Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: gtaillandier on November 27, 2003, 09:08:44 PM

Title: error in scan
Post by: gtaillandier on November 27, 2003, 09:08:44 PM
I have avast! 4.1 home edition ( build 4.1.304 ) and I have a little question.
I scan a Zip cartridge, and when the result is in XML format, it tells me that files are not scanned due to error.
I've changed the format of result ( to txt format ), but there's no error ( in settings / report files all boxed are checked ).
Can someone tell me where the problem comes from ?

Thank you very much.
Title: Re:error in scan
Post by: Lisandro on November 28, 2003, 01:29:34 AM
I have avast! 4.1 home edition ( build 4.1.304 ) and I have a little question.
I scan a Zip cartridge, and when the result is in XML format, it tells me that files are not scanned due to error.
I've changed the format of result ( to txt format ), but there's no error ( in settings / report files all boxed are checked ).
Can someone tell me where the problem comes from ?

Thank you very much.

Could you tell us what files return this behavior?
The format of the report, as you can imagine, could not affect the results...
Are you sure you did not change any other setting (like 'Sensitivity' or level of scanning)?  ;)
Title: Re:error in scan
Post by: gtaillandier on November 28, 2003, 09:09:10 PM
I've tried to scan a Zip cartridge ( 171 files scanned ; 97 errors ) and c:\windows ( more than 5 000 errors ).
After I've chosen the folder to scan, the sensibility isn't changed : standard scan.

How can I view which files are in error ?

Thank you for your help.

Sincerely.
Title: Re:error in scan
Post by: Lisandro on November 29, 2003, 01:50:04 AM
I've tried to scan a Zip cartridge ( 171 files scanned ; 97 errors ) and c:\windows ( more than 5 000 errors ).
After I've chosen the folder to scan, the sensibility isn't changed : standard scan.

How can I view which files are in error ?

Thank you for your help.

Sincerely.

You can configure your report settings at "Report" Page:
avast! can create and save a report file containing information about a past session. Basically, it contains the same information as in session results.

Create report file. Checking this option turns on the report file creation.
Report File Folder. Enter the path and name of the report file, e.g. C:\Reports\task_name.rpt. The folder selection can be carried out by pressing the Browse button. The default report file name is the name of the corresponding task. The default folder for it is <avast directory>\DATA\Report. The default report file name is task_name.rpt. The *.rpt file is actually a simple text file, so it is possible to view and modify e.g. in Notepad.

Log Record For. Check the items that should be written to the report. Task start writes date and time of the task start to the report; similarly, task stop writes date and time of task stop. The description of the remaining items hard errors, soft errors, skipped files, infected files, and OK files is on the results page.

Type of file. Select the format of the report file. You can choose either a simple text file, or the newer XML format.
Title: Re:error in scan
Post by: gtaillandier on November 29, 2003, 02:15:43 PM
"Create report file" is checked
"Standard program folder" is checked
In "Log record for", all is checked.

scan for c:\windows

With "Type of file" set to .txt,  I have one file named Simple user interface.txt, which contains :

- infected files 0
- total files 19786
- total folders 436
- total size 1.6 G

only 12 files with error (32) ; message in French

With "Type of file" set to .xml, I have several files, one is
Simple user interface_20031129_1140_stat.xml wich contains :

- number of opened files 19786
- number of tested files 19749
- number of tested folders 436
- number of infected files 0
- number of files not tested due to an error 7528

In Simple user interface_20031129_1140_main.xml I only have 12 errors (32).

Can you explain me why I don't have any information on files not tested ( are they corrupted, do  they have any virus, or .... )

Thank you for your answer.

Sincerely.
Title: Re:error in scan
Post by: Vlk on November 29, 2003, 02:53:14 PM
You probably have not checked reporting of all files (hard errors, soft errors etc...) Go to the page with Report settings, and check all the boxes in the Log Report For section...
Title: Re:error in scan
Post by: gtaillandier on November 29, 2003, 06:04:35 PM
In my previous message I wrote that all is checked in report all files : Hard, soft, skipped, infested, task start, task stop, OK files
Title: Re:error in scan
Post by: Lisandro on November 29, 2003, 08:36:52 PM
Let me guess, could you choose 'replace' the last report file and rescan your system (let all the others options on). You will 'update' both the txt and xml file...

Will they be different then?  ;)
Title: Re:error in scan
Post by: gtaillandier on November 29, 2003, 09:18:31 PM
I've tried to "replace" xml files and erscan c:\windows.
Result : 7530 files  not tested.

Another problem : when I've started Avast! Antivirus to scan the folder,  I've got a message telling me there's a virus in memory. It asked me some questions and restarted my computer. No problem : all files are safe
( I suppose )   .

But I haven't found any information in log about this alert.
Title: Re:error in scan
Post by: Vlk on December 03, 2003, 06:25:01 PM
I don't seem able to simulate your XML report-related troubles. Could you please point me more specifically how to reproduce this thing so that we can simulate it in our labs...?

Thanks
Vlk
Title: Re:error in scan
Post by: gtaillandier on December 03, 2003, 06:39:47 PM
I've right click on the icon in the systray and chosen "start avas! antivirus"
Then "folder selection" ; when the explorer window is opened, I've selected windows ( by checking the box ).

Type of scan : standard ; and scan archives file checked.

At the end of the scan, the result is a great number of files not scanned due  to error ( but what kind of error, I don't know ).

I use Windows XP Home Edition SP1 ( french version ) with NTFS disk.

I hope it can helps.

Sincerely.
Title: Re:error in scan
Post by: gtaillandier on December 17, 2003, 06:45:34 PM
I just want to know if I'm the onle person who has problem when scanning a hard drive ; I have a lot of files not scanned due to errors.

But no informations on these errors. Viruses or problem in avast! I don't know.

Can someone of avast! technical help me ?

Sincerely.
Title: Re:error in scan
Post by: Vlk on December 17, 2003, 06:52:42 PM
I personally think it's some weird problem with the XML report. As you said, no problems are reported in text reports, and also in the panel when the scan completes...
Title: Re:error in scan
Post by: gtaillandier on December 17, 2003, 09:26:21 PM
I've scanned c:\windows today, here are the results :

- txt format

Infected files: 0
Total files: 19876
Total folders: 438
Total size: 1.7 G

- xml format

Number of opened files : 19876
Number of tested files : 19839
Number of tested folders : 438
Number of infected files : 0
Number of files not tested due to an error : 7577.


You're right when you think it's probably a problem in the XML report.

Can you look at the problem : if XML result is wrong, I won't use it anymore, even if it's more readable than TXT result.
Title: Re:error in scan
Post by: Vlk on December 18, 2003, 11:00:39 AM
OK gtaillandier could you try something for me?

1. Start the Task manager, and end the following processes: ashServ.exe, ashDisp.exe, ashMaiSv.exe, aswUpdSv.exe . Also, please quit all interactive applications (such as Internet Explorer)

2. Start your browser, download http://www2.asw.cz/~vlk/aswEngin.dll and put it to your avast folder (it should now be possible because you killed all avast processes in step 1)

3. Start avast, and redo the scan (with XML report enabled, and reporting of all problematic files set).

I'm curious what it shows now...

Thanks
Vlk
Title: Re:error in scan
Post by: Lisandro on December 18, 2003, 12:00:11 PM
Download http://www2.asw.cz/~vlk/aswEngin.dll and put it to your avast folder. Start avast, and redo the scan (with XML report enabled, and reporting of all problematic files set). I'm curious what it shows now...

Vlk, do you need anyone else do the same test? Will it be worthfull?
Title: Re:error in scan
Post by: Vlk on December 18, 2003, 06:05:05 PM
Quote
Vlk, do you need anyone else do the same test? Will it be worthfull?


Not really. It's probably pointless if you're not getting the strange numbers in the Not-Tested-File field...
Title: Re:error in scan
Post by: Lisandro on December 18, 2003, 07:46:10 PM
Quote
Vlk, do you need anyone else do the same test? Will it be worthfull?


Not really. It's probably pointless if you're not getting the strange numbers in the Not-Tested-File field...

Ok, for me neither infected files nor 'skipped' files... Both report formats (txt and xml) are the same  ;D
Title: Re:error in scan
Post by: gtaillandier on December 18, 2003, 08:29:48 PM
I've done what you've written without any problem.
In C:\Program Files\Alwil Software\Avast4\DATA\report\Simple user interface_20031218_2012_main.xml I have a lot of

[E] File was skipped because of scanner settings (42016).

Here's what I've chosen for scan options :

- Select scan area : Folders
- Select scan level : Standard
- Select scan archive is checked.

I hope it can help.

If necessary, I can do other tests.

Sincerely.

Title: Re:error in scan
Post by: Vlk on December 18, 2003, 11:14:12 PM
OK great, thanks for the info. That's what I wanted to hear...
Title: Re:error in scan
Post by: gtaillandier on December 19, 2003, 08:24:02 PM
I'm happy it can help you.

If necessary, I can do other tests.

Don't hesitate.

Sincerely.
Title: Re:error in scan
Post by: Vlk on December 20, 2003, 01:17:47 AM
Just try it with the latest version, 4.1.319. The untestable file count in XML report should drop to zero.

Thanks
Vlk
Title: Re:error in scan
Post by: gtaillandier on December 20, 2003, 02:00:16 PM
Hello,

Just tested c:\windows with the latest version.

Result : no more "files not tested due to an error".

I've scanned with "standard scan" :
- number of opened files : 19943
- number of tested files : 19906
- number of tested folders : 440
- number of infected files : 0

In report, a lot of [E] File was skipped because of scanner settings (42016)
I can't tell exactly the number, but hundreds.

With "thorough" scan :
- same results, except infected files : 3

In report, no more errors, but 12 messages telling me that the file is in use, avast couldn't scan  it.

I don't understand the result for "standard" scan :
it's the same than "thorough" scan ( excepted infected files ) and there's a lot of skipped files  : error 42016.

Can you give me explain me why ?

Sincerely.
Title: Re:error in scan
Post by: gtaillandier on December 20, 2003, 02:29:21 PM
About infected files :

C:\WINDOWS\System32\ActiveScan\imscan.dll
             [L]Win32:Kuang2 (0)

C:\WINDOWS\System32\ActiveScan\pav.sig
             [L]Win95:Matyas (0)

C:\WINDOWS\System32\pav.sig
             [L]Win95:Matyas (0)

When trying to repair the files :

- no messages for imscan.dll but when trying to scan only this  file, it's always infected.

- for the 2 .sig files : a message tells me that the file is not repaired. Cannot process file.

I don't understand :

- why the .dll still remains infected because there's no message when I tried to repair it

- why it's not possible to repair .sig files : no information.

Can you help me ?
Title: Re:error in scan
Post by: igor on December 22, 2003, 05:06:46 PM
They cannot be repaired, because no record for an "uninfected" version is present in VRBD database.
Anyway, these files are from some Panda antivirus/tool and they are known false alarms caused by Panda not encrypting their virus signatures.
Title: Re:error in scan
Post by: Lisandro on December 23, 2003, 02:08:01 AM
They cannot be repaired, because no record for an "uninfected" version is present in VRBD database.
Anyway, these files are from some Panda antivirus/tool and they are known false alarms caused by Panda not encrypting their virus signatures.

Techie, is this why you do not recommend Panda?  ;D
Title: Re:error in scan
Post by: techie101 on December 23, 2003, 05:04:35 AM
Technical,

Yes, among other reasons.  Since Panda does not choose to encrypt its' signatures as Igor stated, it causes false alarms which can cause a user to delete needed files worsening the situation.

To me, this is a major negative for any piece of software, and I will not use it.  I have also had some operational problems, instablity and such.
I also refuse to use Panda since it chooses to install a utility program on my hard-drive to perform the scan.
That is another quirk I have....I don't let vendors remotely install anything that then feeds information out of my computer.  Call me paranoid if you wish.
I have found Kaspersky online better and I only use it to confirm "an infection".

Maybe Panda doesn't like me.   ;D

techie
Title: Re:error in scan
Post by: gtaillandier on December 23, 2003, 08:28:03 PM
I don't use Panda ; can I delete the .sig files without any problem ?

Thank you for all.
Title: Re:error in scan
Post by: igor on December 23, 2003, 10:02:27 PM
Yes, I think you can delete them.
Title: Re:error in scan
Post by: gtaillandier on December 24, 2003, 05:54:36 PM
I wish everybody a Merry Christmas

from France.