[Dshield] counter.class virus from Lavasoft Ad-aware6

Chris Tankelewicz tank at tankweb.net
Thu Apr 29 02:16:33 GMT 2004


What I suggest that you do, it is just another step in the home pc
protection process....

There are 2 programs that I recommend highly. You will see little if any
"hits" when using Lavasofts adaware after installing these 2 programs.

1) Spyware Blaster from Javacool software:

a.. Prevent the installation of ActiveX-based spyware, adware, browser
hijackers, dialers, and other potentially unwanted pests.
a.. Block spyware/tracking cookies in Internet Explorer and Mozilla/Firefox.
a.. Restrict the actions of potentially dangerous sites in Internet

SpywareBlaster can help keep your system spyware-free and secure, without
interfering with the "good side" of the web.

And unlike other programs, SpywareBlaster does not have to remain running in
the background.

2) Spyware Guard from Javacool software:

  a.. Fast Real-Time Scanning engine - catch and block spyware before it is
executed (EXE and CAB files supported) with signature-based scanning for
known spyware and heuristic/generic detection capabilities to catch
new/mutated spyware
  b.. Download Protection - prevent spyware from being download in Internet
  c.. Browser Hijacking Protection - stop browser hijacking activity in
  d.. SG LiveUpdate - provides an easy updating solution
  e.. Small size - with a small size and small definition sizes, download
and updates are quick
  f.. Report Capabilities - keep a detailed log of all spyware detected
  g.. Spyware files are blocked before being opened or run - they are not
simply shut down after they are loaded in memory (and after they have
performed their tasks)
  h.. It's a free download
Chris Tankelewicz

----- Original Message ----- 
From: "Mike Beattie" <webmaster at erthdra.com>
To: <list at lists.dshield.org>
Sent: Monday, April 26, 2004 11:08 AM
Subject: [Dshield] counter.class virus from Lavasoft Ad-aware6

> I run ad-aware fairly often on a win 2k workstation with avg anti-virus by
> Grisoft installed and this morning when I ran ad-aware avg detected a js
> virus called counter.class.
> I unfortunately cannot seem to capture it because ad-aware creates a
> directory called cache under it's install directory when it runs but the
> virus does not appear until about when ad-aware finishes the deep registry
> scan then it removes it and the cache directory just as fast as it created
> it.
> The only information I have is the avg alert that says run avg to remove
> virus which is no longer there, I even tried to scan the cache folder
> manually with windows explorer and a right click scan with avg on the
> folder at the exact time the virus gets created there but I am not fast
> enough to catch it.
> Has anybody else experienced this, and if so what did you do about it?
> Should I try and contact lavasoft ad-aware or just uninstall ad-aware, or
> it a false alarm from avg?
> Any thought's or suggestions would be greatly appreciated.
> Mike B.
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.668 / Virus Database: 430 - Release Date: 4/24/2004
> _______________________________________________
> list mailing list
> list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
> ----------------------------------------------------
> This message has been processed by Firetrust Benign.

More information about the list mailing list