Extract Infected File from Virus chest for testing ?

Viruses and worms
1

I was scanning my Hard drive and Avast! detected File : "common.dll " as being infected with Win32:Banload-ZH [Trj]
The location of the file is E:\Program Files\Process Lasso.
“Process Lasso” is a program ‘similar’ in ways to Windows Task Manager. I’ve had no problems with the program before or after moving the file to Virus Chest. Avast! hasn’t previously detected this file so I thought I would check it online at Jotti , and Kaspersky online scanners.

http://img87.imageshack.us/img87/8568/avastinfectedprocesslasso29906tz4.jpg

This posed the problem of ; “How do I upload the file out of the chest?” All I could think was to Extract it to a program called “Folder Lockbox” , which I wasn’t too happy about , but thought better than simply putting it on the desktop , or a regular folder.I’ve no idea how safe the Lockbox is , aside from that I unlocked it and uploaded. After all this time I feel embarrassed to admit I don’t know how to work with files in the chest :stuck_out_tongue:

http://img134.imageshack.us/img134/7595/avastinfectedprocesslasso29906kasperskycf6.jpg


http://img99.imageshack.us/img99/3252/avastinfectedprocesslasso29906jottigw6.jpg

After uploading scanned the file with Avast! and sent it to the Virus Chest .

  1. How do you Export a file to an online scanner , if at all ?
    2.Seems it’s a false positive , although I’ll leave it in Virus Chest for time being .
    ???
2

You highlight the file in the chest and right click and select Extract (see image), you can then extract it to a temporay folder, a copy still remains in the chest (confirm). You could also use Restore but this if more dangerous as it is in the location where it was and could be activated.

3

Thanks DavidR . Pretty much what I did. Would be good to be able to “Extract” a file for Uploading without copying out of Virus Chest to your system , even if it’s not to it’s original location .

4

That would make a bit of a mockery of protecting the chest from outside influence if something could access the chest to extract a file there in theory would be little to stop it executing it or possible something else.