I’m running 5.0, machine is running XP SP3, 512Mb RAM, 2.0GHz Sempron.
During a normal scan ,Avast found “…teatimer.exe”. with message “unable to clean. Please schedule a scan at next boot up” (paraphrased). I scheduled the scan, re-booted, it ran. No results. Immediately ran another full scan, infection remains.
Have also run Spybot, MalWarebytes, SuperAntiSpyware, Threatfire, & HouseCall. They all show no infection. Being a teatimer file, I’d think that it’s something to do with Spybot, but I’m not certain.
Is this possibly a false positive? If not, how should I proceed?
Yes, whilst that file name is associated with S&D but that is no guarantee that, a) it is part of S&D as no location is given and b) no guarantee it isn’t infected. Which is why it needs to be checked at virustotal as suggested.
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here the URL in the Address bar of the VT results page. You can’t do this with the file securely in the chest, you need to extract it to a temporary (not original) location first, see below.
avast5 - Create a folder called Suspect in the C:\ drive. Now exclude that folder in the File System Shield, Expert Settings, Exclusions, Add, type (or copy and paste) C:\Suspect* That will stop the File System Shield scanning any file you put in that folder. Now enter the chest again and Extract the file to the Suspect folder and upload it to VT.
Ran through virustotal. It came through clear. I’ve done a system restore back a couple of weeks, & am going to re-run Avast boot scan, Avast normal scan, MalWarebytes, &c. My thinking now is that it’s probably a false positive, so I’ll say thanks again & close out the thread.