system
4
In reply to the above answers:
The following 9 files are infected;
-
Name: pav.sig
In map: C:\WINDOWS\system32
Infected by: Win95:Matyas
Message after attempting to remove the virus:
The file was not repaired.
Cannot process “C:\WINDOWS\system32\pav.sig” file
-
Name: imscan.dll
In map: C:\WINDOWS\system32\ActiveScan
Infected by: Win32:Kuang2
Message: File was successfully repaired.
-
Name: pav.sig
In map: C:\WINDOWS\system32\ActiveScan
Infected by: Win95:Matyas
Message: The file was not repaired.
Cannot process “C:\WINDOWS\system32\ActiveScan\pav.sig”
file
-
Name: WinStart001.exe
In map: C:\Windows\System
Infected by: Win32:Trojan-gen. {VC}
Message: The file was not repaired.
Cannot process “C:\Windows\System\WinStart001.exe” file
-
Name: A0019897.exe
In map: C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP229
Infected by: Win32:Trojan-gen. {VC}
Message: The file was not repaired.
Cannot process “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP229
\A0019897.exe” file
-
Name: A0020631.dll
In map: C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP238
Infected by: Win32:Kuang2
Message: The file was not repaired.
Cannot process “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP238
\A0020631.dll” file
-
Name: A0020646.dll
In map: C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
Infected by: Win32:Kuang2
Message: The file was not repaired.
Cannot process “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
\A0020646.dll” file
- Name: A0020657.dll
In map: C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
Infected by: Win32:Kuang2
Message: The file was not repaired.
Cannot process “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
\A0020657.dll” file
- Name: A0020713.dll
In map: C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
Infected by: Win32:Kuang2
Message: The file was not repaired.
Cannot process “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-B8D4-ABC18B018CE1}\RP239
\A0020713.dll” file
Question 1: Why can’t process Avast these infected files?
Note/Question 2: In spite of the message File Was Successfully Repaired,
every time I scan again my local drives with Avast, file
“number 2” - imscan.dll, located in map
C:\WINDOWS\system32\ActiveScan\ - stays infected by
the Win32:Kuang2 virus. How is this possible?
Note/Q. 3: So once a while I also use for a second opinion some free online
virus scanners like BitDefender Antivirus, Panda ActiveScan,
Symantec Security Virus Detection, or TrendMicro HouseCall
Antivirus. When I look to the map
C:\WINDOWS\system32\ActiveScan\ (see number 2 & 3) I think
that this map is used by the online Panda ActiveScan(ner)
software because of the same name (“ActiveScan”). Am I right?
Note/Q. 4: Does someone know what the function is of the file
WinStart001.exe which is located in map C:\Windows\System
and infected by the “Win32:Trojan-gen. {VC}” virus (see no. 4)?
Note/Q. 5: Every time I use the Avast 4 Home Edition Virus Scanner to scan
my local drives for viruses the number of infected files increases
by one. Again, how is that possible?
Note/Q. 6: Last question. What is the function of the map with the long
name “C:\System Volume Information
_Restore{6F41619F-E3DD-419C-…” (see no. 5 - 9)?