WIN32/AMalum.ZZNXU

[KieranM]

Hey just thought of this - wouldn't the simplest solution to this problem be releasing the previous version of the definitions as a new update that overwrites the definitions that are destroying our computers?

Surely that wouldn't have taken all day to put together and release?

[melinda227]

So, am i suppose to basically just keep it in quarantine until CA comes up with something to clean it??? I am confused, some people say delete the things in quarantine, but i always said not a good idea, not sure what your deleting. In the meantime, just leave it there??? thanks, Melinda

[icflordlucan]

Originally Posted by melinda227

So, am i suppose to basically just keep it in quarantine until CA comes up with something to clean it??? I am confused, some people say delete the things in quarantine, but i always said not a good idea, not sure what your deleting. In the meantime, just leave it there??? thanks, Melinda

Yes, for the moment, leave everything in quarantine.

[OjaiMike]

I am getting the same thing, lots of Windows/System32 exe files being quarantined, and the Windows File Protection program is asking for the Win XP SP3 CD. I have it, and I've loaded it and run the fix twice this evening, but CA keeps quarantining the just-replaced files all over again. When I try "Restore", same thing, it gets re-quarantined.

My only big change recently is I'm doing the free trial of Carbonite online backup, and I've been leaving the PC running continuously the last 2 days, to give Carbonite some backup time space. Normally I never leave my PC on like that, and normally I never have problems. I have Time Warner cable Internet, and so far I'm very happy with it.

[disgusted-user]

Originally Posted by icflordlucan

Yes, for the moment, leave everything in quarantine.

and disable the real-time scanner before it puts more of xp in quarantine

[OjaiMike]

Good idea, thanks !

[stebie]

Originally Posted by OjaiMike

I am getting the same thing, lots of Windows/System32 exe files being quarantined, and the Windows File Protection program is asking for the Win XP SP3 CD. I have it, and I've loaded it and run the fix twice this evening, but CA keeps quarantining the just-replaced files all over again. When I try "Restore", same thing, it gets re-quarantined.

Suggestions:

Option 1
- disable realtime protection
- restore files from quarantine
- wait for signature update that resolves false positive issue
- re-enable realtime protection

Option 2
- disable cleaning for realtime scanner
- allow files to enter quarantine
- close off (or ignore) any Windows File Protection prompts
- wait for signature update that resolves false positive issue
- remove files from quarantine

You can also do other things, such as create exclusions for the main Windows folders, but even this is not ideal.

As others have done, I've enforced Option 1 (above) for affected PCs, hoping no viruses are acquired in the meantime.

[OjaiMike]

Now I see the same quarantines on our other home office PC, and it does not have Carbonite installed. Looks like the CA software, yes??

Originally Posted by OjaiMike

I am getting the same thing, lots of Windows/System32 exe files being quarantined, and the Windows File Protection program is asking for the Win XP SP3 CD. I have it, and I've loaded it and run the fix twice this evening, but CA keeps quarantining the just-replaced files all over again. When I try "Restore", same thing, it gets re-quarantined.

My only big change recently is I'm doing the free trial of Carbonite online backup, and I've been leaving the PC running continuously the last 2 days, to give Carbonite some backup time space. Normally I never leave my PC on like that, and normally I never have problems. I have Time Warner cable Internet, and so far I'm very happy with it.

[OjaiMike]

Great, thank you very much for the clear, concise info !

Originally Posted by stebie

Suggestions:

Option 1
- disable realtime protection
- restore files from quarantine
- wait for signature update that resolves false positive issue
- re-enable realtime protection

Option 2
- disable cleaning for realtime scanner
- allow files to enter quarantine
- close off (or ignore) any Windows File Protection prompts
- wait for signature update that resolves false positive issue
- remove files from quarantine

You can also do other things, such as create exclusions for the main Windows folders, but even this is not ideal.

As others have done, I've enforced Option 1 (above) for affected PCs, hoping no viruses are acquired in the meantime.

[icflordlucan]

Originally Posted by stebie

Suggestions:

Option 1
- disable realtime protection
- restore files from quarantine
- wait for signature update that resolves false positive issue
- re-enable realtime protection

Option 2
- disable cleaning for realtime scanner
- allow files to enter quarantine
- close off (or ignore) any Windows File Protection prompts
- wait for signature update that resolves false positive issue
- remove files from quarantine

You can also do other things, such as create exclusions for the main Windows folders, but even this is not ideal.

As others have done, I've enforced Option 1 (above) for affected PCs, hoping no viruses are acquired in the meantime.

Great information. Thank you for posting this and let's hope that all who are having this problem read it.