[barbarann]

Hi,

I took your advice and downloaded the Avast 4.8 home edition for the antivirus protection. I have never used it before and I am having a hard time understanding it.
I have the icon on the toolbar that shows on access scanner and then another icon that shows virus recovery database.
I ran a scan and in the middle of it a page came up showing I had malware and said to put it in the chest, so I did.
This is what it shows now in the log viewer under warning---Sing of "WMA:wimad[dpr] has been found in "C:\recy.
When I go to the virus chest , in infected files it shows---the game ft.Sean King C:\Recycler\s-1-5-21-746137067-764. Wehn I click on files it shows Kernel32.dll,winsock.dll and wsock32.dll.
Do I just leave these there or delete them. I am not sure if they are important or not.

[hewee]

I am some what new to avast home edition but read the help files.
I was looking around checking things out and had seen the Kernel32.dll,winsock.dll and wsock32.dll in the chest.
They are good system files that were backed up just in case you get something that changes those files so your want to keep them.

Using the Chest

The Chest is - thanks to its properties - suitable for the following purposes:

Storing the viruses. If avast! finds a virus and you decide not to delete it for some reason, you will be offered the option of moving it to the Chest. With the virus in the Chest, you can be sure that it will not be run by accident.
Storing the suspicious files. The Chest is useful to store for later analysis any suspicious file (such as a file having two extensions).
Backup of the system files. During the installation, avast! copies some critical system files into the Chest, under the "System files" category. Those files might cause the operating system to crash if they get infected by a virus. If needed, those files can be restored from the Chest to their original location. Should an unknown virus infect the computer despite the extensive protection from the avast! antivirus package and alter an important system file, it can then be easily restored to its original state.

So when you got the chest open your see on the left side

File categories in the Chest

Files in the Chest are divided into three categories:

Infected file. avast! puts infected files into this category, if it is not told to delete the files directly.
User files. This is the only category the user can put files in.
System files. avast! copies important system files during the installation into this category.
All chest files

You only want to delete from the Infected file and only then when you know it is not a false positive and you did not delete something needed. I alway post if I get something and check it out to see if it is a false positive and for me that is what I get the most of because I keep the PC clean.
So it does not hurt to keep them around to restore if you think you really don't have anything because it may be a false positive still that you can not find out anything on yet but gets fixed in newer updates.

I seem to have gotten on and off scan of the system restore folders and if I look it is a older folder so why is it taking two months to say I have something. Well because it is a false positive and later a newer scan will show you don't have anything.

So keep them around 30 or 60 days.

[Byteman]

The best advice we could give is for you to always leave the infected items in the Vault or Quarantine and try to research the matter....

All the antivirus companies have accessible forums where you can ask their experts and gurus questions....

These files....Kernel32.dll,winsock.dll and wsock32.dll. , in their normal versions are important Windows files....leave them absolutely in the Chest for now until someone can help further.

I think you may be looking in the "All Files" category and seeing the system files that Avast has backed up...

Are you sure the 3 files you see are in the Infected category?

I use Avast like hewee does...and those same files are in my Avast chest, in System files.....

[barbarann]

Your right.
In the virus vault when I open it, it shows in the infected files the WMA thing and everything is in the all chest files. The important ones are in the system files. What do I do?

[Byteman]

Hi,

Let me be sure we have it right- your writing is not very clear on just what is in the Infected list....we are not concerned with what is in System or any other category, only the Infected section..........

****We do NOT want to delete anything from System or All category, just the Infected one> doing that will remove it from All files....
These are just copied by the Avast program as backups and are constantly being watched, they are Windows files and OK.

Infected files= just the game ft.Sean King file , at least that is all that you posted was....<< that is the one file to Delete from Chest

All files=Kernel32.dll,winsock.dll and wsock32.dll. and the infected file

System files= Kernel32.dll,winsock.dll and wsock32.dll (not any from Infected list)

So, that [b]one infected file can be deleted- actually it is safe to leave it where it is, only you or someone else could let it out of the Chest....but, if you think you wish to delete it, keep going....

So,. right click the "A" icon in lower right system tray, and select from the menu

"Start Avast Antivirus" In a few seconds, you will see a small window where it tests files running in memory etc then, the blue small window for the program comes up.

You may also see a help window with various information...close that so all you have is the smaller blue Avast window with the Chest at the top left...click on the Chest to open it.

On the left you see Infected Files, click that so the files in there show.

As long as the important system files wsock32.dll etc are not there and ONLY the infected game or whatever it was is you are set to delete the infected file.

At the top left the 3rd icon in the menu bar is "Delete Files" click that...you may have to left click once on the filename before the Delete button will be active.... that's all there is to it!

Important- the files that are in the Infected section can be released back into the computer if you mess up and click the wrong button at the top so make sure you are clicking "Delete" please.

[barbarann]

Yes just the game thing is in the infected spot and nothing else. I understand now what you mean. I just thought that that meant the others were infected also.
Thanks again

[Byteman]

Hi, You are welcome, and stop by anytime.

Quite often, antivirus programs will produce a false postive for some file....you would do best just keeping any files it finds as Infected in the Virus Chest for a few weeks if you feel they will not be accidentally released by another user of the computer.

I'm not saying the game file in your case, is a false positive....

More than likely it is not.

You can keep it locked in the Chest or Delete.