Oh Shi-

driesguldolf · Post by **driesguldolf** » Thu 17 Jan, 2008 12:43 pm

I was browsing some ign videos and suddenly ie pops up and goes away in an instant, then it returns showing whether I had firewall/ie/...
When I wanted to close it I get a message if I wanted to bookmark the page

When this stuff happens I click ctrl-alt-del to finish off ie
But I can't!
(btw, I did nothing that even remotely resembled to open ie :S)

Btw, I have XP SP2 and the latest windows updates

The message says that the taskmanager has been disabled by the administrator (something which I would never do! AND I'm the only one who used my computer in like 2 weeks)

Edit: Scanning for viruses now

Eh, Ben?

It basically claims that your installer is a trojan...

Post by **benryves** » Thu 17 Jan, 2008 1:30 pm

Oh, yes, a recent avast! update claims that installers created with Inno Setup contain a trojan. I first noticed it with the installer for PCSX2. I'm convinced it's a false positive.

As for a fix for your problem; System Restore might help, but if it's a virus it might have infected that too (it looks more like conventional malware, though). I assume you are running anti-malware software (eg Windows Defender)?

As for the task manager problem; dig out HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System and set DisableTaskMgr to 0.

This is why running as administrator is a bad thing, and why Vista's UAC is a good thing.

driesguldolf · Post by **driesguldolf** » Thu 17 Jan, 2008 5:53 pm

Yup, it claimed a bunch of installers as trojans, oh well, for some reason I'm too lazy to remove those after installing so I guess it's a good thing

All is fixed now!
No more annoying ie that pops up!

And yet again, Ben saves the day

Post by **Dwedit** » Fri 18 Jan, 2008 1:08 am

I remember when Avast once marked one of Farbrausch's demos as a troken.

Timendus · Post by **Timendus** » Fri 18 Jan, 2008 10:23 am

*Hugs his Ubuntu Linux system*
"Youwouldn'tdothattomenowwouldyou?"

Post by **benryves** » Fri 18 Jan, 2008 12:24 pm

Dwedit wrote:I remember when Avast once marked one of Farbrausch's demos as a troken.

I believe it's the same principle here. Someone releases a trojan packaged in a Inno Setup installer; avast! doesn't know how to inspect the contents of the installer package and so flags all vaguely similar packages as being problematic. farbrausch's EXE packer will then suffer a similar fate.