Avira starts blocking some browsers and email clients

Avira Antivirus Logo

Since yesterday, some Avira Internet Security users have only been able to use their web browsers if they first disable Avira Web Protection. According to Avira, some customers are getting a “data structure error” that requires a complete uninstall and fresh installation of the program.

However, users in the Avira forum are saying that reinstalling does not solve all their problems: activating IPv6 support and the Drive-by protection causes new browsing issues – this appears to be a Java-related problem, particularly if the latest version, Java 7, is installed. Disabling browser protection is the only way to get around the problem. Chrome, Opera, Firefox and the Thunderbird email client are all affected. Avira has acknowledged that there is an issue with Avira Web Protection and the recently released Chrome version 28; the problem is currently being investigated.

The cause of the problem is not known, but may have been the result of a regular signature update. The recently announced forced upgrade of 2010 and 2012 versions to the 2013 version seems to be unrelated.

Source: H-Online

Update 1:

There are a temporary fix for now: http://www.avira.com/en/support-for-home-knowledgebase-detail?kbid=1500

Avira update fixes Service Pack bug

avira_logo_red_rgb (2)The H-Online: Avira says that it has resolved the problems caused by a Service Pack that was released for its Windows products earlier this week. Users are advised to trigger a manual update to download the fix. Once installed, the update should prevent the program from blocking legitimate Windows applications on systems running Avira.

On Monday, Avira released “Service Pack 0” for all of its Windows products. Once the update was installed, the “ProActiv” behavioral monitoring component in Avira Antivirus Premium 2012 and Avira Internet Security 2012 blocked the execution of essential programs and trusted system processes. For example, ProActiv blocked the Windows registry editor (regedit.exe) and the task scheduler (taskeng.exe).

As the behavior recognition is only included in the company’s commercial products for 32-bit versions of Windows, the problem does not affect Avira Free Antivirus or users who run a 64-bit version of Windows.

Those who are affected by the problem need to update Avira manually; once the update has been installed, the ProActiv module can be reactivated. For systems where Windows is having difficulty booting, users are advised to start their systems in safe mode and install the Avira update.

Avira AV update hangs systems

H-Online Says:

avira_logo_red_rgb (2)A faulty update for Avira‘s paid-for anti-virus software blocks harmless processes and may in some cases stop computers from booting. The update results in the ProActiv behavioral monitoring component becoming oversensitive in its treatment of executable files.

According to user reports, ProActiv blocks trusted system processes such as cmd.exe, rundll32.exe, taskeng.exe, wuauclt.exe, dllhost.exe, iexplore.exe, notepad.exe and regedit.exe. In some cases this results in Windows failing to boot properly. It also appears to be blocking non-OS applications such as Microsoft Office, the Opera web browser and Google’s Updater program.

All versions which include the ProActiv behavioral monitoring component are affected, including Avira Antivirus Premium 2012 and the enterprise version; only 32-bit systems are affected, as ProActiv doesn’t currently support 64-bit operating systems. On the Avira forum, an employee of a company which runs Avira on one hundred computers complains that, “This update has been pretty catastrophic. The whole company ground to a standstill.”

Avira_Professional_Security_ProActivIn view of the arbitrariness with which the behavioral monitoring component is blocking files, users who have installed the update are advised to disable ProActiv. To do so, access Avira’s settings, activate the Expert mode using the switch on the left and uncheck ‘Enable Avira ProActiv’ under ‘Realtime Protection’, ‘ProActiv’. According to user reports, if Windows is having difficulty booting, this can be fixed in some cases by starting in safe mode and then deactivating ProActiv.

In a statement to The H’s associates at heise Security, Avira confirmed the problem and said that its developers are currently working on an automatic update to resolve the bug. The potential scale of the bug is huge – according to Avira, the faulty update has already been downloaded more than 70 million times; this figure includes those running the free version of Avira which is not affected. The company has now stopped distributing the update.

Source: Heise Security

Update: Avira update fixes service pack bug

Start of Avira 12 Betatest!

Start of AV 12 Betatest!
It starts from today and ends on 29th of September 2011.

Finally after a long time Avira started Betatest of Avira AntiVir 12.
If you would like to test this build and feature beta releases, you can register in Avira BetaCenter: http://betacenter.avira.com

More Info: http://techblog.avira.com/2011/09/08/avira-products-version-2012-for-windows-now-available-for-beta-testing/en/

Avira receives AV-Test.org certificate

Avira TechBlog: Great news – our Avira Premium Security Suite received the next AV-Test.org certificate, this time for the first quarter of 2011! So far the suite thus achieved all available AV-Test.org certificates since the beginning of the certification process. The certificate approves the tested products a good quality in detection, repair and usability.

This means that users of the Avira Premium Security Suite can be assured to be well protected from the threats they face when using their computers on the Internet!

Yet another VB100 award for Avira!

Avira TechBlog: The series continues – Avira AntiVir Personal and Avira AntiVir Professional received the April 2011 VB100 award! The tests were executed in a Windows XP SP3 environment by the Virus Bulletin test engineers.

The Avira anti malware solutions performed very well: All WildList samples were detected, all of the polymorphic viruses too. Also, more than 99 percent of the Worms and Bots were blocked. The heuristics test also looks very good: With 96 percent of the yet unknown malware samples filtered out Avira ranks among the best solutions!

Analysis of TR/Spy.SpyEye

avira_logo_red_rgb (2)Avira TechBlog: SpyEye is a malware family which we are monitoring for some time. Today we are analyzing a sample which is detected as TR/Spy.SpyEye.flh by Avira products.

The Trojan is able to inject code in running processes and can perform the following functions:

  • Capture network traffic
  • Send and receive network packets in order to bypass application firewalls
  • Hide and prevent access to the startup registry entry
  • Hide and prevent access to the binary code
  • Hide the own process on injected processes
  • Steal information from Internet Explorer and Mozilla Firefox

A detailed analysis of this malware by Liviu Serban, Virus Researcher at Avira.

You can read this useful article here: http://techblog.avira.com/2011/03/30/analysis-of-trspy-spyeye/en/

This analysis is also available as download here (PDF).

Here’s some good news for Mac users! Go Avira!

Avira-Logo-Final-RGBAvira’s Anti-Virus Technology Used by ZeoBIT in New System Utility – MacKeeper

Avira provides anti-malware scanning engine to MacKeeper App

Tettnang / Silicon Valley, March 11, 2011 – IT security expert Avira announced today that it licensed its industry-leading antivirus product to Silicon Valley-based ZeoBIT to be used in ZeoBIT’s MacKeeper product. MacKeeper is an all-in-one app that includes 16+ unique features for security, cleaning, data control and optimization for Macintosh computers.

Designed as a 911 app for Mac OS that will keep a Mac secured, clean, reliable, fast and up to date, MacKeeper provides:

  • Protection from both Mac OS and Windows threats
  • Detection of viruses, identity thefts, phishing, spyware and malware
  • Web browsing safety by revealing fraudulent websites and unsafe downloads

“It’s true that Macs do not suffer from as many attacks and viruses than their Windows-based counterparts, but Avira feels that because Macs exchange files with all other operating systems, the opportunity for malware to infect a Mac is increasing every day,” said Sascha Beyer, CTO, Avira. “It’s mandatory today to have protection on a Mac, and Avira is very pleased that our technology is being used to protect Mac devices.”

The licensing agreement allows ZeoBIT to use Avira’s Secure Anti-Virus API, the official interface for Avira’s anti-malware scanning engine. The Avira scanning technology is integrated into a service, which runs in background and accepts scanning requests from MacKeeper.

“Since our launch last fall with MacKeeper 1.0, ZeoBIT has been busy making our security product for Macs the best it can be and we’re certainly pleased to add the security prowess of Avira to our product,” said Slava Kolomiychuk, CEO, ZeoBIT LLC. “Mac users are facing increasing amounts of malware and our goal is to protect them so they never have to worry about being compromised.”


About ZeoBIT

Since 2008, ZeoBIT LLC has been developing, promoting and supporting software for Mac OS and Windows platforms. ZeoBIT LLC is located in the US (headquarters) and in Ukraine (development center).


About Avira

Avira is a worldwide leading provider of professional and private antivirus software and IT security solutions. The company has over twenty years of business experience and more than 100 million clients. Avira AntiVir’s core product distinguishes itself due to its outstanding reliability and has been regularly honored with the VB100 award. As one of the founding members of the German association “IT Security made in Germany” (ITSMIG e.V.), Avira is the only provider of antivirus software that offers IT security products that also guarantee protection against data espionage.

In addition to protecting the virtual environment, Avira helps to protect the real world, too. The Auerbach Foundation, founded by Avira CEO Tjark Auerbach, supports diverse charitable and social projects as well as the arts, culture and science. For more information, please visit www.facebook.com/avira andwww.twitter.com/avira.

Improved Avira AntiVir Rescue System

Avira programmers spent a lot of work and drastically overhauled the Avira AntiVir Rescue System which is now available in version 3.7.16. Next to a much better usability due to the redesigned user interface and 11 supported languages the new version offers even improved detection and removal capabilities.

Avira AntiVir Rescue System uses Linux as operating system. The new kernel has much better and wider hardware support. The bootable CD can not only be used to analyse the system for malware infections and remove them, but also enables the user to get access to data on the system in case the operating system won’t start anymore so it can be backed up onto a USB drive, for example.


The Rescue System can be either downloaded from the Avira web site at www.avira.com as ISO image for burning it to CD with existing software or as executable file for Windows with a tiny CD burning application included. It is possible to update the system with an existing Internet connection or just to download the most recent version of the Rescue System from the Avira homepage.

To Lean how to use Avira Rescue System, Visit my site: https://omidfarhang.com/computer/security/avira-rescuecd