Author Topic: Cleaning a virus out of a file in virus chest  (Read 3644 times)

0 Members and 1 Guest are viewing this topic.

deb152

  • Guest
Cleaning a virus out of a file in virus chest
« on: September 21, 2009, 07:51:35 PM »
I am new to avast! and a trojan was detected on my computer during a scan.  The recommendation was to move the file to the virus chest.  So now what?  How do I remove the trojan from the file?  Can I, or do I just leave it all in the chest?  The virus is Win32:Zbot-AVH [Trj] and the file is ProgramData\Microsoft\Windows\WER\ReportArchive\Report07f884c0\Report.cab

There is information about removing the virus when first detected, but the recommendation of the program when detected was to move it to the chest.

Thanks
Debra

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89223
  • No support PMs thanks
Re: Cleaning a virus out of a file in virus chest
« Reply #1 on: September 21, 2009, 09:05:04 PM »
Moving it to the chest will remove it from the original location.

Deletion isn't really a good first option (you have none left), 'first do no harm' don't delete, send virus to the chest and investigate.

There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

However report.cab on its own I don't believe would be active unless unpacked and run, etc. so it might have some friends, possibly hidden or undetected.

If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).

Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

deb152

  • Guest
Re: Cleaning a virus out of a file in virus chest
« Reply #2 on: September 23, 2009, 12:59:38 AM »
Thank you David for the information.  One more question.  I have scanned the file in the chest and it definetly has the trojan. 

Will this other software you are suggesting remove the trojan?  Since this is a system file I do not wish to delete it but would like to get rid of the trojan.  Or do I have to do a system recovery to get rid of it?

PS I am not a tech person, so am not familiar with tech details.

Thanks
Debra

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Cleaning a virus out of a file in virus chest
« Reply #3 on: September 23, 2009, 01:06:23 AM »
If the file is into Chest, avast has already cleaned the computer and the trojan was removed.
The best things in life are free.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89223
  • No support PMs thanks
Re: Cleaning a virus out of a file in virus chest
« Reply #4 on: September 23, 2009, 02:25:08 AM »
avast removed the file it detected and in the chest it can do no harm.

The point of the other applications is to ensure it didn't bring any friends to the party. As I explained the file name and malware name combo seem strange as a .cab file in isolation to me doesn't seem right.

Quote from: DavidR
However report.cab on its own I don't believe would be active unless unpacked and run, etc. so it might have some friends, possibly hidden or undetected.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security