Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

General Security General Security
Search Search
Search for:
Tech Support Guy > > >

Solved: Avast scanning issue


(!)

DKTaber's Avatar
DKTaber   (Don) DKTaber is offline
Computer Specs
Member with 2,529 posts.
THREAD STARTER
 
Join Date: Oct 2001
Location: Wilmington, DE
Experience: Advanced
28-Nov-2011, 11:20 AM #1
Solved: Avast scanning issue
I've used Avast! for at least 2 years. Beginning 2 weeks ago, I started getting the message "Some files could not be scanned" at the end of a scan. Looking at the log revealed that all the unscanned files are in the system restore folder (C:\System VolumeInformation\_restore\. . .). The error message on each file is "Error: Archive is password protected (42056)". It repeats for EVERY file in the folder, including .png, .js and .gif files as well as the actual RP files.

I tried turning system restore off, which zaps all the restore points, rebooting, then creating a new, single restore point and running a Quick Scan. Did not solve the problem; every file in the folder is still "off limits" to Avast! EXCEPT when I do a boot-time scan (which runs before Windows loads).

Posted the problem on Avast's forum, but got no explanation. I realize it does not mean anything is infected, and it's not critical that Avast be able to scan the RPs, but the fact that it started doing this on 11/14 and now does it for every scan signals that something in the OS or in Avast has changed. Or might this have something to do with the fact that I have SpywareBlaster, a program that "immunizes" some registry items so spyware can't alter them (most HOST files)? Could the last update for that program have contained a change where it now immunizes the RPs?

Anybody have a clue as to what has happened here?
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 12:06 PM #2
I use SpywareBlaster as well with NOD32 and have never had this problem.

And, password protected???

I do see an occasional error with a System Volume Information file or two in NOD32's scan logs but it's never referring to passwords. Maybe it's simply Avast's way of describing this type of error?


Not sure why you would be getting that type of error.

I've seen this with ZIP Bombs (decompression bombs) but I doubt that could be your issue...

If you're concerned about those files, you can send them to:

Jotti's Malware Scan

VirusTotal

VirSCAN.org


Google does seem to return a few hits on this, all related to Avast. I've seen this before. Looks like an issue with Avast... But, no solutions.
__________________

• Please read instructions and questions carefully, and reply in a timely manner... Thank you.

• Why don't you just Google it?
• If your problem is solved, please click on the Mark Solved button.

Last edited by Phantom010; 28-Nov-2011 at 02:21 PM..
DKTaber's Avatar
DKTaber   (Don) DKTaber is offline
Computer Specs
Member with 2,529 posts.
THREAD STARTER
 
Join Date: Oct 2001
Location: Wilmington, DE
Experience: Advanced
28-Nov-2011, 04:06 PM #3
Quote:
Originally Posted by Phantom010 View Post
. . .If you're concerned about those files, you can send them to:

Jotti's Malware Scan

VirusTotal

VirSCAN.org

Google does seem to return a few hits on this, all related to Avast. I've seen this before. Looks like an issue with Avast... But, no solutions.
Can't send them for scanning by any of the virus sites. The files are all in the System Volume Information folder, and when I click it to view the files, access is denied. And before you suggest unchecking the Folder Options that hide system and protected files, I've already done that. So ALL files show in Explorer, but access to that folder is denied.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 04:24 PM #4
In XP Home, click Start > Run > type CMD

Click OK.

In the command prompt, type:

cacls "driveletter:\System Volume Information" /E /G username:F

Press Enter.

Or,

Restart your computer in Safe Mode.

Right-click the System Volume Information folder, and then click Properties.

Click the Security tab.

Click Add, and then type your user name.
Elvandil's Avatar
Computer Specs
Moderator with 51,993 posts.
 
Join Date: Aug 2003
Location: Vermont
Experience: "Been through the mill."
28-Nov-2011, 04:35 PM #5
You can get the security tab without Safe Mode. Merge the linked reg file. Use the "undo" file when done. There is also another method requiring changing a byte in a dll.

XP Security Tab Home Edition

I doubt you are going to want to upload those files. It would take you all day for one restore point.
__________________
Microsoft MVP
異驚の界世 Ąpןɹoʍ ǝɥʇ ɟo sɹǝpuoʍ ǝɥʇ ɟo ǝuo sı ǝpoɔıun ʞuıɥʇ ı
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 04:40 PM #6
Quote:
Originally Posted by Elvandil View Post
I doubt you are going to want to upload those files. It would take you all day for one restore point.
They are indeed quite big!

At least, it'll keep DKTaber busy! Well, at least the computer...
DKTaber's Avatar
DKTaber   (Don) DKTaber is offline
Computer Specs
Member with 2,529 posts.
THREAD STARTER
 
Join Date: Oct 2001
Location: Wilmington, DE
Experience: Advanced
28-Nov-2011, 04:51 PM #7
Quote:
Originally Posted by Phantom010 View Post
In XP Home, click Start > Run > type CMD

Click OK.

In the command prompt, type:

cacls "driveletter:\System Volume Information" /E /G username:F

Press Enter.

Or,

Restart your computer in Safe Mode.

Right-click the System Volume Information folder, and then click Properties.

Click the Security tab.

Click Add, and then type your user name.
Had to use Safe Mode to access the Security tab. Checked "Full" for access by "Everyone". Rebooted. Then ran an Avast! scan of just that folder, and it scanned it, no problem. So it appears the problem is solved. The only remaining question is what the he** changed the permissions on 11/14?

What would TSG do with you, Phantom!?
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 04:53 PM #8
Instead of sending the folders, I was going to suggest an online scanner like the free ESET Online Scanner.

Anyhow, seems it wasn't necessary after all.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 05:00 PM #9
Quote:
Originally Posted by DKTaber View Post
What would TSG do with you, Phantom!?
I don't know!
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 97,690 posts.
 
Join Date: Aug 2003
28-Nov-2011, 07:17 PM #10
We've been trying to figure out what to do with him for a long time now. You'll be the first to know.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 07:23 PM #11
Quote:
Originally Posted by Cookiegal View Post
We've been trying to figure out what to do with him for a long time now. You'll be the first to know.
That's reassuring...
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 97,690 posts.
 
Join Date: Aug 2003
28-Nov-2011, 07:24 PM #12
Quote:
Originally Posted by Phantom010 View Post
That's reassuring...
Don't worry, you're a keeper.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 07:25 PM #13
Quote:
Originally Posted by Cookiegal View Post
Don't worry, you're a keeper.
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 97,690 posts.
 
Join Date: Aug 2003
28-Nov-2011, 07:35 PM #14
Quote:
Originally Posted by Phantom010 View Post
I'll make sure there's a little something extra in your envelope at Christmas.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 32,317 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
28-Nov-2011, 08:30 PM #15
Quote:
Originally Posted by Cookiegal View Post
I'll make sure there's a little something extra in your envelope at Christmas.
Thanks. It'll stay between you and me...
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑