[quote author=Pondus link=topic=96049.msg765966#msg765966 date=1332517881]
Avast 7 found "Win 32:Rustock-AY [Rtk]" on file "C:\Users\CBM\ntuser.dat".upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners when you have the result, copy the URL in your addressbar and post it here for us to see
alternative
Jotti - http://virusscan.jotti.org/en
VIRScan - http://virscan.org/
Metascan - http://metascan-online.com/
I can’t do it. When I select the file, I get a pop-up message saying the file is in use by another program, and that that programs needs to be ended. Of course, in line with Microsoft’s always-helpful nature, it doesn’t say what program specifically is using the file or how to turn it off in order to scan the file. (Could it be a self-defense by the “infected” file? I don’t know.)
I’ve scanned the file with Malwarebytes as well as the whole User folder with Norton Power Eraser. Malwarebytes found no threats. NPE found several files that it didn’t recognize enough to make a determination as to good, bad, or indifferent. Ntuser.dat was NOT one of them; it never came up in NPE’s results.
Sooooooo, . . . I’m going to ASSUME that Ntuser.dat on my computer is clean, telling Avast to “do nothing” when it finds it again.
The last time this happened, I had Avast 7. I stupidly told Avast to quarantine the file. Then, all hell broke loose upon re-start. The User profile was effectively wiped out – though, it was still there – and, the computer acted as if it were dealing with a brand new User profile that had to be set up. Anyways, to make a long story short: I restored the computer to its previous setting and everything went back to normal working order. Then, I installed AVG.
I was hoping that Avast 8 would have taken care of this. Or, that there would be (at least) some explanation as to why this is happening. But, . . . no. Back to AVG? I hope not. I’ve found Avast to be superior in many ways.