Thank you for making Avast 4.7 Home available. I am a new user.
When I Thorough-Scan my system, Avast finds no malware.
Immediately after, I scan with Ad-Aware and Avast finds and alerts for malware during the Ad-Aware scan.
Examples:
Nov 15,2007: Avast found 2 instances of VBS:Malware-gen during Ad-Aware scan.
Nov 14,2007: Avast found 2 instances of dummy.class.exe during Ad-Aware scan.
Is this normal? Should I change settings? Maybe scan in Safe Mode?
I would appreciate any advice.
My thoughts are that you should pause the standard shield when doing a scan with another security based application. This avoids any possible conflict it will also avoid duplicate scanning and reduce the overall scan duration. If adaware opens a file for scanning, that forces avast to first open it and scan it, if clear then control is handed back to adaware.
You don’t say what the file names or locations are so it is not possible to make and determination.
What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.
Thank you DavidR. I appreciate your help.
(I hope my lack of knowledge is not the problem.)
Here is one entry from the Log Viewer:
516 Sign of “VBS:Malware-gen” has been found in “C:\DOCUME~1\ANTI-C~1\LOCALS~1\Temp\AAWTMP\C4059750\37BB3D\Dummy.class” file.
Regarding your comments in the first paragraph:
It appears that Avast finds the virus only after the Adaware scan forces Avast to open and scan the file. Why doesn’t Avast find it earlier during the Avast scan?
My free version of Ad-Aware only scans when I do so manually. You suggest that I will turn off Avast before I run the Ad-Aware scan?
Then there is the risk that the virus will never be found?
Because it doesn’t exist before you run adaware, if you check the file location you will see it is a temporary location. Another reason I feel for pausing the standard shield when running other security applications. If the others are from similar temp locations, the same applies or post their file names and locations.
Not turn off avast completely, just pause the standard shield provider.
You won’t find what doesn’t exist outside the adaware scan as on completion of the adaware scan, it clears the temp folder and files it created.
This may not be possible if 2ii2c didn’t send it to the chest (would need to export to check with VT) or save a copy as the files are cleared after the adaware scan.
There is nothing wrong with submitting the sample to VT if you wish (and if you did send it to the chest), to confirm it was a good detection. Let us know and we will advise you.
You have added your question to a thread that is now several months old. As such, it may not get noticed much. Please start a new thread for your problem and please give more information … OS, security programs, how this was found, & where it was found.