Free anti virus software

[DustyC]

The Grisoft website (www.grisoft.com) doesn't appear to exist anymore. At least not from my PC anyway.

Could some one check this for me and then tell me how to view it again! I can still do updates so guess they are around somewhere!

OR...
Is there some better free anti virus software out there?

>>> Edited by DustyC on Saturday 8th May 19:57

[egomeister]

Still works for me!

[DustyC]

So why can't I view it then? its been like this for a while for me.

[egomeister]

Try this link www.grisoft.com/us/us_index.php

When I go to grisoft.com I am automatically forwarded to that page.

[DustyC]

Nope, tried that already.
Tried it via google and your link. Nothing.

I can access it from other PCs but not this one. Why?

[egomeister]

No idea mate, sorry!!

[rico]

maybe your antivirus software is blocking that site???

[rico]

Seriously...

tried searching for the product on download.com??

[Boosted LS1]

I have a similar problem in that this pc can't gain access to the paypal secure pages. Reckon it's my av settings but don't know how to sort it. I have to use my old pc to gain access

[gopher]

Can you ping the site ?

go to (assuming windows) Start - run and type cmd and press enter or "ok"

type "ping www.grisoft.com" without quotes and press enter.

what do you see?

it will either show something like this:-

Pinging www.grisoft.com [193.86.103.19] with 32 bytes

Reply from 193.86.103.19: bytes=32 time=66ms TTL=48
Reply from 193.86.103.19: bytes=32 time=65ms TTL=48
Reply from 193.86.103.19: bytes=32 time=324ms TTL=48
Reply from 193.86.103.19: bytes=32 time=292ms TTL=48

or

Ping request could not find host www.grisoft.com. Please check the name and try
again.

if thats the case you may want to change the nameserver you are using - post back if that is the case - if you get the first type of response then I would not know - post up the results.

Cheers

Paul

[DustyC]

Pinged the site and got a reply similar to yours but from a different IP
127.0.0.1

There is another part to the story too:
I couldnt do updates to AVG* recently and then I managed to manually find a virus which was slowing my PC down and preventing me viewing ANY webpages. I stopped the virus manually and since then I was able to do an AVG update. scanning after the update confirmed my belief that what I had found was a virus (sasser worm).
Anyway, since then all has been fine apart from the fact that I still cant get to www.grisoft.com.

I have run adware and have spywareguard running.

*AVG = Grisoft anti virus software

[timsta]

check your hosts file: c:windowssystem32driversetchosts.

open it with notepad and delete any line that says grisoft or similar.

dont delete "localhost 127.0.0.1"

[Godfrey H]

Dusty, it looks like your computer has been hacked and either a bogus host file has been installed on your machine or your existing one has been tampered with. The address 127.0.0.1 is the loopback address for your computer hence you will never get to grisoft whilst this entry is there. Have look for other entries pointing to 127.0.0.1 for anti-spyware etc.

[DustyC]

Fecking hell!

Look at what was in there, the jammy b'stards!

hosts said:

127.0.0.1 www.symantec.com 127.0.0.1 securityresponse.symantec.com 127.0.0.1 symantec.com 127.0.0.1 www.sophos.com 127.0.0.1 sophos.com 127.0.0.1 www.mcafee.com 127.0.0.1 mcafee.com 127.0.0.1 liveupdate.symantecliveupdate.com 127.0.0.1 www.viruslist.com 127.0.0.1 viruslist.com 127.0.0.1 viruslist.com 127.0.0.1 f-secure.com 127.0.0.1 www.f-secure.com 127.0.0.1 kaspersky.com 127.0.0.1 kaspersky-labs.com 127.0.0.1 www.avp.com 127.0.0.1 www.kaspersky.com 127.0.0.1 avp.com 127.0.0.1 www.networkassociates.com 127.0.0.1 networkassociates.com 127.0.0.1 www.ca.com 127.0.0.1 ca.com 127.0.0.1 mast.mcafee.com 127.0.0.1 my-etrust.com 127.0.0.1 www.my-etrust.com 127.0.0.1 download.mcafee.com 127.0.0.1 dispatch.mcafee.com 127.0.0.1 secure.nai.com 127.0.0.1 nai.com 127.0.0.1 www.nai.com 127.0.0.1 update.symantec.com 127.0.0.1 updates.symantec.com 127.0.0.1 us.mcafee.com 127.0.0.1 liveupdate.symantec.com 127.0.0.1 customer.symantec.com 127.0.0.1 rads.mcafee.com 127.0.0.1 trendmicro.com 127.0.0.1 www.trendmicro.com 127.0.0.1 www.grisoft.com

Also, what is the process svchost?

[FunkyNige]

DustyC said:

Also, what is the process svchost?

Useful link for finding out what the processes do:

www.reger24.de/processes.php

SVCHOST.EXE is "a generic process, which acts as a host for other processes running from DLLs. Therefore, don"t be surprised to see more than one entry for this process"

So it's a windows thing.

[DustyC]

Did wonder why there was a few of them running.

I also have
"SVCHOST"
as well as
"svchost"

Anything dodgy about that?

[m12_nathan]

You have a virus.

Possibly:

http://vil.nai.com/vil/content/v_101100.htm

[ultimasimon]

DustyC said:

Did wonder why there was a few of them running. I also have "SVCHOST" as well as "svchost" Anything dodgy about that?

Not necessarily, as Funky Nige says, Windows uses svchost to allow dll's to run as an application in their own memory space. Problem is though, without trawling through the regsitry it is hard to tell which ones are legitimate and which ones are bogus.

I would put money on your problems being down to virii behaviour, especially as 'they' have set default to your loopback IP.

I am an AVG reseller and would be happy to try and find a solution for you free of charge, from one Pher to another. Please mail me privately if the problem persists. These virus writers need a good seeing to.

Also don't forget, your anti-virus software is only as good when you have the latest virus definitions up to date.

Simon.

Edited to add M12 Nathan has done his homework - that desciption fits the bill

>> Edited by ultimasimon on Sunday 9th May 17:25

[DustyC]

This is all bloody good stuff.
At the siame time as this I have been tracking another virus on my mates PC. Its actually quite interesting when its not a business critical machine .

Ultimasimon - thanks for the offer. I think I know have everything in order but I will email you anyway since Id like to know if I really protected enough now.
(I'll mail you later).
BTW: The Ultima looks absolutly fantastic.

>> Edited by DustyC on Monday 10th May 10:56

[DustyC]

All seems Ok now but thought Id let you know that I was just reading through the virus on here
http://vil.nai.com/vil/content/v_101100.htm

As well as other similar symptoms to mine it says;
"- The worm attempts to teminate the following processes: AVGCC32.EXE "

I forgot to mention previously that my AVG control centre failed to start on boot up and had to be started manually each time.
Since (hopefully) healing the virus I have re-installed AVG, updated and run a check.
AVG, adware and spy guard arent picking up anythign anymore and all appears ok.