MSUpdate/Protoride worm

I am using Windows 98Se and Avast 4.7 Home Edition Build May2006 4.7.827. Avast correctly identified an infection of MSUpdate/Protoride worm, but failed to remove it. The error message said something like “error moving msupdate to chest - access denied” I eventually got rid of this worm manually by using MS-DOS prompt to delete the .exe file, and then editing the exefile\shell\open\command registry key to restore the default value “%1”%*

My question is: Why was Avast unable to clear this infection for me?

Unfortunatelly, with Windows 98 you couldn’t run avast at boot time.
Access denied means that the infection is active, some process was using that file.
This is a common procedure of viruses to avoid cleaning.
Anyway, maybe they could improve the cleaning process of this particular infection, specially the Registry cleaning one ::slight_smile: