Boot Time Scan actions

Viruses and worms
1

Recently had a couple of items identified as dodgy during a Boot Time Scan in Avast 5.0.545.
As I was not sure what to do I sent them to Virus Chest where they still reside.
Is it best to leave them in Virus Chest or delete them etc.
With Thanks: Ian Mc

2

Let them into virus chest is safer.
Allow further investigation. You can delete it after some days.

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, it is better and safer to send the infected file(s) to quarantine (Chest), rather than simply deleting them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.
3

Thanks Tech for prompt reply.
Have already done a few of the recommended actions but will go thro’ the list again.
Cheers: Ian Mc

4

Post back. We’ll continue to help if you need.
I’ll go to bed now ;D

5

Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm

6

Thanks again Tech and Pondus.
Very impressed with DrWeb CureIt although CNet had an older version.
Latest is I think 24/6 which I couldn’t get thro" their homepage.
However identified problem and cleared entries from Virus Chest re-ran Boot Scan: All clear.
Will be keeping an eye on CNet for latest DrW CleanIt.
Cheers: Ian Mc