How do AntiVirus programs actually work??? (eg. AVG)?

Question

This is related to an earlier question. After receiving `Threat alerts' from AVG, it gives the option of moving them to the AVG Virus Vault, but prompts me to confirm, as moving system32 files may make my OS unstable. These infected files are located in both my C and D (partition) drives of my Windows XP. Is it safe to delete them once they have been moved to the Virus Vault??? (NB. AVG Virus Vault is the quarantine area)

Also, can I fix the Windows system files if they have been damaged??

Answer 1

If the files cannot be disinfected, moving them into quarantine is really the only method to disinfect. Most likely this will not cause too much issue - but, if it does, it is possible to restore necessary system files using the Windows setup disk.

Answer 2

Hello,

(ANS) Most anti virus programs use a system of signatures inorder to detect viruses old or new, however the signatures must be kept upto date for the program to be very effective.

Each virus has a pattern of bits & bytes which you can typically think of as being like a finger print. The anti virus makers are always trying to play catch up though, they have to get hold of a copy of the virus before they can work out what the finger print is & what the virus does. i.e. how it behaves.

Only then can the anti virus makers create a finger print matching signature, so when you run a scan using the anti virus program it looks for the viruses finger print, if it finds the finger print then you have a virus.

**YES! let AVG Free quarentine any infected files even if they appear to be windows system files too.

NOTE: Windows XP is actually self healing, it has protected system files & so if the worst was to happen and a system file/s were deleted it could heal them by itself.

**Some virus writers have been especially nasty why? because the virus that has infected your computer may well create its own files and place them inside the windows system folders & give them names that make the infected files appear to be windows required files when they are not, this is done deliberately to confuse users both novice & veteran alike, its designed to confuse and make removal harder.

**The virus files then may look like system files BUT its quite likely they are NOT real system files.

**Windows can be repaired directly from the OEM CD\DVD disk that came with your computer, it involves running the windows setup program once again & you will be asked if you want to run a repair from the menu that appears.

Hope this helps?

Best Regards (from an old veteran windows user)
IR

Answer 3

2

Answer 4

it depends on if they really are microsoft system files or not
alot of viruses put themselves in the system 32 directory so windows thinks you shouldnt move them
usually windows xp will stop you from doing anything that can cause the sytem to be come unstable.
avg anti virus is pretty good so leave them in the virus vault for a few days and if you dont have any problems with your pc due to them being removed then yes delete them.

it is possible to repair windows system files there are a few ways to do it i think, one way is to put in your xp cd and in the menus it has an option to repair windows it checks all the sytem files and fixes any damaged or missing ones as far as i can remember
if you dont have an xp cd then it will be on your D partition
usually if you keep pressing F8 while you start up your pc it will come up with some recovery options.

also the best thing to do when scanning for viruses etc is to start windows in safe mode,

if you use system restore be careful as sometimes it can restore viruses etc that you have removed before.


hope this helps

Answer 5

Have you tried running your AV in safe mode? It may have better luck at removing it.
You may need to switch off System Restore as back up files may be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.
Run your anti virus and anti spyware in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.

Answer 6

yeap if ur files moved to the Vrius vault then u should delete cus ur Antivirus detact that those files have a virus...or something so those files can damage ur computer........

Answer 7

I suggest you visit this web site and have a good read as it covers everything you need to know: http://www.pcworld.idg.com.au/index.php/id;316975074