avast! virus chest

[system]

I have moved about four or five infected files to the virus chest. I understand I have to restore them in order to use tools like Spybot, Ad-Aware, CWShredder, etc. to attempt cleaning them. When I try to restore a file in the chest, I get an “overwrite?” window that says, “You are trying to restore a file from the Chest. The file already exists. Should the program overwrite the existing file?” Why is this? Can anyone recommend a course of action for this? ???

[Eddy]

Looks like something is replacing the moved files. Could be Windows System Restore.

I understand I have to restore them in order to use tools like Spybot, Ad-Aware, CWShredder, etc. to attempt cleaning them

You understood it wrong. There is no need to place them back if you want to run Ad-Aware or Spybot s&d.

[Lisandro]

@lenscrafter post:1

The file already exists. Should the program overwrite the existing file?

If you say the name and path of the files we can give you a better suggestion…
It seems that a non-infected (clean) file was there and you’re trying to restore an infected one over them… :

[system]

I did restore the system to an earlier date. The reason is that I was running a virus scan I found someplace on the net and did not pay enough attention to the interface. I should have clicked the “fix” button before running the scan. As a result, the tool simply deleted an infected file. This might or might not have been all right, but being a novice I did not want to delete anything just yet. So I restored the system to get the virus-infected file back. This probably has contributed to getting things a little mixed up for me, as I think at the time I had some infected files in the chest and others not.

As for “understanding” you have to restore files from the chest in order to use tools like Spybot, Ad-Aware, CWShredder etc., I am sorry to say this apparently incorrect information comes from an avast! technician whom I e-mailed for help.

Here are the files I have in the virus chest:

Name: 2[1].htm Path: C:\Documents and Settings\Kenneth\Local Settings
Temporary Internet Files\Content.IE5\2Y4HGS2T\2[1].htm
Virus: VBS:Malware[Script]

Name: btest4.scr Path: C:\WINDOWS\SYSTEM32\btest4.scr

Virus: Win32: Trojan-gen. {Other}

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download

Virus: Win32: Trojan-gen. {Other}

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download\FireDLL.dll

Virus: Win32:Trojan-gen. {Other}

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download\FireDLL.dll
FireDLL.dll

Virus: Win32:Trojan-gen. {Other}

Thank you Eddy and Technical for your replies.

Sincerely,

lenscrafter :-[

[Lisandro]

@lenscrafter post:4

I think at the time I had some infected files in the chest and others not.

Look, Chest has its categories: infected files, system files (just backup), etc.
Are all that files in the same category? Which one?

@lenscrafter post:4

As for “understanding” you have to restore files from the chest in order to use tools like Spybot, Ad-Aware, CWShredder etc., I am sorry to say this apparently incorrect information comes from an avast! technician whom I e-mailed for help.

Are you sure…? This answer seems very strange.
I won’t say it’s wrong but very strange (at least I need more information to judge).
I, on contrary, will say that you won’t need to restore any file from chest to proper use spyware tools… (unless, the file is a part of that programs and a false positive, so you send an ‘incorrect’ file to Chest).

@lenscrafter post:4

Here are the files I have in the virus chest:

Name: 2[1].htm
Path: C:\Documents and Settings\Kenneth\Local Settings\Temporary Internet Files\Content.IE5\2Y4HGS2T\2[1].htm
Virus: VBS:Malware[Script]

Delete your temporary files:
To do this go to Internet explorer >Tools > Internet options > Delete files > Click delete all offline content (just to be sure) > click ok.
It might take some time to delete them.

@lenscrafter post:4

Name: btest4.scr Path: C:\WINDOWS\SYSTEM32\btest4.scr
Virus: Win32: Trojan-gen. {Other}

Just delete it and clean your recycle bin.
If you can’t do it, send to Chest or even run a boot time scanning.

@lenscrafter post:4

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download
Virus: Win32: Trojan-gen. {Other}

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download\FireDLL.dll
Virus: Win32:Trojan-gen. {Other}

Name: FireDLL.dll Path: C:\Program Files\AmericaOnline9.0\download\FireDLL.dll\FireDLL.dll
Virus: Win32:Trojan-gen. {Other}

I’m not that good on AOL but seems that these files are not safe too…

Disable (and enable it after) System Restore
Start > Control Panel > System > System restore > Disable
Click Apply
Enable it again
Click Ok

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

[system]

Further information from lenscrafter. Yes, all those files I listed from chest are in the same category - infected. Also, I do have Windows XP Professional Edition. Also, I have tried deleting the temporary internet files after disabling system restore. Looks like nothing happened. Maybe I will try it again. However now that you have told me the virus cleaning tools can be used on files in the chest, I have a lot of work to do, as I have been given many such tools from another tutorial.

                                                                                     Thank you for responses