We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Avira Hidden Objects

Apreciar
Apreciar Posts: 627 Forumite
in Techie Stuff
I have just run Avira and it has reported 217 hidden objects, should I be concerned, what are these.
Change is here to stay
«1

Comments

  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    I doubt they are reason to be concerned - Avira's just reporting they are hidden - legitimate files can be hidden.

    Post the Avira log file.
  • Apreciar
    Apreciar Posts: 627 Forumite
    waddler_8 wrote: »
    I doubt they are reason to be concerned - Avira's just reporting they are hidden - legitimate files can be hidden.

    Post the Avira log file.
    The file is too large to file here is a sample of the hidden files reported.

    Starting search for hidden objects.
    HKEY_LOCAL_MACHINE\Software\Microsoft\Environment\licence0
    [NOTE] The registry entry is invisible.
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\TempPackages\c:\windows\installer\22efca.mst
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\langid
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\documents and settings\marshall\local settings\application data\google\update\googleupdate.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\documents and settings\marshall\local settings\application data\google\update\googleupdate.exe
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\shell32.dll,-9319
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\netshell.dll,-1200
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\outlook express\msimn.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\progra~1\micros~3\office10\outlook.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\ime\sptip.dll,-600
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\mozilla thunderbird\thunderbird.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\internet explorer\iexplore.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\shell32.dll,-9216
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\progra~1\micros~3\office10\frontpg.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\ieframe.dll.mui,-912
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\ieframe.dll.mui,-903
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@xpsp1res.dll,-11002
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\microsoft office\office10\winword.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-21785
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\shell32.dll,-9217
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\shell32.dll,-9227
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\quicktime\qttask.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@xpsp1res.dll,-11005
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\mozilla firefox\firefox.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\calibre2\calibre.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\windows\system32\taskmgr.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31233
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31236
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31260
    [NOTE] The registry entry is invisible.
    Share this folder
    C:\WINDOWS\system32\Share.EXE
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31272
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31274
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\windows\explorer.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\system32\shimgvw.dll,-303
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31242
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31244
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31246
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31248
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31370
    [NOTE] The registry entry is invisible.
    Print this file
    C:\WINDOWS\system32\Print.EXE
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@shell32.dll,-31252
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\adobe\reader 10.0\reader\acrord32.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\progra~1\roxio\easycd~1\easycd~1\creatr50.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\c:\program files\microsoft office\office10\excel.exe
    [NOTE] The registry entry is invisible.
    HKEY_USERS\S-1-5-21-2398889178-153311663-3994287308-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache\@c:\windows\inf\unregmp2.exe,-4
    Change is here to stay
  • Apreciar
    Apreciar Posts: 627 Forumite
    I have recently downloaded Avira 2012 free version, in the past I have had no problems with this sort of report from the previous version. I have Malwarebytes Pro running. neither this or Avira have reported problems whilst running. The report summary is as follows,

    The scan has been done completely.
    11332 Scanned directories
    947865 Files were scanned
    0 Viruses and/or unwanted programs were found
    0 Files were classified as suspicious
    0 Files were deleted
    0 Viruses and unwanted programs were repaired
    0 Files were moved to quarantine
    0 Files were renamed
    0 Files cannot be scanned
    947865 Files not concerned
    20950 Archives were scanned
    0 Warnings
    211 Notes
    719200 Objects were scanned with rootkit scan
    217 Hidden objects were found

    I am worried about rootkits, would it be an idea to download Avast or AVG and run after disabling Avira, or is there another ooption.
    Change is here to stay
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    I wouldn't worry based on that - They all look ok that you have posted - Are they all hidden registry entries?
    [NOTE] The registry entry is invisible.

    Is anything happening that gives you cause for concern other than the scan results? If not, I wouldn't worry - Definately don't install another AV.
  • Apreciar
    Apreciar Posts: 627 Forumite
    waddler_8 wrote: »
    I wouldn't worry based on that - They all look ok that you have posted - Are they all hidden registry entries?

    Yes I think they are all hidden registry entries, but the previous version of Avira never reported this

    Is anything happening that gives you cause for concern other than the scan results? If not, I wouldn't worry - Definately don't install another AV.

    The other day I noticed that the cpu usage looked particularly high, I normally scan once a month but this caused me to scan earlier with these results.
    Change is here to stay
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    I honestly wouldn't worry. What OS is this?
  • Apreciar
    Apreciar Posts: 627 Forumite
    waddler_8 wrote: »
    I honestly wouldn't worry. What OS is this?


    Windows XPpro running Pentium 4 2.6gh with 1 meg ram on an 8year old Dell desktop.
    Change is here to stay
  • GunJack
    GunJack Posts: 11,863 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    Apreciar wrote: »
    I have recently downloaded Avira 2012 free version, in the past I have had no problems with this sort of report from the previous version. I have Malwarebytes Pro running. neither this or Avira have reported problems whilst running. The report summary is as follows,

    The scan has been done completely.
    11332 Scanned directories
    947865 Files were scanned
    0 Viruses and/or unwanted programs were found
    0 Files were classified as suspicious
    0 Files were deleted
    0 Viruses and unwanted programs were repaired
    0 Files were moved to quarantine
    0 Files were renamed
    0 Files cannot be scanned
    947865 Files not concerned
    20950 Archives were scanned
    0 Warnings
    211 Notes
    719200 Objects were scanned with rootkit scan
    217 Hidden objects were found

    I am worried about rootkits, would it be an idea to download Avast or AVG and run after disabling Avira, or is there another ooption.

    the main problem is terminology....check the files scanned count with the "not concerned" count - same. It's just slightly lost in translation from german, means no threats found :)

    Same for the rootkit scan - those 719200 are a sub-set of the 947865 scanned files, not another 700,000-odd, with no problems found.

    Avira is very good, the english translations not quite always so ;)
    ......Gettin' There, Wherever There is......

    I have a dodgy "i" key, so ignore spelling errors due to "i" issues, ...I blame Apple :D
  • Apreciar
    Apreciar Posts: 627 Forumite
    GunJack wrote: »
    the main problem is terminology....check the files scanned count with the "not concerned" count - same. It's just slightly lost in translation from german, means no threats found :)

    Same for the rootkit scan - those 719200 are a sub-set of the 947865 scanned files, not another 700,000-odd, with no problems found.

    Avira is very good, the english translations not quite always so ;)

    The concern was the Hidden Objects count, is this not a concern?
    Also would it be better to change to Avast if the English translation in Avira is not too good.
    Am I being paranoid!!!!!
    Change is here to stay
  • spud17
    spud17 Posts: 4,434 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Combo Breaker
    Apreciar wrote: »
    Am I being paranoid!!!!!

    I'd say, just a bit. ;)
    Move along, nothing to see.
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.7K Banking & Borrowing
  • 253.4K Reduce Debt & Boost Income
  • 454K Spending & Discounts
  • 244.7K Work, Benefits & Business
  • 600.1K Mortgages, Homes & Bills
  • 177.3K Life & Family
  • 258.3K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture