Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Johnny Chaos on September 22, 2012, 03:34:42 AM
-
Hi! I ran a virus scan with my three anti-virus programs - Avast! Free Antivirus (obviously), Malwarebytes, and Spybot Search & Destroy - last night. When they were all finished, I checked the results, and Avast! showed that I had an infection in the following location: C:/Windows/Installer/31667fc.msp>PCW_CAB_H15>FINDER.EXE. The threat it identified was Win32:Malware-gen, and it ranked the severity as "High." However, it was unable to move the file to the chest (as I have it set to do automatically) and under "Result," it says "Error: The operation is not supported for this type of archive. (42111)"
I ran a boot time scan after that, hoping that might allow me to circumvent whatever was causing the problem. However, when it came up on the boot time scan, it gave the same error message no matter what I tried to do; the only action it would allow me to take was to ignore it. I poked around a bit on here, and found that there have been similar instances involving the same error that turned out to be false positives; since my computer seems to be working the same as it always has, and I'm not super computer-savvy, what are the odds that this is another such instance? And of course, if it's not a false positive, what can I do to get rid of it?
-
Hi and welcome to the forum.
If you like we could have our Malware expert take a look inside (keep in mind the time difference)
Essexboy will probably reply tomorrow as it is Bed time. ;) :)
Please follow this guide and attach (not copy and paste ) the requested logs. http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0)
AdwCleaner
Malwarebytes
OTL
aswMBR
-
The operation is not supported for this type of archive. (42111)"
it means avast will not unpack the archive and remove the infection
anyway i think this is a FP .....it is a generic detection and located in windows installer cache c:/windows/installer
Missing Windows Installer Cache Files Will Require a Computer Rebuild
http://support.microsoft.com/kb/2667628
-
That is a false positive and can be ignored. If you wish we can set that file type under the exclusions
-
That is a false positive and can be ignored. If you wish we can set that file type under the exclusions
Shouldn't the file also be sent to the virus lab so Avast can stop detecting this false positive ???
-
I am extremely relieved to learn that this is nothing to worry about. Thank you all very much for your help!
-
hey i would suggest you uninstall spybot because they can't keep up with malware out there today. besides you good with avast and malwarebyte antimalware.