Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: brutus1 on September 21, 2007, 06:47:21 PM
-
After setup andreboot, I scanned my (Vista -based) system. Along with a couple of adware problems (curiously, one of them was wbamp.exe - the Webshots installation program) I also was bemused to find winsock.dll, winsock32.dll and kernel32.dll. There's nothing under the tab -Virus. The problem is that I automatically had every threat moved to the chest. I figure these files might be kinda important and tried to return them to their respective places but was told that ... well, access is denied. So, before I reboot or even close down Avast, just how screwed am I?
-
Those are backup copies of the 3 files. Avast put them there and will keep putting them back if you remove them. Expand the chest folder and you will see that it has 3 folders. User, system and infected.
-
Webshots has in the past been considered adware.
You can check out wbamp.exe at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.
Or Jotti - Multi engine on-line virus scanner (http://virusscan.jotti.org/) if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can't do this with the file in the chest, you will need to move it out.
The only area you need be concerned with is the 'Infected Files' section, as oldman said the winsock.dll, winsock32.dll and kernel32.dll files are back-up copies and are in the System Files section. The User Files section (where they can do no harm) is where you the user can add files you believe are suspect and send them to avast for analysis. There is a forth section All Chest Files, but it is not a true section it collates and shows all files in the chest.
-
Alright. Thanks. I think I got it. Avast! makes copies of these 3 files and puts them here (where I can't do anything with them, even if I needed them) for some reason and I shouldn't worry about it, Right?
As far as Webshots, since I might, in the future install it, can I choose to "ignore" that file from now on?
Again, thanks to both of you. I was developing a ... moderate panic.
-
Alright. Thanks. I think I got it. Avast! makes copies of these 3 files and puts them here (where I can't do anything with them, even if I needed them) for some reason and I shouldn't worry about it, Right?
Right.
Webshots wasn't ever consider a malware... Better if you submit that file to VirusTotal and check.
-
Alright. Thanks. I think I got it. Avast! makes copies of these 3 files and puts them here (where I can't do anything with them, even if I needed them) for some reason and I shouldn't worry about it, Right?
avast can use them if the original files get infected 'it' can restore the copies.
welcome to the forums.