Scan found malware, tried to apply corrective measures, now what ?

system · 2016-12-03T21:23:56.000Z

Hi,

I did a full scan which found some malware. Having selected the desired corrective measures for each malware, I tried to apply them, but no result was displayed. The screen seemed to scan the results, changing some of the measures in the process (ex.: changing from Delete to Moving to Chest). But there was no warning of success or failure as usual.

Now the results screen is gone. How can I check whether the malware found has been processed and dealt with ? Can the results screen be recalled ? I can’t find the Chest, nor Logs of past scans in that incredibly complex user interface. Where are they ?

Thank you.

Pondus · 2016-12-03T21:54:12.000Z

Tried FAQ section? https://support.avast.com/support/home

https://www.avast.com/faq.php?q=Chest&authenticity_token=%2FwdpGtUfwiNQDpVuk8iNsubWeb9PWJAjGX1M%2Bu%2BvvNg%3D#searchForm

DavidR · 2016-12-03T22:09:45.000Z

@ Clairvaux
AvastUI > Scan icon > Scan for viruses > from the bottom of the next screen select - Scan History.

system · 2016-12-03T23:35:15.000Z

Thanks, DavidR. I have now found both the Virus Chest, with a bunch of files flagged as malicious by my last scan, and the Scan History, with the report from that last scan.

I have also found that in the Scan Results page, I had not seen the Results column because it was hidden out of sight by the File Name column which was too wide. Resizing the File Name column made the Results appear.

Now all the detected files have “Move to Chest / Action Successful” appended to them, except a group of them which have “Error : The System Cannot Find the File Specified (2)”. The Action drop-down menu is still active next to those files, so I tried re-applying all available options to them, but the Error message stays the same.

Some of those files are in a locked folder which I myself cannot access through Windows Explorer (the icon has a lock), however how could Avast find and flag them during the scan, and it “cannot find them” now ? Is there a way to finish the job here ?

DavidR · 2016-12-04T00:02:21.000Z

You’re welcome.

It isn’t actually still active, just replicating the report as you would have seen it first time round.

Actually scanning a file isn’t that much of an issue, in certain instances avast it may makes copy of the file in the avast sub folder and scan it there. It is a different ball game if it is trying to remove it from a protected area.

Without knowing the file name, its location and malware name given it is hard to speculate as to why you got the error. However, if that related to using the trying to re-apply the action then that is highly likely to fail as the action was taken and may no longer be there.

system · 2016-12-04T03:34:08.000Z

Very clear. All those error-triggering detections were PUPs, so no big deal.

Let me ask you, though : among the quarantined non-PUP detections, there was a virus attached (possibly not the correct word) to a URL : a bookmark I had saved in my browser. Can a virus attach itself to a link ?

The virus description is INI:Shortcut-inf [Trj].

Pondus · 2016-12-04T09:46:56.000Z

The link/shortcut may trigger the infection process, eksample here >>
http://blog.jpcert.or.jp/2016/06/asruex-malware-infecting-through-shortcut-files.html

https://blog.avira.com/lnk-files-shortcuts-faster-infections/

system · 2016-12-04T18:35:16.000Z

Interesting, Pondus. Actually, I’m pretty sure this is a link to a website I added myself to my bookmarks, and not a rogue link sent over an email, or a link pretending to be a shortcut to a local file. Anyway, it’s better in quarantine…

Announcements