Trojan disposal

[9fingers]

I did a weekly scan with Avast and it came up with a number of instances of a trojan.
The recommendation was to quarantine it. Others were ignore and delete.

Given that it is a known trojan (backdoor.win32. xxxxx) surely the action should be to delete it?

So why might Avast recommend quarantining it??

TIA
Bob

 

[RogerS]

Can't help specifically on this but surely your normal AV should have picked it up at point of entry. But then you mention running Avast once a week....surely you're taking suitable prophylactics on a daily basis ?

 

[9fingers]

Can't help specifically on this but surely your normal AV should have picked it up at point of entry. But then you mention running Avast once a week....surely you're taking suitable prophylactics on a daily basis ?

Can't argue with that and yes there is AV running all the time which stopped it doing any harm.

In addition to the AV there is a weekly scan for malware as a long stop.

Bob

 

[Robert]

Some of these things are locked such that they cannot be deleted straight off. After a reboot it should be possible. Some also pretend to be system files so quarantine means it could be restored if it really was a system file.

 

[9fingers]

Some of these things are locked such that they cannot be deleted straight off. After a reboot it should be possible. Some also pretend to be system files so quarantine means it could be restored if it really was a system file.

Thanks Robert. Good points

Bob

 

[Tusses]

if I have a file that I don't know if it's needed, I make sure I know the path to the file, then rename it , usually just adding a number to the start of the name.
then see if everything still works.
If it won't boot , then you know it was needed ! lol
Thats why you need to know the path.