I received a zip file wich was said not infected by avast mailscanner, i unzipped the file and scanned it with the right click avast scanner in the explore ( not infected) and only when i clicked on the .exe file, the standard shield beeped and recognised a trojan. I clicked on erase file and my system (win98se) freezed… the trojan was installed and remained in memory… :-\
only a full system scan removed it…
Can i send you (where?) the infected file in order to improve the mail scanner ?
I guess u didn’t enabled the Packers scan.well packers is basically ment for scanning for compressed files like .zip,.rar. and .raj e.t.c.To enable this option pls goto start avast anit-virus scan and goto simple user interface and goto tasks folder and Right click on resident protection,it will give a warning just click OK and goto internet mail,on internet mail check for packers and tick ALL PACKERS.That’s it.If it all it did not scan the compressed files do right click manually and scan with avast.It does fails to scan when the compressed file is password protected.Which all anit-vius can’t do that kind of file.
i kept the zip file (if avast wants it…) and deleted the registry enters and avast deleted the wiwshost.exe file
something “funny” with that virus is that it prevented zonealarm to start at next boot (very smart!!!) and i had to reconfigure my zonealarm as if it was the fistr time i launched it…
If you are going to open things out of scientific curiosity, I suggest you get your backup/recovery strategy in place first. By far the easiest is to do regular image backups of your HDD and daily backups of your data files, etc.
Save your avast4.ini file is as far as you can go I think (not certain), it should save a good deal of your settings. I don’t know if there might be other data files that might be worth saving.