Avast WEBforum
Other => Viruses and worms => Topic started by: loveandmercy on November 10, 2006, 10:48:50 AM
-
I have an error appear in my event viewer 0000474.
it appears when scanning web pages.
Is avast antivirus working ok or have I got a virus /trojan.
Thanks
-
Can you post more info about the error message?
I've tryied to search the board for 0000474 keyword but I've found nothing ::)
-
avast Log Viewer or windows Event Viewer ?
As Tech mentions more information from (either) source would be helpful.
-
its in the windows event viewer xp
thanks for your reply
-
its also in the avast log quoting 0000a474 returning error
-
But, what is the full information contained there (you can click the copy icon, xp event viewer and paste into the topic) ?
-
I repaired avast but it was still the same
I then uninstalled it amd downloaded it again and touch wood it has rectified the problem
no errors at the moment . very strange could it be the work of a virus or did I just lose a file?
Thank you for your help
-
no the problem persists
-
As does the lack of information, the full text of the previous errors may help us to help you. Without information we can't hazard a guess.
So for the third time, what is the full information contained in the event viewer and log viewer entries ?
no the problem persists
Can you explain exactly what you are doing when you get these errors ?
Is it for one particular web site or type of site, like hotmail, yahoo, etc.
-
10/11/2006 20:27:56 1163190476 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://www.myfootballnews.co.uk/feed/news.js?feed_id=9993348&conf=a9ed8 (C:\WINDOWS\TEMP\_avast4_\unp140298394.tmp) returning error, 0000A474.
10/11/2006 20:31:39 1163190699 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://www.easyfundraising.org.uk/images/special_offers_menu_hover.jpg (C:\WINDOWS\TEMP\_avast4_\unp42282441.tmp) returning error, 0000A474.
10/11/2006 20:32:46 1163190766 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://ec1.images-amazon.com/images/P/B000JLTSSA.01._PE33_OU02_SCTZZZZZZZ_V36930910_.jpg (C:\WINDOWS\TEMP\_avast4_\unp76863477.tmp) returning error, 0000A474.
10/11/2006 20:33:42 1163190822 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://www.myfootballnews.co.uk/feed/news.js?feed_id=9993348&conf=a9ed8 (C:\WINDOWS\TEMP\_avast4_\unp2264298.tmp) returning error, 0000A474.
10/11/2006 21:04:13 1163192653 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://forum.avast.com/index.php?action=profile;u=26479;sa=account (C:\WINDOWS\TEMP\_avast4_\unp145892454.tmp) returning error, 0000A474.
10/11/2006 21:16:48 1163193408 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://www.myfootballnews.co.uk/feed/news.js?feed_id=9993348&conf=a9ed8 (C:\WINDOWS\TEMP\_avast4_\unp145063343.tmp) returning error, 0000A474.
10/11/2006 21:16:56 1163193416 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://members.easynews.com/global4/search.html?subject=&from=&newsgroups=&unique=on&pageby=100&pageno=1&sort1=nsubject&sort1d=%2B&sort2=nrfile&sort2d=%2B&sort3=dsize&sort3d=%2B (C:\WINDOWS\TEMP\_avast4_\unp153378779.tmp) returning error, 0000A474.
10/11/2006 21:18:11 1163193491 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://uk.trendmicro-europe.com/global/images/common/segments_ho.jpg (C:\WINDOWS\TEMP\_avast4_\unp80587869.tmp) returning error, 0000A474.
10/11/2006 21:18:14 1163193494 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://uk.trendmicro-europe.com/global/images/common/segments_smb_over.jpg (C:\WINDOWS\TEMP\_avast4_\unp112704281.tmp) returning error, 0000A474.
10/11/2006 21:18:14 1163193494 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://uk.trendmicro-europe.com/global/images/common/segments_part_over.jpg (C:\WINDOWS\TEMP\_avast4_\unp112511283.tmp) returning error, 0000A474.
10/11/2006 21:18:27 1163193507 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://server1.opentracker.net/?site=uk.trendmicro-europe.com (C:\WINDOWS\TEMP\_avast4_\unp56896848.tmp) returning error, 0000A474.
10/11/2006 21:19:52 1163193592 SYSTEM 1288 AAVM - scanning warning: x_AavmCheckFileDirectEx: http://server1.opentracker.net/?site=uk.trendmicro-europe.com (C:\WINDOWS\TEMP\_avast4_\unp130906132.tmp) returning error, 0000A474.
-
I have just visited most of the image links in the errors and I don't have any problem and most of the other links and whilst some to the content and page display was weird (perhaps because I don't have any news feed reader), there were no errors.
What browser are you using (I checked the links with firefox and web shield enabled) ?
Have you tried a different one ?
What is your OS ?
Do you use a proxy to connect to the internet ?
-
I've done a little checking and the 0000A474 would appear to be a windows error and that is 'The operation completed successfully,' which is somewhat strange.
Are you actually getting any errors displayed by avast at the time you access these pages or is it just through viewing the event viewer, etc. ?
Also when visiting the page where these images are featured in the error text, are the images displayed or missing ?
-
I am using internet explorer 6 in xp pro I havent tried a different browser yet.
I am not using a proxy
I have scanned the sytstem with lavasoft ad aware and spy bot
and did an online scan with trend spyware but they only picked up tracking cookies
once again thanks for your help
-
I am not getting any errors displayed by avast
I only notice it in the event viewer
all of the images are being displayed fully.
I only noticed the problem when I was trying to sort out a windows shut down problem that has now gone away
-
That is kind of what I though, just seeking confirmation and may just be some hiccup but strange that the final error code reported is 'The operation completed successfully,' which is kind of confirmed also by the images being displayed, so weird really fits.
Can you check the C:\WINDOWS\TEMP\_avast4_\ and see if there are any unpxxxxx.tmp files remaining ?
Normally on successful completion that folder should be emptied, if not you will periodically need to empty it.
-
there are no unpxxxxx.tmp files in there at all
do you think its just a quirk because everything else seems to be ok
-
I think so, as the weird error message related to a successful completion and there were no unpxxxx.tmp files remaining, which only usually happens with a failure of some sort; allied with no avast error displayed and the images being loaded.
Personally I don't go looking in the avast log viewer (unless there is a problem) as the stuff in there is verbose (and looks scary) and more use to the programmers in certain sections of the log viewer. It gets more so the lower you set the program settings, logging, mine is set at Notice (default) so everything above that is logged. If set to Info or Debug more is logged and also recorded in the windows Event Log, anti-virus.
-
I have done countless scans with various adware scanners including spybot and superanti spyware I picked up a registry file entry in Lavasofts ad-aware program and since i deleted that file the problem seems to have gone touch wood.
I definately think I picked up some sort of virus because yesterday I swithced the pc on and the desktop wallpaper had changed.
All seems ok for the moment
Thanks for your help
-
all sorted now . It was an ipconfig trojan .
Finaly detected bt Syphos pc cillin software.
Thanks for your help David
-
Your welcome, if you still have a sample of the file, send it to avast.
Send the sample to virus @ avast.com (without the spaces) zipped and password protected with password in email body, plus some details, possibly a link to this Topic and Undetected Trojan in the subject
-
ok I will try and send the file