I could not find the answer to this question in my search of the forums:
I got a virus detected warning for EndProcess.exe when I ran a scan. However, I cannot remove to chest or repair. Is this because the file is actually not a virus, or is it a particularly difficult problem to fix.
Thanks.
I ran a boot-time scan (selecting the option to "Move all to chest"), immediately after updating Avast and the virus definition file. Upon booting up, I had a message in the lower right-hand corner of my screen. It read as follows:
Windows Vista (TM)
Build 6002
This copy of Windows is not genuine
However, my copy of Windows is surely genuine, purchased new from Best Buy. I checked the Avast Virus Chest to see what files were moved. On this boot-time scan, the only file moved to the chest was C:\HP\BIN\EndProcess.exe (last changed 9/16/1999). It was categorized by Avast as Win32:KillApp-W [PUP]. This file appears legit...why would Avast categorize it as a Potentially Unwanted Program?
With little working knowledge regarding viruses and anti-virus software, I am going to restore this file and reboot my computer per the following thread to see if the problem is remediated: http://forum.avast.com/index.php?topic=51790.msg521118#msg521118
Any additional information or an official statement from Avast regarding this issue?
Edit: Also of note...I have run the boot-time scan before without Avast moving EndProcess.exe to the Virus Chest. Could this imply that the file has been modified despite indicating that it was last changed on 9/16/1999? And yes, my Windows time and calendar are current.
Edit 2: Just decided to shutdown and boot up normally rather than restore EndProcess.exe. Sure enough, the "not genuine" message was no longer in the bottom right-hand corner of my screen. I am not going to restore the file unless I hear otherwise, but I would still like some information regarding the file. Thanks!