Avast WEBforum
Other => General Topics => Topic started by: Garythek on June 27, 2004, 04:04:38 AM
-
I'm running a virus test it say's it's found a virus, an it's giving me this error message: Access is denied; cannot process C:\Windows\System\imscan.dll\[UPX]"file. I'm running 4.1 Home Edition. Please help!
-
Just follow the instructions on the following page to clean your system:
http://members.home.nl/edeijl/acred/cleaning.htm
-
This thread on thses forums could also help.
General Advice&Tools for virus/trojan/malware removal (http://forum.avast.com/index.php?board=4;action=display;threadid=5373)
The User's FAQ (http://forum.avast.com/index.php?board=9;action=display;threadid=4818) could help for the future.
I'm guessing (from the location of the file) that you are using win98?
What was the virus name?
-
Yes I have windows 98. I didn't notice the name of the virus (I deleted several files affected by other virii).I just noticed that error message and thought that if it couldn't access that file, it wouldn't be able to deal with whatever had infected it.
-
Because the file is in the windows\system folder and is probably in use, windows protests it from deletion, hense the error.
Your best bet is to boot into safe mode (check your win98 help to see how) and then run the avast scan again. Hopefully that will stop the virus being loaded, so not in use allowing it to be removed.
-
I found the virus name, Win32:CTX. I can't even get rid of that imscan.dll file in safe mode.
-
I don't know if that file could be deleted...
But if it could, use MoveOnBoot 1.95 (http://www.webattack.com/dlnow/dlnow.dll?Inc=No&ID=104873).
File will be deleted before Windows boot ;)
-
I found this info on a google search for win32:ctx
http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=Win32%3ACTX (http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=Win32%3ACTX)
There is a lot of hits and it should turn up some useful info.
This one seems to provide more information and has an online scan tool.
http://www.ravantivirus.com/virus/showvirus.php?v=17 (http://www.ravantivirus.com/virus/showvirus.php?v=17)
-
C:\Windows\System\imscan.dll\[UPX]"file.
Boys boys.. ;D ;)
Read the FAQ's:
http://www.avast.com/eng/support/faq/avast_4_home_profe/virus_detection_and/index.html#idt_1554
;)
--> this is most likely a file of Panda (Online-) AV and thus a false positive
@Garythek:
if you don't need panda anymore, uninstall it completely..
If the file is still there after reboot, just delete it via windows-Startdisk & dos-commands
if you WANT to use Panda AND avast together, make sure that the On-Access-Scanner or other components of Panda is not running/loaded with WIN-startup
exclude the file from scanning in the options of avast's mainscanner & residentshield(s)
;)
of course you might want to scan it online before (just to be sure; see above) ;)