*PROCESS\384\avast.svc\7cb0000\18000

Twice I’ve done a custom scan; all harddisks, rootdisks (full scan), and operating memory of the computer. Today has been the first time I’ve ever seen this kind of problem. I did a loose and specific search on the forums and didn’t find any similair problems so I’m pretty worried right now.

I’m not really sure what or where this is, and there was no action recommended or otherwise that I could perform. It says it’s severity is high, and that it’s some kind of JS:Redirector-DG [Trj]. No idea what that is. Anyway the File name was listed as *PROCESS\384\avast.svc\7cb0000\18000 on the scan results. What’s wrong? What is it? What should I do?

I would say ignore it, considering it is the main avast scanning service, I had this yesterday after some testing for another topic (visiting a suspect site) and I had a web shield and network shield alert. These detection signatures may well have been in memory when I did a custom scan of memory (checking out another forum topic memory scan issue).

This is a of memory block loaded into of memory by avastSvc.exe the main avast service, because it isn’t a physical file, you can’t move a memory block to the chest, etc. So really there is not a lot you can apply. You could reboot of course and that would put you on a clean start.

Or you can do what I do stay away from custom scans and stick to the pre-defined Quick and Full System scans, they are not only quicker, but they also cover files that are of higher risk of infection anyway.

Custom scans are for the most part going to be scanning what are inert files, that represent no risk unless run and that is where the resident scanners come into their own. So the actual requirement for an on-demand scan is lessened.

Had you earlier had a web shield alert as this would be the most likely shield to pick up on the JS:Redirector-DG [Trj] (javascript redirector).

Edit: Just ran another custom memory scan and no detection this time round.