Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: colby266 on November 23, 2003, 03:22:16 PM

Title: Virus found in avast itself
Post by: colby266 on November 23, 2003, 03:22:16 PM

Downloaded latest update and vps file, ran scanner and found virus in avast files. Scanner status is now infected. Do I need to uninstall and reinstall?

Title: Re:Virus found in avast itself
Post by: Lisandro on November 23, 2003, 03:29:05 PM

Do you mean that scanning a file in Chest folder is infected or the vps update file? The Chest files are 'infected' ones indeed, which are safelly stored into Chest.

Anyway, for re-installing I suggest:

1. Download avast! 4.1.289
2. Desinstall your actual version of avast (Control Panel).
3. Boot
4. Use Avast Uninstall (http://www.avast.com/files/eng/avclear4.exe) for complete desinstallation.
5. Boot
6. Install the downloaded 4.1.289 version.

Title: Re:Virus found in avast itself
Post by: igor on November 23, 2003, 05:54:00 PM

What is the exact filename of the "infected" file?

Title: Re:Virus found in avast itself
Post by: Waldo on November 23, 2003, 07:28:23 PM

I remember (a long time ago) someone got a similar problem...Avast detected a (old) virus-signature in its own database,lol  ;D

This "bug" was fixed on the next update though....

Maybe it's something similar this time  ???

Waldo

Title: Re:Virus found in avast itself
Post by: Vlk on November 23, 2003, 09:18:22 PM

I guess it's a file in the <avast>\data\moved directory. That's where avast moves infected files by default -- i.e. if you've ever chosen the 'move' option when asked what to do with a virus, and haven't changed the default settings, this is where the file would be moved...

Title: Re:Virus found in avast itself
Post by: colby266 on November 24, 2003, 02:19:29 AM

Recently moved and downgrade from road runner to modem sucks.  :(Downloaded new program, found that a virus named A0016655.exe.vir was stored in "moved" file. deleted it. Scanner still reports status as infected??? Uninstalled, reinstalled new download and all is well. Don't know why the status stayed infected but re-install fixed it. Thanx for the advice and help. :)

Title: Re:Virus found in avast itself
Post by: igor on November 24, 2003, 09:31:43 AM

If you only "move" the file, it's really only moved the given folder - i.e. it is still infected, of course. If you "move the file to Chest" - it would be something else. The files moved to chest are "hidden" (encrypted, in fact) - so that you cannot simply start them (even if you renamed them).
So, when you uninstalled avast, the content of the avast folder has been deleted - including the "moved" folder, containing the infected file. Therefore, you don't get the warning anymore.