Timeline for Avast keeps showing this virus error
Current License: CC BY-SA 3.0
19 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 3, 2016 at 16:21 | comment | added | Vojtěch Dohnal | Let us continue this discussion in chat. | |
| Sep 3, 2016 at 11:37 | comment | added | Cristy | No, it's not inside the virus chest. And I can copy it to another location and the file has 49KB. | |
| Sep 3, 2016 at 11:04 | comment | added | Vojtěch Dohnal | Is it inside avast.com/faq.php?article=AVKB21 ? | |
| Sep 3, 2016 at 11:02 | comment | added | Vojtěch Dohnal | Also unable to copy the file to another destination on your disk with Avast disabled? That would be something very weird. More complex analysis of your system in terms of malware would be required. | |
| Sep 2, 2016 at 13:37 | comment | added | Cristy |
Warning! You submitted an empty file (0 bytes size), please make sure no software on your computer is preventing the upload (e.g. antivirus quarantine). Message still appears if I disable the anti-virus
|
|
| Sep 2, 2016 at 12:54 | comment | added | Vojtěch Dohnal | You can drag and drop the file there... | |
| Sep 2, 2016 at 12:10 | comment | added | Cristy |
I have the file, I can see it in File Explorer, but when I get the Upload file prompt and go to System32\wbem the scrcons.exe file does not appear in that menu. I have Windows 10 Pro. And from the guide on trendmicro I was not able to do anything as no Consumers appear in WMI.
|
|
| Sep 2, 2016 at 9:56 | comment | added | Vojtěch Dohnal |
can not select that .exe it is not in C:\Windows\System32\wbem\scrcons.exe or what? I do not have it on Windows 7 Enterprise x64 at all. What is your Windows version? You may try to uninstall KB2506143
|
|
| Sep 2, 2016 at 9:28 | comment | added | Cristy | I think this is related: la.trendmicro.com/media/misc/… but I didn't understand how to fix the issue. | |
| Sep 1, 2016 at 14:29 | comment | added | Cristy |
Oddly, I can not select that .exe file to be uploaded on VirusTotal
|
|
| Sep 1, 2016 at 14:03 | comment | added | Vojtěch Dohnal | You may try to post your C:\Windows\System32\wbem\scrcons.exe on VirusTotal.com. There is a huge number or VBS:Downloader variants on Avast from AAA to AHK. You can also eventually block the one website superuser.com/questions/270524/… | |
| Sep 1, 2016 at 13:41 | comment | added | Cristy | It did show and fix a few threats, but they seemed unrelated with this issue. | |
| Sep 1, 2016 at 12:48 | comment | added | Vojtěch Dohnal | So it is some executable that is hooked to WMI event, MBAM did not show anything? | |
| Sep 1, 2016 at 12:23 | comment | added | Cristy |
It's disabled, if I type cscript.exe I get this: CScript Error: Windows Script Host access is disabled on this machine. Contact your administrator for details.
|
|
| Aug 31, 2016 at 18:24 | comment | added | Vojtěch Dohnal | Perhaps disabling did not work, you can verify by running a vbs file, containing MsgBox "ok". Or the virus is only detected as vbscript but it is not a script at all. | |
| Aug 31, 2016 at 14:01 | comment | added | Cristy | I have ran MBAM and disabled WSH and today that warning popped up again... Not sure what else can I do. | |
| Aug 30, 2016 at 11:48 | comment | added | Vojtěch Dohnal | No older scripting llanguages ike VBScripts, JScript will work, BAT or PowerShell should be ok. It may be problem when you install something that uses VBScripts during install. | |
| Aug 30, 2016 at 11:41 | comment | added | Cristy | Thanks, I disabled WSH. Is there any drawback if I keep WSH disabled? | |
| Aug 30, 2016 at 11:19 | history | answered | Vojtěch Dohnal | CC BY-SA 3.0 |