Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: fishbowl231 on October 16, 2009, 04:58:04 AM
-
Hello all. This is my first post and I'm not sure if this is the correct place for this topic. If it's not in the right place, I apologize for the trouble. The problem I'm facing is this:
A schedule boot time scan was unable to scan two files. There may be more but I stopped the scan after I received these errors to see if this is a major problem. The two files are:
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\UZEFYD4F\swflash[1].cab\FP_AX_CAB_Installer.exe
C:\Documents and Settings\HP_Administrator\My Downloads\Downloads\IE8-WindowsXP-KB972260-x86-ENU.exe.part\_sfx_005._p
The 2nd file I downloaded because a Panda Security scan said I had vulnerabilities and I should download a few patches. The vulnerabilities on the Panda Security went away after I downloaded the 2nd file and another patch. If need be I will do a complete scheduled scan and see if any other CAB files are unable to be scanned. Thanks ahead of time
-
Files that can't be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.
Also, the packaging of the file could have some error, or use a non-standard pattern...
Are you using avast or Panda as your antivirus? Both?
-
I am using avast but used Panda scanner that is available... I haven't uninstalled it yet though. Did not think it'd be a problem since the website activates the scan and I am unable to do anything with the installed material from Panda.
The weird thing about that 2nd file is I was able to find it in my system but when I went into it's properities it was saying it was sent from another computer and was blocking to protect my computer. I have never seen this option before on a file. I left it be but was thinking that might have something to do with Avast saying it was a corrupt file. I downloaded the file off of microsoft.com though so I'm not sure?
-
I am using avast but used Panda scanner that is available
If it was panda online scaner, i dont think it will interfear with avast
Panda Security scan said I had vulnerabilities
The best scanner for this is Secunia, try the online scan http://secunia.com/vulnerability_scanning/
If you think you are infected try scanning with these
MBAM http://filehippo.com/download_malwarebytes_anti_malware/
SAS http://filehippo.com/download_superantispyware/
come back and post scan logs here
-
Scanned my computer with malwarebytes. Here are the results:
Malwarebytes' Anti-Malware 1.41
Database version: 2981
Windows 5.1.2600 Service Pack 3
10/18/2009 12:13:06 PM
mbam-log-2009-10-18 (12-13-06).txt
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 181214
Time elapsed: 31 minute(s), 54 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
Also was wondering if Windows firewall was adequate enough with Windows Defender, avast and malwarebytes or if it would be recommended to download a firewall.
-
Also with that website secunia, do you recommend to download Personal Software Inspector (PSI) or just do the online scanner?
-
I do montly scan with the online secunia
Do I Need a Firewall? http://askbobrankin.com/do_i_need_a_firewall.html
Do I need a firewall, and if so, what kind? http://ask-leo.com/do_i_need_a_firewall_and_if_so_what_kind.html
If you want a software firewall i think the ones most often recomended here is PCtools / Online Armor / Outpost
-
I meant Windows firewall instead of Windows defender. Obviously I know I need some kind of firewall but was just wondering if Windows firewall would be good enough. I ended up getting Zone alarm as it had the highest editor rating and customer rating on download.com.
I read that article and got another question. If you can get hacked within seconds of being connected to the internet? How would I be able to find out if I was hacked or not when I was connecting to the internet to get avast, windows defender etc?
-
Also with that website secunia, do you recommend to download Personal Software Inspector (PSI) or just do the online scanner?
From http://secunia.com/vulnerability_scanning/online/programs_covered/ (http://secunia.com/vulnerability_scanning/online/programs_covered/)
Programs Covered
The Secunia OSI is designed to be a quick, easy, and fast way to ensure that the most common programs installed on your computer are patched against known vulnerabilities for which the vendor has released security patches.
For a full in-depth scan of your home PC, we recommend that you try our PSI. Network administrators and business users must use our CSI for the full network wide overview.
I use PSI installed as administrator. The program only runs when logged in as administrator, and doesn't interfere with the other Windows accounts.
-
Also with that website secunia, do you recommend to download Personal Software Inspector (PSI) or just do the online scanner?
From http://secunia.com/vulnerability_scanning/online/programs_covered/ (http://secunia.com/vulnerability_scanning/online/programs_covered/)
Programs Covered
The Secunia OSI is designed to be a quick, easy, and fast way to ensure that the most common programs installed on your computer are patched against known vulnerabilities for which the vendor has released security patches.
For a full in-depth scan of your home PC, we recommend that you try our PSI. Network administrators and business users must use our CSI for the full network wide overview.
I use PSI installed as administrator. The program only runs when logged in as administrator, and doesn't interfere with the other Windows accounts.
Thanks for the info. I downloaded PSI and the scan came back clean. It doesn't seem to be slowing my computer either which is what I feared would happen
-
I meant Windows firewall instead of Windows defender. Obviously I know I need some kind of firewall but was just wondering if Windows firewall would be good enough. I ended up getting Zone alarm as it had the highest editor rating and customer rating on download.com.
I read that article and got another question. If you can get hacked within seconds of being connected to the internet? How would I be able to find out if I was hacked or not when I was connecting to the internet to get avast, windows defender etc?
*Bump* Don't know if this is appropriate but didn't want this post with the question to get buried under the last couple of posts dealing with something else. Sorry if this is inappropriate
-
What I do, and is recommended practice, is to not remove the existing firewall and AV until your intended replacements have been downloaded ready to install. (And any uninstall tools that may be needed.)
Alternatively, use another computer and place the required installer files on a flash drive.
Either way, you can install your security without being online.
I have done this the naive way before, a handful of times (long long ago, on a PC far away) and have on some of those occasions become infected, and needed an online scanner to fix things up. At the time I used TrendMicro Housecall.
After getting the new computer with Symantec pre-installed, I got semi-wise, and worked out how to do it safely. (I didn't know about uninstall/removal tools then. Took me a long time to completely remove the Symantec stuff.)
-
@Tarq57
That's Sage advice
http://www.answers.com/topic/sage
-
Ha!
Are you a fan of Dilbert, too, YoKenny?
(Currently my fave cartoon. Mimics life at work a bit too closely at times, though.)
-
Ha!
Are you a fan of Dilbert, too, YoKenny?
(Currently my fave cartoon. Mimics life at work a bit too closely at times, though.)
I was severly repremanded by my boss when I had my Pointy-Haired Boss Squeeze Toy on my desk at work: :o
http://www.dilbert.com/2009-10-19/
http://thedilbertstore.com/products/65112-pointy-haired-boss-squeeze-toy
My Co-workers bought me coffee for weeks ;D
-
So you're really Wally? ;D
(IMHO the fact the boss reprimanded you over something like that validates the presence of the squeeze toy 100%.)
-
You can call me Wally if you want but just don't call me late for dinner.
-
What I do, and is recommended practice, is to not remove the existing firewall and AV until your intended replacements have been downloaded ready to install. (And any uninstall tools that may be needed.)
Alternatively, use another computer and place the required installer files on a flash drive.
Either way, you can install your security without being online.
I have done this the naive way before, a handful of times (long long ago, on a PC far away) and have on some of those occasions become infected, and needed an online scanner to fix things up. At the time I used TrendMicro Housecall.
After getting the new computer with Symantec pre-installed, I got semi-wise, and worked out how to do it safely. (I didn't know about uninstall/removal tools then. Took me a long time to completely remove the Symantec stuff.)
Thanks for the tips. Would you recommend formatting and restoring my computer at this point? Since I was on the web for a little bit with just Windows firewall which doesn't seem like it's exactly a good one.
-
Thanks for the tips. Would you recommend formatting and restoring my computer at this point? Since I was on the web for a little bit with just Windows firewall which doesn't seem like it's exactly a good one.
Are you infected? if not no
How Secure is Windows Firewall?
http://www.flexbeta.net/main/articles.php?action=show&id=76
-
Thanks for the tips. Would you recommend formatting and restoring my computer at this point? Since I was on the web for a little bit with just Windows firewall which doesn't seem like it's exactly a good one.
Are you infected? if not no
How Secure is Windows Firewall?
http://www.flexbeta.net/main/articles.php?action=show&id=76
Would malwarebytes, windows defender, avast scans be able to tell me if I had been hacked?
-
Would malwarebytes, windows defender, avast scans be able to tell me if I had been hacked?
Probably. Especially repeat scans with a number of different applications.
The Windows Firewall is a very good firewall, apart from the limitation of no outbound control. The chances you've had malware install while going online to get yourself an AV are fairly small, with the Windows firewall on. (Had it been off, I'd say the chances were fairly good you'd have some infection.)
If there are no symptoms, and repeat scans turn up clean, I personally would not bother about formatting and reinstalling Windows.
-
Got a new file that came up on the avast boot scan:
C:\Document and Settings\HP_Administrator\Local Settings\GLB60.tmp\Wise0003.bin Error42146 {Installer achieve is corrupted}
I looked the file up and couldn't open w/ any programs I could think of. The properties said it was part of Yahoo! Suite which has the Yahoo! messenger. Should I be concerned about this?
I know that when it says the blank is corrupted it just means Avast is unable to scan it. Why is it unable to scan certain files?
P.S: I tried uninstalling Yahoo Messenger and another boot scanner and the file still came up with the scan.
-
One more question I had Norton originally on this computer. D/Led the tool to remove it after I went into the control panel and uninstalled it there. Does it matter if I'm in safe mode to use the Norton removal tool or not?
-
*BUMP* for the last two questions. I would appreciate any info
-
I don't know for certain (which is the reason I didn't reply) but I don't think it matters if the Norton tool is run in safe or normal. (Try both. Can't do any harm. The second run probably won't find anything additional, but if it does, let us know.)
The file "GLB60.tmp" would appear to be related to one of the following software vendors:
* SmartDraw.com; SmartDraw 2008; 2008.31
* Stardock Corporation - www.stardock.com; Stardock Central; 2.x
* SmartDraw.com; SmartDraw 2007; 1032, 4455, 0, 0
* SpeedBit Ltd.; Download Accelerator Plus (DAP); 9304 (Build 1057
That it's corrupted probably doesn't matter. Being a .tmp file it is probably safe to delete. It probably was a temporary part of the process involving the installation of something..either Yahoo messenger (likely) or one of those listed above (courtesy of Prevx.) Lots of self-installing files leave un-needed stuff behind after they've done their thing. Maybe this case is one of those.
Files that cannot be scanned are just that, it's not an indication they are infected. (And most probably aren't.)
-
Thanks for the info. I appreciate it a lot. Can you explain why certain files are unable to be read by avast boot scanner?
-
I can't with any authority or knowledge, but some files, often used by other security programs or even MS encrypted files are password protected by their own respective programs, and some might use an unknown compression technique.
Generally if you look at the name and path of a file that's unable to be scanned, it will reveal enough about why to reassure. (That's usually my experience. Part of the OS, or Spybot, or similar.)
I have noticed that sometimes a file that Avast can't scan certain other scanners sometimes can (or claim to scan them); make what you will of that.