This morning, Avast blocked a trojan while I was looking for a software program on the internet. I was pleased it was so efficient.
I just ran a scan of my C drive (with Avast) and got this result:
THREAT DETECTED:
Process 1332 [avastsvc.exe], memory block 0x000000000A920000, block size 10
Severity High
Threat: HTML:RedirME-inf [Trj]
I ran a search of my C drive for the file and it showed the file had been modified on 9/7/2010 8:12 AM. Next, I ran a search for every file on the C Drive that had been modified on the same date with the result that AVAST itself added a bunch of files on that day at the same time or within one minute.
So-I sent the file to Virus Total. Nothing detected there.
I am afraid I might leave myself vulnerable to some bug if I move the file to the chest or delete it. What do you think?
Thanks.
P.S. I have to make a run to the store. While I’m gone I will run MBAM.
Nothing to worry about you have elected to do a custom including scanning memory and and what you are seeing is the avast signatures loaded into memory for the scan.
It isn’t reporting that avastSvc.exe is infected, but that is the ‘process’ that loaded that memory block.
I don’t either as these memory detection ‘can’t be moved’ to the chest as they aren’t files. So it shouldn’t have had that as an option, much less allow or be able to send those to the chest.
My computer also alerted AvastSvc.exe is infected. Now all kinds of problems!
My desktop says…WARNING! Your’re in danger! Your computer is infected with Spyware!
…along with a long threat to my wife and my children, which “could break your life!”
A program keeps opening, called “System Tool”. I removed it from the programs and deleted, but it keeps poping up and trying to run a scan.
Avast originally found two “trojan” files and put into chest, but after reboot now finds nothing on a complete scan of the computer, and says I am protected.
I cannot use cntrl-alt-delete on my computer, start in safe mode, or open the internet, and I can’t close the warning, although I do have access to all of my files.
I deleted all the temp files I could find. What else can I do? I am really frustrated!