1st- Sometimes, when it detects a virus, i click “move to chest”. it takes a few seconds and an error msg displays stating it cant move it because another user is using it. i think click ok and it gives me the option to move it to the chest again. i click on “move to chest” again and it gives me the same error message. the only way to make this cycle go away is by clicking “delete” instead of “move to chest”.
2nd- i ran a “through” scan on all my files/folders and it finds some viruses. they seem to be the same ones that state they are being used by other users (problem from above). even after i delete them, avast alerts me that a virus has been detected. one of the viruses is “valera1” and the other is “jaun”. there is more to the title but thats all i can remember.
You should in theory get the same error as the file in use shouldn’t be able to be deleted in much the same way it can’t be moved.
Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.
If you have XP or Win2k, you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, Menu, ‘Schedule boot-time scan…’ it won’t be in use before windows starts.
Or see http://www.digitalred.com/avast-boot-time.php.
What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.
If a virus is replicant (coming and coming again), you could follow the general cleaning procedure:
Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.
Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).
It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.
After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.
Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.