Full scan finds 9 files but does not appear to delete

Viruses and worms
1

First I have the full version of Internet Security 7. I have a license that covers 2 pc’s. The problem I’m having is on my desktop.
I have the Full Scan set to run nightly. I have the scan set to delete first and then move to the chest if it can’t be deleted. The past 2 nights, it has found 9 files that appear to be various types of malware. Avast doesn’t appear to be deleting the files or moving them to the chest. Is there some setting somewhere that I neglected to turn on to do this? When I check the log, the files are showin in red. It doesn’t appear that any action has been taken.

Do I have to highlight the items in the log file and manually delete them? Or should it be automatic?

Thanks in advance.

2

After the scan>>click on scan logs tab>>click on the show log>>select action>>hit apply>>and then wait for a few seconds and see if it performs the action select or not…

dont forget to give us the name of infections found on next post…

if it doesnt remove them follow this guide:
http://forum.avast.com/index.php?topic=53253.0

and attach all logs here…

EDIT:move to chest should be your primary action if not possible to move to chest then only delete

3

Setting to delete as first choice is not smart…what if a system file is wrongly detected?

Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm

About the detected files not removed…impossible to answer as you give no info about them

What file is detected?
Where is it located?
What malware name does avast give it?

Can you attach a screen shot maybe?

4

Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest (a protected area) and investigate.

5

oh i am sorry…that was just a test run i modify my post…thanks for covering up! ;D

6

Thanks for the help. I’m at work and as soon as I get home, I’ll post the files and make the changes you suggest.

7

I’ve attached a .jpg of the scan log. I tried to highlight any of the files in the list and I couldn’t. The default action is ‘move to chest’. But since I couldn’t highlight anything, the apply button is always grayed out/not available.

8

Nothing to worry about in any of them:

  • Detections in Memory -
    My guess is that you are doing a Custom scan in which you have elected to scan Memory and that all these detections are in memory or are listings of files that can’t be scanned. Since they aren’t physical files they can’t be moved to the chest, deleted, etc. so there is no action that can be taken, hence the Apply button being greyed out.

The detections in memory are frequently other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don’t be too surprised if it finds some in memory.

The first group are detecting MBAM signatures in memory.

The locked files you can do nothing about, the decompression bomb, again nothing to do or worry about.

  • Decompression Bomb, a file that is highly compressed, which could be very large when decompressed. This used to be a tactic long ago to swamp the system, also see:

Also see this very old reply from one of the avast developers.

[quote author=igor link=topic=8943.msg73950#msg73950 date=1100877654] A decompression bomb is a file that unpacks to an enormous amount of data - thus “flooding” the unpacking engine. It’s quite hard to detect such files reliably, so it’s possible that it gives some false alarms oca

9

well you have done what many others have done…played with the scan settings and not knowing what the result will be

unless you have some special need or know something the avast guys dont…then use the default quick/full scan with default settings

the problem is you have done a custom scan and selected “scan memory” and then detected malwarebytes signatures loaded in memory. ::slight_smile:

search the forum and you should find lots of others that did the same. :wink:

the locked files seems to be in use by your graphic card, nvidia

10

Yes, I understood the locked files and the bomb messages that aren’t actually anything to worry about. My concern was the files marked as a virus or trojan. It looks like it is actually Malwarebytes Anti-malware sofware that it’s finding. I ran a quick scan of that and noticed the log file was mbam-something. Made me go ‘hmm’. Anyway, thanks for your help.

11

You’re welcome.

It isn’t malwarebytes that it is saying is infected as such, just that it the Process responsible for loading the unencrypted virus signatures into memory.

Also if you happen to have the MBAM interface open it loads mbamswissarmy.exe I believe and this too loads signatures into memory.