Help! Avira/Malware question

papoosue

I have Avira installed and it flagged up a possible malaware threat and gave me three options to choose from - one was 'deny access' and one was 'quarantine' (can't remember the other but wasn't an option anyway). It said something about sending the thing to them in quarantine but I'm not sure what they meant exactly. Anyway, I checked the 'quarantine' option - did I do the right thing? What does the 'deny access' option mean?

i8change

Not sure if this helps:-

Move to quarantine
If this option is enabled, the Guard moves the file to quarantine. The file can be restored from the Quarantine Manager if it is of informative value or - if necessary - sent to the Avira Malware Research Center. Depending on the file, further selection options are available in the Quarantine Manager.


Delete
If this option is enabled, the file is deleted but can be restored if necessary with appropriate tools (e.g. Avira UnErase). The virus pattern can still be detected again.


Rename
If this option is enabled, the Guard renames the file. Direct access to these files (e.g. with double-click) is therefore no longer possible. Files can later be repaired and given their original names again.


Deny access
If this option is enabled, the Guard only enters the detection in the Report file if the Report function is enabled. In addition, the Guard writes an entry in the Event log, if this option is enabled.


Ignore
If this option is enabled, access to the file is allowed and the file is left as it is.


Warning
The affected file remains active on your workstation! It may cause serious damage on your workstation!

Looks like you made a good choice to me but perhaps someone with experience will be along to explain the choices. I don't feel sure whats meant by some.

papoosue

Thanks for that :-) I'm not sure I understand it all, but I think I probably haven't done the wrong thing at least (not sure though!). I don't know why they can't give the options in plain English for people like me who don't understand ;-)

S

i8change wrote: »

Not sure if this helps:-


Deny Access

Action option for detection by Guard: Access to the infected file is blocked. The detection is only entered in the report file if the report function is enabled).

• Copy to Quarantine

Action option for a rootkit detection: The detection is copied in Quarantine.

• Terminate program

Action option for detection of a suspicious process: The process is terminated. A dialog box opens in which you can choose what to do with the executable file.

Note
We recommend that you move any suspicious file that cannot be repaired to Quarantine

i8change

Perhaps you only get support with the paid for option and they want you to be unsure so you go down that route?
I found better info and edited the post, but it's still vague to me.

aliEnRIK

You did the right thing

But id suggest a seperate scan to see if your computers clean ~

Download MALWAREBYTES (Click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-18510_4-10804572.html?cdlPid=10997763
UPDATE and FULL scan
Post the log here after its deleted everything

Download HIJACK THIS (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
reboot
SCAN and post the log so we can see whats running