Welcome Guest ( Log In | Register )

 
Closed TopicStart new topic
> Eziriz' Net Reactor Dialog Boxes
Bongo Joe
post Feb 12 2011, 07:20 PM
Post #1


Newbie


Group: Members
Posts: 4
Joined: 12-February 11
Member No.: 46,853



All of a sudden I am getting inundated with dialog boxes coming up with the message

"This assembly is protected by an unregistered version of Eziriz`s ".NET Reactor""

A look through Google doesn't seem to offer much information. Is his a virus or something? The only clue is that I have found is that it could be something to do with downloading; which I don't do.

Any ideas?
Go to the top of the page
 
+Quote Post
Cristi
post Feb 13 2011, 01:43 AM
Post #2


Technical Support
*****

Group: Technical Support
Posts: 1,559
Joined: 25-January 10
From: BD HQ
Member No.: 30,868



.NET Reactor is a legitimate program.
Please check in Add/Remove programs (Programs and Features for Vista/7)if you have it installed.
Go to the top of the page
 
+Quote Post
Bongo Joe
post Feb 13 2011, 01:10 PM
Post #3


Newbie


Group: Members
Posts: 4
Joined: 12-February 11
Member No.: 46,853



Well, it may be a legitimate program but its actions aren't.

After looking around it seems to be that it's a .Net assembly and that someone has released an application using an unregistered version of Reactor.

The problem is that in this day and age one could have tens of dozens of .Net apps on one's machine and any one of these could have this unregistered version of this assembly distributed.

The problem is hat Reactor is shoving up HUNDREDS of dialog boxes and filling up Task Mangler with the same number of processes. The warning message isn't saying which .Net application is at fault. Rather it's acting like Malware with hundreds of dialog boxes popping up everywhere and is treating the end-user as the copyright criminal.

So, no. I disagree. BitDefender should be doing something to stop Reactor from creating applications with random process names and then allowing them to be fired them off. If this isn't malware then I don't know what is.

Cheers
BJ
Go to the top of the page
 
+Quote Post
Cristi
post Feb 13 2011, 01:39 PM
Post #4


Technical Support
*****

Group: Technical Support
Posts: 1,559
Joined: 25-January 10
From: BD HQ
Member No.: 30,868



This is the behaviour of a buggy program and it should be solved by their developers.
Also this can happen to any ordinary program.
In this case you can either contact them for support on this matter or simply uninstall their application.
Go to the top of the page
 
+Quote Post
Bongo Joe
post Feb 13 2011, 01:49 PM
Post #5


Newbie


Group: Members
Posts: 4
Joined: 12-February 11
Member No.: 46,853



QUOTE (Cristi Raducu @ Feb 13 2011, 12:39 PM) *
This is the behaviour of a buggy program and it should be solved by their developers.
Also this can happen to any ordinary program.
In this case you can either contact them for support on this matter or simply uninstall their application.


Indeed. But, as I have said before; which application.

All that Reactor is telling me is that there is an unregistered verion of their assembly being used in a .Net application.

Which .Net application? Reactor doesn't tell me and I have dozens on my machine.

There are a number of issues here:

1. Someone distributed an application with an unregistered copy of Reactor.
2. Reactor reacts (sorry) by creating a process with a random .exe name which nags the unspecting end user.
3. BitDefender doesn't stop this at all.

Now the thing to do is to uninstall the offending.Net application. Yes, I would do. But which one? I have dozens on my machine as I expect that you have too. In fact, I don't know what applications I have here is written which with language/framework. Do you?

So saying that I ought to contact these mysterious 'them' doesn't help. What I want to know is how I can get Bit Defender to stop random processes being started.

Yes, the fault is with the .Net developer. But at the end of the day the Malware actions are clearly performed by Reactor and BitDefender won't stop this.

Cheers
BJ
Go to the top of the page
 
+Quote Post
Cristi
post Feb 13 2011, 02:10 PM
Post #6


Technical Support
*****

Group: Technical Support
Posts: 1,559
Joined: 25-January 10
From: BD HQ
Member No.: 30,868



OK,to see exactly what happens in background please send me by PM a set of logs as described in this article + a set of screenshots with those pop-ups.

http://kb.bitdefender.com/site/article/490/

VERY IMPORTANT: you need to create the logs (especially the BDSI log) right after those pop-ups start to act.

Looking forward to your reply.
Go to the top of the page
 
+Quote Post
Bongo Joe
post Feb 13 2011, 04:32 PM
Post #7


Newbie


Group: Members
Posts: 4
Joined: 12-February 11
Member No.: 46,853



Okie Dokie. Will so shortly. First, Iwill need to re-install BitDefender as this issue doesn't seem to happen with Kaspersky except for one dialog box on start-up.

I can live with that rather than having to remove hundreds of dialog boxes. When I have an hour or two to mess about I will do this again with BD but as this is my development machine this isn't a good idea to have processes forking all over the place.

I was testing BitDefender 2009 and I hope to goodness that wasn't the culprit.

BJ
Go to the top of the page
 
+Quote Post
1dkd1dkd
post Apr 28 2011, 11:42 AM
Post #8


Newbie


Group: Members
Posts: 1
Joined: 28-April 11
Member No.: 60,093



QUOTE (Bongo Joe @ Feb 13 2011, 11:32 AM) *
Okie Dokie. Will so shortly. First, Iwill need to re-install BitDefender as this issue doesn't seem to happen with Kaspersky except for one dialog box on start-up.

I can live with that rather than having to remove hundreds of dialog boxes. When I have an hour or two to mess about I will do this again with BD but as this is my development machine this isn't a good idea to have processes forking all over the place.

I was testing BitDefender 2009 and I hope to goodness that wasn't the culprit.

BJ


Joe, I had the same problem and solved it. It has nothing to do with the real program ".NET Reactor". It is Bloodhound virus, a nuisance virus {low risk}. It can have many names...mine was in my windows directory and it was called windows.exe.

My Symantec virus scan found and removed it. The only thing I can't do at the moment is turn on my Windows Firewall, and until I re-installed my audio driver, my sound was muted and the volume control locked out.

Go to XXX for instructions on removal. All info is there.

Good luck.
Reason for edit: link removed
Go to the top of the page
 
+Quote Post
John Petway
post Jul 3 2011, 06:36 PM
Post #9


Newbie


Group: Members
Posts: 2
Joined: 3-July 11
Member No.: 66,182



I can help.

1. Restart Computer in a Safe Mode
2. Go to Folder and Search Options under Organize
3. Click on View, then click on Show Hidden files, folders, and drives.
4. Uncheck all Hide
5. Close that and go to Windows folder.
6. Look for System32 folder.
7. Scroll down until you see Microsoft folder. You can open the folder if you like just to see what it is. You see window.exe (that is the Eziriz's .NET Reactor). Trust me you'll thank me later!
8. Go back to Microsoft Folder and delete folder.
9. Restart your computer.
10. That's it. No more pop up Eziriz's .NET Reactor.

Don't forget to email me at petway_john@live.com to say thank you.
Go to the top of the page
 
+Quote Post
barrynel
post Nov 9 2012, 04:32 PM
Post #10


Newbie


Group: Members
Posts: 1
Joined: 9-November 12
Member No.: 119,405




what is the name of the folder in line 2
that you posted to search for?
Go to the top of the page
 
+Quote Post
Christian
post Nov 13 2012, 07:26 PM
Post #11


Bitdefender Support
******

Group: Root Admin
Posts: 13,998
Joined: 27-January 08
From: BitDefender HQ
Member No.: 9,374



Hello (IMG:style_emoticons/default/smile.gif)

This is an old topic, for new discussions please open a new one.

Thank you!
Go to the top of the page
 
+Quote Post

Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 31st July 2014 - 03:26 AM