AVZ Antiviral Toolkit
Scans for Viruses, AdvWare, Spyware, Dialers/pornware, HackTool and Riskware
http://z-oleg.com/avz4en.zip
---------------
NOTE: AVZ antiviral toolkit reports several false positives and "suspicious" files when scanning the project:
These files are okay, do not delete.
example:
RUNHIDE.EXE >>> suspicion for Trojan-Spy.Win32.VB.qa ( 003FF505 000FC7F3 000AFE1D 00217F5E 20480)
RUNHIDE.EXE" quarantined succesfully
Acronis\fnls.dll Invalid file - not a PKZip file
Acronis\fobject.dll Invalid file - not a PKZip file
Acronis\ftrace.dll Invalid file - not a PKZip file
Keyfinder\keyfinder.exe/{RAR-SFX}/officekey.exe >>>>> not-a-virus:PSWTool.Win32.RAS.a
RunHide.exe >>> suspicion for Trojan-Spy.Win32.VB.qa ( 003FF505 000FC7F3 000AFE1D 00217F5E 20480)
RunHide.exe" quarantined succesfully
AVG_75\License.exe >>> suspicion for Trojan.Win32.KillReg.a ( 0043E83B 0015A52D 000D8F26 000D060E 20480)
AVG_75\License.exe" quarantined succesfully
MaxBlast5\Files\fnls.dll Invalid file - not a PKZip file
MaxBlast5\Files\fobject.dll Invalid file - not a PKZip file
MaxBlast5\Files\ftrace.dll Invalid file - not a PKZip file
bcdw-password.exe >>> suspicion for Trojan.Win32.ShareAll.c ( 004312E2 001B74A5 000CFE5C 001C2718 24576)
bcdw-password.exe" quarantined succesfully
keyfinder.exe/{RAR-SFX}/officekey.exe >>>>> not-a-virus:PSWTool.Win32.RAS.a
---------------
Download files http://z-oleg.com/avz4en.zip, unzip
put all files from avz4en folder in plugin\avz4en\files folder
---------------
; PE Builder v3 plug-in INF file
; avz4en.inf
; plugin by Bengt
; http://z-oleg.com/avz4en.zip
[Version]
Signature= "$Windows NT$"
[PEBuilder]
Name="Anti-Spyware: AVZ Antiviral Toolkit"
Enable=1
[WinntDirectories]
a="Programs\avz4en",2
[SourceDisksFolders]
files=a,,1
[Append]
nu2menu.xml, avz4en_nu2menu.xml
;; the below reg entries are from my IfsDrives plugin and it automatically mounts my Linux drive
;; the linux drive is then visible in AVZ Antiviral Toolkit !! (it can scan linux drives, should it ever be needed)
;; if you do not have the IfsDrives plugin remove the below entries
[Software.AddReg]
0x1, "Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\win32","","%SystemDrive%\I386\System32\stdole2.tlb"
0x1, "Classes\TypeLib\{44EC0535-400F-11D0-9DCD-00A0C90391D3}\1.0\win32","","%SystemDrive%\I386\System32\atl.dll"
b9,e1,72,fe,f9,d6,e0,88,81,d5,62,d8,2d,62,7b,16,2e,cb,56,9d,ef,8c,\
E8,66,E4,A8,7D,F5,F8,56,CC,ED,41,6A,45,4B,E5,39,A9,91,1C,59,E5,89,01,48,BB,\
84,A4,0B,DF,F1,22,8E,F0,55,50,EF,82,BE,AA,5A,9D,B4,F6,E8,C9,4A,A0,55,B1,4A,\
2B,0E,CE,C3,D0,79,17,79
[SetupReg.AddReg]
0x3, "ControlSet001\Services\IfsDrives\Parameters","Information",\
01,00,01,00,01,00,03,00,00,2a,46,85,07,00,00,00,00,08,a4,4c,\
0A,00,00,00,83,4A,00,00
;; my drive letter is J:\
[Default.AddReg]
0x1, "Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\J","BaseClass","Drive"
------------------
<!-- Nu2Menu entry for AVZ Antiviral Toolkit -->
<NU2MENU>
<MENU ID="Programs">
<MITEM TYPE="POPUP" MENUID="Anti-Spyware Tools">Anti-Spyware Tools</MITEM>
</MENU>
<MITEM TYPE="ITEM" DISABLED="@Not(@FileExists(@GetProgramDrive()\Programs\avz4en\avz.exe))" CMD="RUN" FUNC="@GetProgramDrive()\Programs\avz4en\avz.exe">AVZ Antiviral Toolkit</MITEM>
</MENU>
</NU2MENU>