Can't move Win32.:Malware-gen to virus chest

Viruses and worms
1

After running a scan a Win32.:Malware-gen was found in C:\System Volume Information_restpre(46DE8921-1D39-44D@-A9E9-641. The rcommended action was move to chest. When I do this I get a message that says Virus chest server is not running. RPC communication failed and it says it cannot process the above file. What should I do?

2

OK - The RPC Communication failure can be related to having another AV or remnants left after uninstalling. Is the avast ‘a’ icon present in the system tray (see image, normal icon) and if so does it have a Red circle with bar (no entry sign) over it ?

Have (or did) you another Anti-Virus installed in this system, if so what was it and how did you get rid of it ?

Try a repair of avast. Add Remove programs, select ‘avast! Anti-Virus,’ click the Change/Remove button and scroll down to Repair, click next and follow. Though I’m not to hopeful in this as the RPC is outside avast control.

This isn’t immediately critical as the C:\System Volume Information folder contents are inert unless you use system restore (don’t for now), so we have time to resolve the problem.

3

Thanks for your reply. Actually, no the small a is not in the system tray. It used to be.

I don’t recall, I may have had McAfee before, it does not appear in programs and the tech guys at my husband’s former office installed Avast so I presume removed what I had before.

I tried the repair and it failed.

4

The icon, being awol is most likely, but not exclusively the problem here, see 1. below.

Some AVs even when uninstalled leave remnants and these can cause issues, see 2. below.

  1. avast! icon missing - As a temporary measure until this is resolved you can create a desktop shortcut for this file C:\Program Files\Alwil Software\Avast4\ashDisp.exe (the avast icon and interface to the providers). Right click on the file and select Send To, Desktop (create shortcut). You will need to run this after each boot until the problem is resolved.

What other security based software do you have that might block new startup entries, e.g. Spybot S&D (TeaTimer), AdAware (AdWatch), SpySweeper, Spyware Doctor (StartUpGuard or OnGuard), PrevX, WinPatrol, ProcessGuard, etc. ?

Check the option in the Appearance tab of Program Settings. Or Make a link to ashdisp.exe in your startup folder. I wouldn’t try this as a first option (but a final one) as you won’t be able to find the true cause of the problem.

  1. You didn’t say which McAfee version, so here are the various tools:

2007 version - http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

Also see - How do I uninstall SecurityCenter? http://ts.mcafeehelp.com/faq3.asp?docid=71525

5

I too have just received a notification from my avast scan in regards to this Win32:Malware-gen worm. But it was in a game program that I’ve never even used. In any case, I’ve tried moving it to the virus chest, repairing, and deleting it, but it keeps alerting me that it is still there. I’ve also attempted to restore to my last update, and using avast cleaner. I’ve run the scan again and it says it is still there.

6
  • Please start a New Topic of your own as this seems unrelated to the original subject and will just confuse the topic and we will try to help.
  • Go to this link, http://forum.avast.com/index.php, scroll down to the Viruses and Worms forum and click it, click the New Topic button at the top of the list and post there.
7

David, thank you for your help. I ran a scan again today and this time I was able to move the virus to the chest. I will try the other things you suggested when I get a chance. :slight_smile:

8

No problem, glad I could help.

Welcome to the forums.