Not sure if this belongs here in the general forum of the Virus one. I’ll try here first in search for an answer.
I was a routine quick scan and found a virus. Avast describes the threat as “low.” The option is to "Select the required action for each result and check “Apply.”
I go to the file name and I cannot right-click or select the file. Nothing comes up.
Go to “Apply this action for all.” I choose “Move to Chest.”
I press “Apply” and it changes from green to no color. I think this means the file has been moved to the virus chest. It hasn’t. There is nothing in the virus chest.
Next, I re-scan the computer. The infected file is still there. I’ve tried to move it to the chest or delete it. It hasn’t worked either way.
What could be the problem why Avast isn’t deleting this file or moving it to the virus chest.
What was the file name, location and malware name of the detection ?
You shouldn’t be right clicking on the file but using the drop-down list in the Action column for that detection.
Using the “Apply this action for all.” if you choose the “Move to Chest” option that is selected for all of the detections in the list. So when you click Apply it will send all of the detections to the chest. The reason the Apply button is then greyed out is because the actions have been carried out and can’t be repeated as you are effectively viewing historical information in the scan report.
There is nothing to stop you from physically checking in the avast chest to see if it is there. avastUI > Maintenance > Virus chest.
Perhaps this could have been placed in the viruses and worms forum, but it isn’t clear cut as you aren’t asking about the detection as such, but more the interface.
My apologies for being unclear and please pardon my newbieness. :-[
The name of the infected file is C:\User\Jeff\Downloads\IZArcInstall.exe|7$Temp\BetterInstaller.GXE
I found this during a routine scan of Avast. Earlier I had downloaded WinZip from File Hippo.com. I do not know if there are any viruses or malware associated with the application or the site. I will check the Avast Virus Chest after I finish this post.
The issue is when I choose the “Apply this action for all” and select “Move to Chest” option the detection does not show up in the chest. It is as though the “Apply” button does not work. When I have run subsequent scans it still detects the virus.
I was thinking about deactivating Avast and installing another anti-virus program to see if detects it as well or it is a false positive.
Thanks for your time and attention to this issue. Appreciate it, and if this needs to be moved to the Virus and Worms forum is there a Moderator I can PM to move this to the appropriate place?
Well the file is within a folder in an archive (installation) file, I don’t know what an installation file would need another installer for. I’m assuming you made a typo in the file name BetterInstaller.GXE and that this is an .exe file.
You didn’t say what the malware name was that avast gave this detection and this also helps us ?
The likelihood is that this file wouldn’t be in the chest as it is within an archive file, when you try I believe it would result in an error, that this action is unsupported. Removal of a file from within an archive could corrupt the archive making it unusable. Unless you change the avast settings to remove/move the archive to the chest if avast isn’t able to extract the file from within the archive.
Currently you can’t use the PM function until you have 20 posts, an anti-spam measure unfortunately. Should it need to be moved it can be done, but I think it will be fine.
I’m not at home so I can’t check to see if I misspelled the file name. More than likely I did.
The likelihood is that this file wouldn't be in the chest as it is within an archive file, when you try I believe it would result in an error, that this action is unsupported. Removal of a file from within an archive could corrupt the archive making it unusable. Unless you change the avast settings to remove/move the archive to the chest if avast isn't able to extract the file from within the archive.
I’m not sure I understand. What settings in the free suite makes it possible for Avast to remove/move the archive to the chest? Would a boot time scan be something I should try and try to start the computer in Safe mode?
Sorry if I’m not being as helpful or clear as I should be. I’m just a bit confused/concerned. ???
Starting in safe mode will make no difference, the settings would be the same.
Can we deal with the question already asked (what was the malware name of the detection), before pushing on to others as this is I believe the more important issue. This makes a difference in what action should ultimately be taken.
Personally I don’t feel it is a good idea to remove the archive if the action fails, because an archive file in most cases is inert.
There is nothing to be unduly concerned with as the file is inside an archive/installation file and would only become an immediate risk when unpacked from that archive/installation file and then executed before there is an immediate risk. As you are seeing simply scanning the archive/installation file detects this, so it couldn’t be extracted and run without avast intervening/alerting.