possible virus C:\\Windows\Installer\fca0.msi (logs attached)

Viruses and worms
1

Just wondered if anyone has any advice about the following:-

I’m running a combination of Avast 9 free with Comodo firewall (set up as per Chiron’s advice on techsupportalert.com). Had been running MSE until 2 weeks ago, then switched back to Avast because of better AV reviews. Computer is running Win 7 SP1 with all updates installed.

Today, this appeared without a schedule scan being performed:

VIRUS FOUND:
Object: C:\Windows\Installer\fca0.msi [>…[>[Embedded_l#0601c]
Infection:Win32:Evo-gen [Susp]
Process: C:\Windows\System32\rundll32.exe

Avast gave me several options (deal with it automatically, block, delete, move to chest).

I selected move to chest first, but this was somehow prevented. I next selected “deal with this automatically”, again nothing happened and the same alert appeared. Finally I used the block option which removed the warning screen.

Yesterday’s boot time scan revealed no suspicious files.

Does anyone have any advice please?

Many thanks

2

Nothing untowards showing in the logs, had you completed an update prior to that

3

The only changes I had made that day were to install Dell’s own “My Dell” and “Dell System Detect” to check for updates to drivers.

4

That is the detection Avast was not overly happy with the permissions it had. It is a false positive