Repaired Viruses

Viruses and worms
1

When I try to repair a virus file with avast it says the file has been repaired after that if I again scan the file avast still detects viruses why ???

2

What virus is being detected and what is the location of the detected virus?

3

Can you say what is the infected file name, where was it found (C:\windows\system32\infected-file-name.xxx)?
What avast! version and virus database are you using? (see About dialog of avast!)

I also suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
4

Besides what has already been said, the malware name is also important, especially if this was a Trojan.

Trojans generally can’t be repaired (either by the VRDB or avast virus cleaner). This is because the entire content of the file is malware, so it is either move to chest or delete, move to the chest being the best option (first do no harm). When a file is in the chest it can’t do any harm and you can investigate the infected warning.

5

The viruses I have repaired and avast still detects as viruses are Win32 rootkit -gen and Brontok viruses

6

Please, answer.

Generally, these infections can’t be repaired, just send to Chest, but if the malware is coming back and back again, follow the other steps I’ve posted before.

7

These viruses are in the installation files of nero in my USB pendrive Can I install nero? :slight_smile:

8

Are these files from a legit Nero setup?
If so, please, send them to virus@avast.com for analysis, mentioning a link to this thread. In this case, they’re could be false positives indeed.

If you’re really sure the files are clean, then you can disable avast to install Nero. Although, I do not recommend this. I’ll wait avast correct the false detection (if any).

9

There are viruses in the nero setup because I took it from a infected computer which writed some viruses to my USB pendrive along with the installation files of nero :slight_smile:

10

So, I won’t use these files… I’ll be sure they’re clean before trying to install Nero.

11

Thanks for answering I formatted my USB pendrive Today :slight_smile:

12

You’re welcome. Feel free to come back any time you need help or just to change experiences 8)