backdoor generic8.vxj?

[boardtc]

Tonight AVG (v7.5.488, virus database 14 oct) found gear.exe to be infected with Trojan horse backdoor generic8.vxj and deleted it. What should I do?

Thanks, Tom.

[Michael Szabo]

We are already looking into this...

Have you had GEAR Video installed for a while, and just now installed AVG Anti-virus, or updated their definitions?

[neilwilkes]

Problem fixed here.
(I have also had this happen here)
Launch AVG Control Centre.
Open up the Resident Shield Properties
Set up an exclusion for the GEAR Video folder.
(Highlight Resident Shield in the control centre, and launch the "Properties" from the bottom right button, go to the EXCLUDES tab, and broswe to the GEAR Video folder)
Now go into the virus vault, and restore the GEAR.EXE file.
Restart the system.
You should now have functionality back again, although you might find you need to reset the desktop shortcut.

Sorted.

[Michael Szabo]

Until AVG returns our phone calls and emails...

For AVG Free Edition:

To use GEAR Video 8.20

1. Click on Resident Shield
2. Click Properties (bottom right of window)
3. [ ] Turn on AVG Resident Shield protection (unchecked to disable)
** You may need to also **
4. Click on Virus Vault
5. Click Open
6. Right-click on gear.exe in C:\Program Files\GEAR...\GEAR Video 8.20
7. Click Restore Files(s)
8. Start GEAR Video as normal

Note: This will turn off protection against ANY OTHER programs etc. AVG Free Edition has also blocked.

When finished using GEAR Video 8.20

1. Click on Resident Shield
2. Click Properties (bottom right of window)
3. [√] Turn on AVG Resident Shield protection (checked to enable)


NOTE: This is a work-around, and is not a final solution. GEAR cannot be held liable for any damage done by enabling/disabling AVG Free Edition

[neilwilkes]

Michael.
You don't need to disable Resident Shield at all.
Just allow GEAR.EXE to bypass it altogether in the manner described above.
This works - I have done it here on 2 machines.

[Michael Szabo]

There is no EXCLUDES tab on AVG Free Edition

[neilwilkes]

[Michael Szabo]

Update:

AVG has contacted us and we have supplied the software to them.

Once the issue is resolved, I will post any necessary steps.

I suspect AVG will issue an updated Virus Definitions Database and the 'false positive' issue will be resolved.

[Michael Szabo]

Update:

AVG has confirmed this is a 'false positive' and have posted a new virus definitions database.

If you experience this issue, please continue to update your AVG Anti-virus virus definitions by using the Internet Updates option within the AVG Control Center Console