After running Windows Update last night, today Avast told me that printconfig.dll is infected (IDP Generic) and moved it (or a copy) to the chest. It told me that the only way to remove it is to restart (see attached screenshot)
I have scanned the file at virus total and it is clean on every test, even Avast.
If I restart now, I assume Avast is going to remove/try to remove this file, and I have heard this can cause massive problems (probably can’t restore the file later).
How can I prevent it from going through with this?
additionally: I cannot send in the file in the chest for analysis, all I can do is restore. Where should I report this false positive?
Well, it seems that it removed the file on restart. I deleted scan history and rescanned the system and the file itself before restarting (as well as backing up some data and creating a restore point) but it didn’t make a difference.
Some more information: the update install log I received yesterday contains many references to print services and the file itself. It seems pretty unlikely that Windows shipped a file with a problem.
The file it removed is in an archive in the system folder nearby.
Checking the system for damaged or missing files doesn’t report any missing files.
The system isn’t hanging or anything and apparently I can print okay.
No idea how or if I should go about putting the file back. It seems like a bad idea to just use Windows like nothing is wrong.