|
Posted by Jean on January 16, 2008, 7:29 pm
If you were Registered and logged in, you could reply and use other advanced thread options >
> | My AV application: Kaspersky Anti-Virus (6.0.2.6210)
> |
> | During a relative slow loading of a website a pop-up message appeared
> | indicating:- Firewall - allow avp.exe
> |
> | Google search that this item is related to Kaspersky AV but it also
> could be
> | a trojan/keylogger.
> |
> | Is it safe to add avp.exe to my Win XP2 Pro Firewall exceptions list?
> If
> | not, could this attribute to slow web page loading?
> |
> | Run a HJT - no problems.
>
> The name of a file is insuffient.
> What is important is the fully qualified name and path to the file.
> For example.
> c:\windows\system32\svchost.exe is legitimate.
> C:\Program Files\Common Files\System\svchost.exe is NOT legitimate.
>
Unfortunately the pop-up message did not fully qualify name and path, just
avp.exe and since my HJT log came out 'clean' I assume that no illegitimate
items are present.
Based on this, is it safe to add avp.exe to my Win XP2 Pro Firewall
exceptions list?
BTW, I recently downloaded Multi-AV which added WGET.EXE to the firewall
exceptions list; From this list there is no way to tell if this is an
legitimate item or not. But of course I know WGET.EXE is okay, the
downloading instruction of Multi-AV does explain this.
|