Avast moved my infected program files to the Virus Chest without telling me..

Avast Free Antivirus / Premium Security
1

I tried to look for the options already, but no matter what options I choose, Avast seems to just move it straight to the “Virus chest”, without TELLING ME.

For the options that I tried, under
“Real-Time Shield”
“File system shield” and “expert settings” ,
“Actions”

at the “Select action to be performed when a virus is found”, I tried

“Ask” or “No Action”,
Avast response is the same. Just shift it straight, or just simple prevent me from copying the infected files around when I “extract” it out for other testing.

I have a few important programs, which Avast auto move to the Virus Chest, after detecting the win32: Kukacka and win32:Sality virus which affects .exe files. Many of my important Photography related softwares such as Adobe’s Bridge.exe are affected, and I can’t seems to find a software that can clean them properly. Using AVG Sality Removal tool (http://free.avg.com/us-en/remove-sality), it seems that it can “clean” the virus off from the .exe programs, and I tried to attach onto yahoo mail to make use of the auto virus scan feature, it shows that it’s cleaned, but when I scanned using Avast on my computer, it still report as a “virus” even after cleaning… so what now? Can I just restore some of those “cleaned by AVG” files back so at least I can run back some programs? And I will have to DISABLE Avast in order to open those .exe files (and I hope other strands of the viruses are already captured in the Virus Chest), cos it will just “shift to Chest” (delete) it off the working folder…or should I trust Avast to stop me from continue using the “infected” (cleaned by AVG) programs? Stopping the Avast program means that if other strands are hidden, the infection on my computer will go out of hand.

I will need to reinstall the whole windows after I tide through this… hoping to backup onto my new harddisk after it arrive (send for warranty replacement). And I hope the virus doesn’t continue to affect more of my backup .exe files… cos it keep affecting more and more files as I use? Anyway, my “Start Task Manager” is grey out when I right click onto the Taskbar. Great… am wondering why these people create virus. Seriously nothing better to do then to try steal data and damage computers.

If you have read till here, I thank you for your time. Hope someone will be able to help!
shall summarize my problems in point form again.

  1. Avast doesn’t inform me when it shift files (delete) to the Virus Chest. No options shown, am I not enabling the right options?
  2. infected Sality programs held by Avast, even after cleaned by AVG Sality Removal (link above)
  3. Headache in finding Kukacha removal.
  4. How these 2 virus actually work, and before I start using Avast to scan my exteral HDD, I just hope it doesn’t anyhow remove my other .exe files again. 2 TB of data will drive me crazy when I try to piece them again, either affected by virus or removed by Avast.

Once again, thanks :slight_smile:

Regards
Paul

2

Actually… even after restoring the infected .exe file back and I tried to risk by disabling Avast just to run that infected file, the file cannot work already… don’t know if it’s the work of the powerful Avast or what…

3

The default avast settings are sending to Chest the infected files. You can set it differently in the resident shields.

Sality is a very dangerous file infector. It’s not easy to clean at all. Keep your old backups. Backup again in other media.