problem with USB-sticks after Win32:Qqpass-DZ [Trj]

Avast Free Antivirus / Premium Security
1

Hi everybody,

more then a week ago I had a problem with a false detection of a virus “Win32:Qqpass-DZ [Trj]”. I know that other persons on this forum had the same problem (see other topics). Avast updated his VPS (so did I) and the problem was fixed: no more signalisation of any virus. The ‘infected’ items (all from c:\windows\system 32) are in my chest . I ran a scan again and it said : no virus found, so I tried to restore them from my chest to it’s original location. A message said that it was already restored. But, and here comes my problem, since this situation I can not run any more USB-sticks on my computer. I looks like my computer simply doesn’t find them when they are connected. so I can’t open them. I have windows XP. normally you don’t have to install the usb-sticks before use. (i didn’t have to do this before this problem neighter). Does anyone knows what I have to do to use my USB-sticks again? has it something to do with the files in the chest?
thanx

bosco

2

What’s the name of the affected file? (that you moved to Chest)

3

hi,
the name of the files in my chest are the following:

kernel32.dll c:\windows\system32
winsock.dll c:\windows\system32
wsock32.dll c:\windows\system32
notepad.exe c:\windows
notepad.exe c:\windows\system32
notepad.exe c:\windows\ServicePackFiles\

I hope you can help me with this because I can’t find the problem. The USB-sticks and mp3-players work perfectly fine on an other computer, except on my own. The computer doens’t seems to detect them. There’e also nothing wrong with the usb-ports themselfes on my computer because my mouse (witch works on usb-port has no problem working)

thanx
bosco

4

sorry, the last file name from my chest is incomplete:

it’s: notepad.exe c:\WINDOWS:\ServicePackFiles\i386

5

These are normal system file backups.

If you right click the file into Chest and scan it again, is it infected?

Well… these ones could be infected… do the same as above and post the results please.

6

hi

I’ve runned a scan again on all the filles and not one of them is infected. They all say: ’ no virus found’

thanx for your quick response

boscos

7

You will notice that the chest is in compartments, the only ones that should concern you are in the Infected Files, those you send to the chest after detection and User Files, those you import into the chest (suspect undetected files). The System Files section contains back-up copies of important system files (kernel32.dll c:\windows\system32, winsock.dll c:\windows\system32, sock32.dll c:\windows\system32).

After the false positive detection of the notepad.exe files you should have restored them, right click on the file and select restore. This will send it back to its original location (you will however still have a copy in the chest if you try to restore it twice you will get that message), once you have confirmed that the file is back in the original location and is working (notepad.exe), you can delete the one in the chest (leaving the copy there won’t hurt either).

None of the above however, would appear to be in any way connected to the problem with USB pen drives.
Are you getting any errors (what happens) when you plug in the drive ?
Can you see the usb stick in windows explorer ?