Hello. I am having some trouble with the W32.Jeefo ( http://securityresponse.symantec.com/avcenter/venc/data/w32.jeefo.html ) virus, which attaches itself to exe’s. It’s not a very harmful virus, and actually hasn’t infected a very large number of computers. However, avast! cannot repair the exe’s infected with it. Well, I made the mistake of, during a boot-scan, selecting it to “move all”. Roughly 100 of my exe’s were infected with it. Now, they’ve all been moved, rendering most of my programs useless.
I’ve manually moved back several of the files, but what I’m asking is whether or not there’s a way to restore them all. Some of the files I’m not even sure where they go, as they aren’t very uniquely named (e.g. ‘jpeg.exe’). That would be very helpful. I searched around, but couldn’t find anything on this forum.
At least you didn’t make the mistake of deleting them, then there really wouldn’t have been anything you could have done. I’m making the assumption you have a plan to repair them with another tool when you move them back?
Right click avast icon, select Start avast! Antivirus, Menu, Virus Chest, Infected files and you will see all the files that have been moved to the Chest. You will see the original location of the file. Hover, you need not worry about that since you can highlight the files you want to Restore and either right click and select Restore (or from the Menu text, File, Restore and they will be sent back to where they were moved from.
I went to TrayIcon–>Start avast! Antivirus–>Tools–>Virus Chest and got a dialog box that only shows about ten or so files, while in my moved folder I have hundreds: many vital exe’s which I’ve identified in my moved folder are clearly not listed. By manually moving some, did I confuse it? Any suggestions? Thanks for the help, anyway.
Care! The move folder is not the Chest!
Files on the moved folder (under avast! installation folder) is ‘temporary’ and you should move than to Chest to be safe.
Rescan the ‘moved’ folder and, if you need, send files to Chest.
I’m not sure about files that are in the moved folder as I have never used that function (and as such don’t have that folder) but rather move to chest.
If there is a restore option try one file and see where it is sent and if that appears to be correct. e.g. the program works, etc this however, isn’t easily achieved as by running the program with an infected file it may spread the infection further.
I doubt that moving some files manually would confuse it as each files has (or I would have thought) an associated line entry with information relating to any restore functionality (assumes this can be done with files in moved folder).
Correction. The full path is: C:\Program Files\Alwil Software\Avast4\Data\moved
The moved folder does not ‘save’ the original one, i.e., where the file should be restores.
The Chest does it for both manual and automatic files sent there.
Sorry Tech, by the way ‘michaelpb’ was talking I assumed that it was somehow in the same location as the chest, which is why I mentioned the restore functionality.
Had I checked windows explorer rather than the Virus Chest (with its different sections) I would have see the folder outside the chest. Obviously in this case there is no easy shortcut other than manually moving files back to their original locations which is likely to be very difficult (because of the numbers and not being sure where they should go) and time consuming.
I was actually under that faulty impression myself.
The moved folder does not 'save' the original one, i.e., where the file should be restores.
The Chest does it for both manual and automatic files sent there.
So then there’s no easy way of getting them all back? PaintshopPro 8 isn’t working now, and I’m not sure which exe corresponds to it. Also, whenever I start up windows explorer, it always tries to install Microsoft Money 2003, and I’m not sure which exe it needs. Very frustrating, as you may imagine.
So then there's no easy way of getting them all back? PaintshopPro 8 isn't working now, and I'm not sure which exe corresponds to it. Also, whenever I start up windows explorer, it always tries to install Microsoft Money 2003, and I'm not sure which exe it needs. Very frustrating, as you may imagine.
I’m not sure if this will help but if you check the file properties (right click context menu), there may be something in that which may indicate the parent program/company, etc.
You can find original locations of moved files in the boot-time scan report file (Avast4\DATA\report\aswBoot.txt), but there is no easy way to move them back automatically.
As far I know, at that time the necessary drivers to make Chest to work were not loaded…
But, maybe, the ‘moved’ folder could have subfolders repeating the struture of the original path:
… avast4\data\moved
\C\Windows\System32\filename.sys
\C\Documents and Settings.…
\D.…
It won’t be difficult to implement a folder creator at that time, I suppose :-[
As far I know, at that time the necessary drivers to make Chest to work were not loaded...
That makes sense, I hadn't thought of that when the moving of files is done on the boot-time scan.
Using the sub folders idea you mention would be very helpful with the manual restoration of files, although not an automatic process is would be much better than the current system. It may be that many files that are moved will come from the same folder, that too would group files in the same sub folder of the 'moved' folder and help with manual restoration.
Ah, thanks. That will be very helpful in fixing my computer.
But, maybe, the 'moved' folder could have subfolders repeating the struture of the original path:
... avast4\data\moved
\C\Windows\System32\filename.sys
\C\Documents and Settings\...
\D\...
That does sound logical, and it wouldn’t be too hard to implement.