Hello,
I’m new to the forum. I’m running Windows XP and I’m using Avast 4.8.
Yesterday, I got an alert from Avast telling me that an exe. file in MS Works was infected by win32:malware-gen. Not having much experience with this sort of thing, I freaked and just deleted it as apposed to sending it to the chest. A friend told me to do a boot time scan which I did. I deleted some problems but then started moving others to the chest as advised by same friend. I’m having absolutely zero problems or slowdowns or stangeness with my PC but I’m still VERY concerned about all of this. Here is what I’ve done so far:
Did the boot time scan with Avast, that I already mentioned, and deleted some problems and moved others to the chest
Used CC Cleaner
Ran Malwarebyte which found nothing
Ran SuperAntiSpyware which found nothing
Did another boot time scan with Avast which nothing that it hadn’t already found on the first boot time scan
Ran every single file from the Chest Folder through VirSCAN.org. As long as I did a new scan with the freshest updates, not one of the files in The Chest folder came back with any malware from any of these scans, INCLUDING AVAST!! ???
Rescanned the files from within the Avast chest and they still read as being infected
So, here are my questions:
Why in the world would the files in my Avast chest still be reading as infected when they all come back as having no Malware found when I scan them on VirSCAN.org, even though Avast is one of the many programs that scan the file with using VirSCAN.org?
When I rescan the files from within the Avast chest, I think they were sent to a temp folder during the course of the rescan. Do I now have to worry about infected files from that temp folder causing a problem?
Given that the ONLY program seeing these files as a problem is Avast, are these most likely false positives?
What should be my next move as far as the files that I still have quarantined in the Avast Chest?
If you are kind enough to answer my numbered questions, please keep in mind that I am really in the dark about all of this stuff and need answers given in VERY basic language. It may look like I’ve done a lot so far but I needed help with each one of those steps.
Thanks in advance for any help that you may give me.
Was this inchtour.exe you didn’t say ?
If so a search of the forums would have found other such reports, which I believe have been acknowledged as a false positive and corrected.
Ensure that you have the latest VPS Update and scan the file again.
Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.
It would have been easier just posting the file name and location, etc. as again rtlcpl.exe detection has been covered also. Unusual to be the first to post, see this topic below, post and my reply as it looks like an FP.
From the image you appear to have a problem that really needs cleaned up first, e.g. avast4 isn’t installed or broken. So that may impact on even downloading version 5 and installing, yes download avast 5.
Download the latest version of avast 5 http://www.majorgeeks.com/download1968.html?2010-01-29 and save it to your HDD, somewhere you can find it again. Use that when you reinstall. Ensure that you scroll down and select the avast direct download link for the English version
Download the avast! Uninstall Utility, find it here and save it to your HDD.
Now uninstall (using add remove programs, if you can’t do that start from the next step), reboot.- 2. run the avast! Uninstall Utility, reboot. If step 1 failed it may be necessary to run this from safe mode, once complete reboot into normal mode.- 3. install the latest avast 5.0.296 version, reboot.
Once avast 4 is cleared all chest files are also removed (they will not be on your system).
David,
Thank you VERY much! I will do as you suggest but first…
So you’re sure that clearing those chest files is safe and won’t “Do any harm”?
If it’s a FP shouldn’t I try to restore the files before uninstalling version 4.8?
I guess I answered my own question. I did restore the important files in question and then followed your suggestions. Got rid of 4.8. Downloaded the lastest version and I’m now getting clean scans. Thanks for your help!