 2013 1:01:59 PM
from Stardock ForumsStardock Forums

Start8 does not modify any executables on your hard drive or in memory.

While it is always possible Avira is somehow deciding Start8 is causing some issue, I suspect it is nothing to do with Start8.

Does it perhaps indicate which file it thinks is modified? That might make it easier for you to track down.

Reason for Karma (Optional)
Successfully updated karma reason!
myonno
myonno
Join Date 12/2012
+1
Reply #2 February 22, 2013 2:15:39 PM
from Stardock ForumsStardock Forums

 Yes, Avira says the file "C:\Windows\explorer.exe" was found with suspicious malware "HEUR/Modified.SystemFile". 

 

 

Reason for Karma (Optional)
Successfully updated karma reason!
myonno
dypsis
Join Date 10/2012
+2
Reply #3 February 23, 2013 3:40:07 AM
from Stardock ForumsStardock Forums

Quoting myonno,
reply 2
 Yes, Avira says the file "C:\Windows\explorer.exe" was found with suspicious malware "HEUR/Modified.SystemFile". 

 

 

If you Google: HEUR/Modified.SystemFile

you will see that it has nothing to do with Start8.

But a strange thing is that it is only Avira that seems to report this.

Not sure why this is, but I'll let you investigate it more.

Reason for Karma (Optional)
Successfully updated karma reason!
myonno
myonno
Join Date 12/2012
+1
Reply #4 May 12, 2013 3:19:20 PM
from Stardock ForumsStardock Forums

Hello!

Now, a few weeks later i found the reason of the report from Avira Internet Security 2013. 

After uninstalling Start8 there were some entrys in the registry which were not removed by the Start8 Uninstaller. 

Avira IS noticed this and reported this as possible maleware (just if you set "check the integrity of systemfiles" in Aviras configuration). Now i cleaned the registry and removed all Start8 entrys by hand. 

Everything works fine now again.

I think that the developer of the uninstaller for Start8 should program this better. 

Have a nice week

Reason for Karma (Optional)
Successfully updated karma reason!
myonno
Neil Banfield
Join Date 04/2001
+1103 sdemployee
Reply #5 May 12, 2013 5:00:04 PM
from Stardock ForumsStardock Forums

Quoting myonno,
reply 4

Hello!

Now, a few weeks later i found the reason of the report from Avira Internet Security 2013. 

After uninstalling Start8 there were some entrys in the registry which were not removed by the Start8 Uninstaller. 

Avira IS noticed this and reported this as possible maleware (just if you set "check the integrity of systemfiles" in Aviras configuration). Now i cleaned the registry and removed all Start8 entrys by hand. 

Everything works fine now again.

I think that the developer of the uninstaller for Start8 should program this better. 

Have a nice week

 

Which registry keys?  The user settings will remain because people complain if you uninstall to install a new one and it wiped the settings, but nothing else should.

It sounds like a major flaw in a security app to mistakenly believe that a left over registry key means explorer.exe has been modified.

Reason for Karma (Optional)
Successfully updated karma reason!
myonno
myonno
Join Date 12/2012
+1
Reply #6 May 12, 2013 6:21:21 PM
from Stardock ForumsStardock Forums

Possibly.

I noticed that only Avira IS means the explorer.exe seems to be modified. I found no other sec. app with this "report" of HEUR/Modified.SystemFile in explorer.exe. 

Strange. I was wondering that a scan result could be incorrectly just because of some registry keys from Start8. (Unhappily i didn´t note the keys).

I will tell you more again after my report to avira.

 

 

 

 

 

 

 

 

 

 

 

 

Reason for Karma (Optional)
Successfully updated karma reason!
View all recent posts
Mark all posts as read Delete cookies created by the forum Return to Top
Stardock Forums v        Server Load Time:   Page Render Time:
Facebook Twitter YouTube Google+