virus chest after uninstall?

Viruses and worms
1

Hi. I’m new here. My install of Avast is great, and it already found (and sent to the “chest”) a virus that no other anti-virus program could.

My question is this: If I were to ever have to uninstall the AVAST program, or (far be it) have to format my hard drive again, what exactly happens to a virus that’s been in storage inside the chest? Is it deleted, or reintroduced into the system? Just a curious thought. Thanks!
-Stephen

2
it already found (and sent to the "chest") a virus that no other anti-virus program could.
What file is detected as being infected and what is its original location? (right click the file in the chest and choose properties)

Format will wipe everything off the drive.

3

It is a “Winad client” trojan, and upon scan, the AVAST program suggested moving it to the chest. Yes, I’m aware of what formating the hard drive would do. I also know that some format attempts won’t absolutely remove all viruses.

I’m merely curious about the process the program uses to isolate and store the virus, and what would happen to the stored virus if the AVAST program were to be removed? Thanks for your reply!
-Stephen

4

I leave the question about the chest/uninstall to someone else. I am not sure about that one.

5

Thanks anyway. I did email tech support here, so maybe they have the answer. I appreciate the time you took to reply, and look forward to spending more time here. You are my first contact here, and you are a great credit to the forum. Thanks so much, and have a great day my new friend.
-Stephen

6

Thank you. To me it is only normal trying to help others if I can. I hope you will do the same.

7

The files “in Chest” are actually stored in a crypted form inside of the avast! installation directory. So, if you uninstall avast!, these files will be deleted as well.

8

You can backup entire “chest” folder and restore it anytime you re-install avast!.
I do it this way and it worked each time.

9

Thank you. You answered my question completely. Yes, I agree that it’s only normal to want and help others out here. I will do so, likewise. Thanks to all here!
-Stephen

10

By the way, I went to the Avast virus chest, and copied down the info on this Trojan. Could one of you more experienced people out here tell me what I was up against with this? I use a firewall, but am curious as to the dates of this virus, etc. Here it is:

Scanning of selected files

Program will try to scan 1 selected file(s) in the Chest

Move files to temporary folder: c:\windows\TEMP\aswF2B1.TMP
FileID: 0000000004 Original file name: c:\Program Files\Winad Client\WinClt.exe\WinClt.exe New folder: c:\windows\TEMP\aswF2B1.TMP\4.exe

Scan files in the temporary folder: c:\windows\TEMP\aswF2B1.TMP
c:\windows\TEMP\aswF2B1.TMP\4.exe[UPX] – no virus –
c:\windows\TEMP\aswF2B1.TMP\4.exe Win32:Trojan-gen. {UPX!}

Thanks! -Stephen

11

The file is ‘extracted’ to a temporary folder and scanned.
You can delete all infected files from Chest (they will be ‘erased’ and not moved to Recycle bin), it’s a secure procedure.
You can delete all temporary files of your c:\windows\TEMP\ folder after 8)

12

Great! Thank you so much for the info! Have a great day!
-Stephen

13

This TrojanDownloader tries to install various malware on your system through an activex control. Try using a safer browser, like Firefox :wink:

14

Ok, thanks! I did try firefox before, as a replacement for IE, but to tell you the truth, I love MSN explorer as a browser. I just can’t find any way to change the home page (even if I change it on IE…Microsoft says they are related) but I love the features it has.

Anyone who likewise uses MSN Explorer…please let me know if you’ve found a way to adjust the home page.

Thanks for the info on the Trojan!

15

That’s a question you should ask in the Off-Topic Forum. Not here. :slight_smile:

16

My! Excuse me!