Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: RV01 on March 20, 2005, 09:22:44 PM

Title: query about the results of a scan
Post by: RV01 on March 20, 2005, 09:22:44 PM
I have a query about the results of a scan. The following files where unable to be scanned and I don’t know what to do. Should I  worry or not?

C:\_RESTORE\ARCHIVE\FS467.CAB\A0042860.CPY\91070.bk  Unable to scan Cab file is corrupted

C:\_RESTORE\ARCHIVE\FS473.CAB\A0043049.CPY\98017.bk  Unable to scan Cab file is corrupted

C:\_RESTORE\ARCHIVE\FS476.CAB\A0044122.CPY\25594.bk  Unable to scan Cab file is corrupted

C:\_RESTORE\ARCHIVE\FS527.CAB\A0051399.CPY\67261.b  Unable to scan Cab file is corrupted

C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1.].cab\IECult.dll   Unable to scan Cab file is corrupted

C:\FILE000D.CHK\FILE000D  Unable to scan GZIP archive is corrupted

I would  be grateful if you would help me with the above problem. I would like to thank you in advance :)

Title: Re: query about the results of a scan
Post by: techie101 on March 20, 2005, 09:43:01 PM
CAB files are often used to distribute applications. During installation, the Setup program extracts files from the CAB file and copies them to the appropriate location on the hard disk.

The files that scanned corrupted are those backups in the Restore Utility.  Unfortuantely, they cannot be saved so delete them and you should be fine.
Title: Re: query about the results of a scan
Post by: Lisandro on March 20, 2005, 11:15:18 PM
C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1.].cab\IECult.dll   Unable to scan Cab file is corrupted
C:\FILE000D.CHK\FILE000D  Unable to scan GZIP archive is corrupted

Safe and recommended to be deleted  :)
Title: Re: query about the results of a scan
Post by: RV01 on March 21, 2005, 12:13:02 PM
Thanks a lot Iwill do so. :)
Title: Re: query about the results of a scan
Post by: RV01 on March 21, 2005, 09:04:37 PM
Unfortunately I continue to have a problem. I can’t delete manually the above files since I can’t find them in my computer although I used the search tool. Is there any way I could solve my problem or not? My OS is Millennium. Thanks for the help.
Title: Re: query about the results of a scan
Post by: Lisandro on March 21, 2005, 09:25:36 PM
Unfortunately I continue to have a problem. I can’t delete manually the above files since I can’t find them in my computer although I used the search tool. Is there any way I could solve my problem or not? My OS is Millennium. Thanks for the help.

Are the files hidden? If you go to Windows Explorer > Tools > Folder options > check to see system folders, hidden files, etc.
Can you boot into safe mode (press F8 while booting) and trying to delete the files in this way?
Title: Re: query about the results of a scan
Post by: Michal Zrůbecký on March 21, 2005, 09:26:12 PM
Unfortunately I continue to have a problem. I can’t delete manually the above files since I can’t find them in my computer although I used the search tool. Is there any way I could solve my problem or not? My OS is Millennium. Thanks for the help.

Disable the disputable feature of Windows ME or XP called SYSTEM RESTORE (to know how to do that refer to Windows help) and restart your computer. All files in folder C:\_RESTORE will be deleted. Then you can turn that feature on again, if you wish.
Title: Re: query about the results of a scan
Post by: RV01 on March 21, 2005, 09:37:18 PM
I will try to do so  :)
Title: Re: query about the results of a scan
Post by: RV01 on March 22, 2005, 03:09:37 PM
Ok I managed to delete the first four successfully. However I continue to have the following two:

1) C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll

I have  found this file from the path but IECult.dll can't be deleted there no such option. Is it because  I have evaluation version of winzip?

2) C:\FILE000D.CHK\FILE000D 

With this file I don't know with which program to open FILE000D.CHK so that I can delete FILE000D 

Thanks for your help :D
Title: Re: query about the results of a scan
Post by: Lisandro on March 22, 2005, 07:51:48 PM
1) C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll
I have  found this file from the path but IECult.dll can't be deleted there no such option. Is it because  I have evaluation version of winzip?

Why? Is it inside of a zip file?
I think this webpage could guide you on 'deep' deleting of files: http://support.microsoft.com/default.aspx?scid=kb;en-us;315226
Maybe you must run:
DEL \\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll
 
2) C:\FILE000D.CHK\FILE000D 
With this file I don't know with which program to open FILE000D.CHK so that I can delete FILE000D

It should be an scandisk file. But you can't open as it is just recovered fragments of files generated by scandisk.
Most probably, in your case, just a virus (infected file).
Can you try to delete as above?
Title: Re: query about the results of a scan
Post by: RV01 on March 22, 2005, 09:22:22 PM
When you say run
DEL \\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll

you mean todo the following
Start - Run and then write the above path in the space provided or something else?
Because I did and after that an error window appeared Have done something wrong?
Thanks for your invaluable help :D
 
Title: Re: query about the results of a scan
Post by: DavidR on March 23, 2005, 12:57:20 AM
When you say run
DEL \\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll

you mean todo the following
Start - Run and then write the above path in the space provided or something else?
Because I did and after that an error window appeared Have done something wrong?
Thanks for your invaluable help :D
I think you will never find IECult.dll because it is inside the .cab file 'C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1.].cab'

However, you shouldn't need to delete the IECult.dll, just empty your IE temporary Internet Files (browser cache), that should get rid of the .cab file that contains the iecult.dll file.
Title: Re: query about the results of a scan
Post by: Lisandro on March 23, 2005, 02:47:29 AM
When you say run
DEL \\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab\IECult.dll

you mean todo the following
Start - Run and then write the above path in the space provided or something else?

Yes, you're right. But first, follow what David said. It'll be better.
If you can't delete the cab file, then open a cmd (DOS) window and write:
DEL \\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab
or
DEL "\\.\C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1].cab"

Because I did and after that an error window appeared Have done something wrong?

No, probably you (and I  :-[) forgot the quotes ""  :'(
Title: Re: query about the results of a scan
Post by: RV01 on March 23, 2005, 11:33:35 AM
Thank you so much Technical and DavidR. I have eventually deleted
C:\WINDOWS\Temporary Internet Files\Content.IE5\G1H3G53J\Cult3D_IE_5.3.0.228[1.].cab
Now I have only C:\FILE000D.CHK\FILE000D  to delete
I have opened a DOS window and written

DEL "\\.\C:\FILE000D.CHK\FILE000D"  but I get an answer that it wasn't deleted
What should I do now?
Thanks for your help :)
Title: Re: query about the results of a scan
Post by: Lisandro on March 23, 2005, 12:56:17 PM
What about removing the quotes?
DEL \\.\C:\FILE000D.CHK\FILE000D
or
DEL \\.\C:\FILE000D.CHK\FILE000D*

Can you get the short name (like DOS 8+3 characters) of the path?
I mean, something like:

DEL \\.\C:\FILE00~1\FILE000D
Title: Re: query about the results of a scan
Post by: DavidR on March 23, 2005, 01:09:36 PM
Quote
DEL "\\.\C:\FILE000D.CHK\FILE000D"  but I get an answer that it wasn't deleted
What should I do now?

The C:\FILE000D.CHK\FILE000D is created when you run check disk (I believe) with a fix option and is a Recovered File Fragments, so it may be viewable with a text editor, but I can't see why it can't be deleted. However, I don't believe it is harmful, just strange.

If you can see the file in the windows explorer, right click on it and select properties, it may show it as read only hidden and archive. If you can reset the attributes to just archive, you may be able to delete it.
Title: Re: query about the results of a scan
Post by: DavidR on March 23, 2005, 01:17:18 PM
What about removing the quotes?
DEL \\.\C:\FILE000D.CHK\FILE000D
or
DEL \\.\C:\FILE000D.CHK\FILE000D*

Can you get the short name (like DOS 8+3 characters) of the path?
I mean, something like:

DEL \\.\C:\FILE00~1\FILE000D
I don't think that using the shortened file00~1 would work without the file extension otherwise I believe it would be looking for a folder.

That also made me think (I know, a bad habit) of my suggestion about the .cab\IECult.dll thing, perhaps this is the same the last part doesn't exist as it is after a file name and not after a folder name.

So try DEL \\.\C:\FILE000D.CHK or DEL "\\.\C:\FILE000D.CHK" and see what you get.
Title: Re: query about the results of a scan
Post by: Lisandro on March 23, 2005, 01:23:52 PM
However, I don't believe it is harmful, just strange.

Well, I believe because it can't be deleted...
There is virus (worm) that infects this way, through FILE000D.CHK, if I'm not wrong...
Title: Re: query about the results of a scan
Post by: RV01 on March 23, 2005, 10:18:12 PM
I deleted C:\FILE000D.CHK very easily. Now I think I have solved all of my problems.Thanks for your help Technical and DavidR. I have learned so much from this forum :)
Title: Re: query about the results of a scan
Post by: DavidR on March 23, 2005, 10:30:33 PM
Happy to help, believe it or not I too learned something. Don't take a path like this literally when it is displays something else after the filename extension, that part is likely to be contained inside the last named file and that should be your target for deletion.
Title: Re: query about the results of a scan
Post by: Lisandro on March 23, 2005, 10:42:39 PM
I deleted C:\FILE000D.CHK very easily. Now I think I have solved all of my problems.Thanks for your help Technical and DavidR. I have learned so much from this forum :)

Happy with you... If you can, come back and try to help the others  8)