Twice during the last months Avast has notified me about viruses in files. Both times they have been files I used for a long time so I think they were FP.
I got a pup up window asking me to move file to chest. When I click “OK” the pop up window disappears and comes back immediately with the same content. I click “OK” and it comes back. Over and over again.
The FileShieldScanLog tells me there is an “Error: The process cannot access the file because it is being used by another process (32)” and later" Error: Access is denied (5).
The only way to get out of this is to reboot. After that the file is gone and nothing in the chest.
Yes, I do use these programs. They are not running and the two files have no handle associated to them so I guess they are not in use. Checked that with “Sysinternals Process Explorer”.
I have attached a few more logs but I cannot see that there are any problems with my files.
I concur, there is now malware present. There are some old Java addons that need removing also a suspect Ads on the windows folder. Are you experiencing any problems ?
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Ok, I hope I did this correctly. The OTL.txt file is attached.
I removed the two files from the “Exclusions” list and run Avast quick scan. Didn’t report any problem. So maybe the latest virus database has taken care of this. Have to wait and see if this turns up again.
Thank you for helping me and if you have any other suggestions I will be here to respond to them.
Ok, this morning it was there again. IPSwither.exe has a Win32:evo-gen (Susp) virus. This is not a problem in itself as it is probably a FP. But it is impossible to get rid of the pop up window. It just comes back. And in the log it says: Move to chest. Error: Access is denied (5).
The file is not in use so I don’t know what access is denied.
As before, the only way to get rid of the pop up window is to reboot and then the file will disappear. I cannot even send the file to Avast for analysis. (Don’t know how to put it in chest manually???).
If you had read my first post you should have known that it is not the file in itself that is the problem but the behavior of Avast. Avast cannot put a suspicious file into the chest. Actually, it cannot do anything with a file. It is just coming back with that pop up window again and again. With any suspicious file. I can live without that IOSwitch file but I cannot live with a antivirus program that cannot handle suspicious files.
So what should I do? Uninstall and reinstall Avast? And if that doesn’t help I guess I have to switch to another antivirus software.
Sorry I was a little rude in my last mail. Now I have uninstalled Avast 5 with Total Uninstall 6, which uses Avast’s own uninstaller and after that deleted 289 leftovers (folders, registry entries and other stuff). Then I re-installed Avast and now everything works as it should!
Avast finds the suspicious file and moves it directly to the chest. Perfect.
I have used Avast for many years and installed it on all my friend’s computers and I have always been very happy with it. Maybe I just have updated the software too many times. A fresh install was needed.