Kitz Forum

Computer Software => Security => Topic started by: jeffbb on April 03, 2010, 08:00:01 PM

Title: Avira queries
Post by: jeffbb on April 03, 2010, 08:00:01 PM
Hi
Yesterday the Avira  scan reported a Hidden object (first time ever  )

today no such report . so I had a further look
+++++++++++++++++++++++++++++++++++++++++++++
part of yesterday's report

Search for rootkits.................: on


Starting search for hidden objects.
c:\windows\system32\sndvol.exe
c:\Windows\System32\SndVol.exe
    [NOTE]      The process is not visible.

654938 Objects were scanned with rootkit scan
      1 Hidden objects were found

+++++++++++++++++++++++++++++++++++++++++++++++++
part of today's report

Search for rootkits.................: off

so no hidden objects  report 
++++++++++++++++++++++++++++++++++++++++++++++++++++
 01/04/2010  Search for rootkits.................: off

so no hidden objects  report

++++++++++++++++++++++++++++++++++++++++++++++++++++++
  31/03 /2010  AM      Search for rootkits.................: on

    Starting search for hidden objects.

652172 Objects were scanned with rootkit scan
      0 Hidden objects were found
++++++++++++++++++++++++++++++++++++++++++++++++++   

 31/03/2010  Search for rootkits.................: off

so no hidden objects  report 

It seems that Avira sometimes checks for rootkit hidden objects  sometimes not .

2 questions
1 does anyone Know why this happens ? and make sure that the hidden objects are consistently scanned
2  Am I right in thinking that c:\Windows\System32\ SndVol.exe is a safe Windows file.

Regards Jeff