I’ve noticed a couple of previous queries concerning Win32:VBCrypt-CSL[Trj] on the board, and that they’ve usually been dismissed as false positives. I am however a bit concerned about my detection of Win32:VBCrypt-CSL[Trj] in the file ntuser.dat.log2 for a couple of reasons, one being that I’ve noticed other files reported as infected over time (Avast! has however been able to deal with those but concistently fails to repair or delete ntuser.dat.log2 - on occasion the infected file is log1 instead of log2 though).
The file can’t be removed, copied or read in any other known way known to me, which makes it impossible to submit it for analysis. Not as a user nor an administrator. During startup scan the flags are reported as “incompatible” which also is the reason given for Avast! being unable to access the file.
I submit a screenshot of Avast!'s scan report (in Swedish, but the essentials should be obvious regardless of language) for your consideration. Any feedback would be appreciated. If at all possible, I would like to avoid a re-install.
Operating system affected: Windows 8.1