Can some one please explain this to me because it makes NO sense.
The warnings all came one after another 27 of them.
I’m just guessing here and no insult intended but to me it looks like you have Avast set to Move any virus it finds. Did you get emails or something? A google search for Patch_1.exe shows 64 results Patch_2.exe shows 9 results. Patch_21.exe shows 0 results
Have you looked at that yet to see if you have any of those programs on your machine?
The more I look at it, Did you move an infected file on 11/20 that the new virus definitions are trying to now scan or fix?
Hi Bob, I’ve done same search (google) equal same result… ???
Bob,
Looks to me that the infected files where moved to the Avast! Virus chest (which is in the avast folder), do you have avast! set up to automatically send infected files/emails to the Virus chest?
Have you had a recent infection on your computer that you manually sent to the chest?
–lee
I haven’t had any infections that I know of and my setting are set to put all infected files in to the chest.
It was never set to move files that’s why I’m confused. also some of these files are way older than my last full scan.
All of this has happened sine the problem with a false positive yesterday in which one of the Nero audio files was moved into the chest.
At this point, even Nero is messed up. I can’t update it. It always referres to an error related to the MSA.DLL file which was messed up yesterday.
Could it be that the files were sent to the chest after the FP, but instead of restoring the files to the previous folder, you moved them?
This may account for Nero not working with a missing file.
Perhaps clutching at straws here.
Hello.
When you do a boot time scan you can set avast to move infected files.
It moves all infected files to this location,
C:\Program Files\Alwil Software\Avast4\DATA\moved
Looks like a boot time scan was performed with the setting to move infected files.
Have you done this before?
I just tried restoring patch1 and noticed that when it restored, it was placed into a subfolder of moved
the new folder that was created was the name of the file and then the file was placed into that folder.
That same thing also happened yesterday when I restored the msa.dll file.
avast! created a subfolder inside of the folder where this file should have been placed.
Since as I stated before, these Folders are READ ONLY, I can’t put the file where it should go.
I’ve tried changing the folder status but it always changes back.
This is getting frustrating and I don’t usually get flustered.
DukeNukem
Your solution to the boot scan is possible. will have to investigate further. But that still doesn’t solve my
Update problem for nero. I can’t get the msa.dll file placed into the proper folder.
Bob,
This may or may not be pertinent to your problem at hand, but it applies to any potential virus infestation.
A bit of the “back to basics”, but 2 points that I had forgotten about once, that caused infected files to re-appear and other problems in accessing them.
- Be sure to turn off System Restore, as any infection will have a copy if a restore point was created (manually or automatically) after the infection.
- I’m sure you’re working with only an administrator account open, and no other accounts open on XP?, correct?
Have you tried booting into safe mode with WinXP and changing the read-only attribute?
I’m picking at straws also, ???
Acco
@ Bob3160
Try turning off system restore (as previously suggested) and do an online scan (Housecall or Panda etc) just to see if we get an alternate name for the trojan.
You could take a look at your aswboot.log file.
C:\Program Files\Alwil Software\Avast4\DATA\log
Should be in there
Bob? Whats wrong? Don’t you know avast! ? Funny 
Moved folder is for those detected files that you selected Move option.
These are not encrypted as those in Chest,but in unchanged form or with only changed extension. They can be detected again if you use scanning of all files.
Such thing cannot happen if the files are in Chest (encrypted form which cannot be detected again). So,just delete them from chest if you don’t need them (most probably) and also check folder:
C:\Programs Files\Alwil Software\avast4\DATA\Moved
and delete it’s content or move it into Chest under User Files subsection if you need these files stored.
At this point, my biggest problem is the inability to restore the msa.dll file to it’s rightful place so that I can update Nero.
Even in safe mode, it’s impossible to remove the read-only designation from the folders. With out that, I can’t restore the file to it’s correct folder.
I’ve already deleted the other files.
- enter the recovery console
- change the attrib of the folder/file
- place the file in the correct location