Author Topic: Again! Help with Scan Results  (Read 12014 times)

0 Members and 1 Guest are viewing this topic.

CoJo

  • Guest
Again! Help with Scan Results
« on: December 16, 2003, 11:01:04 PM »
sorry, folks, but as ignorant as I am about these things :-[
I don't want to do anything rash...
I just did a through scan and computer is clean...but I have a truckload of stuff that could not be scanned. Now I do understand why some things aren't scanned as I did read some posts on that, but I have hundreds showing that are in SpyBot S&D recovery...literally hundreds! there are various types...here is a sample...sorry it is so long :-[

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry37.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry38.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry38.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry39.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry39.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry4.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry4.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry40.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry40.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry41.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry41.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry42.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry42.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry43.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry43.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry44.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry44.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry45.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry45.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry46.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry46.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry5.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry5.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry6.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry6.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry7.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry7.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry8.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry8.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry9.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry9.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Program Files\Java\j2re1.4.0_03\lib\charsets.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\ext\localedata.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\jaws.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\rt.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
Infected files: 0
Total files: 121976
Total folders: 7800
Total size: 13.5 G

*
* Task stopped: Tuesday, December 16, 2003 4:35:41 PM
* Run-time was 43 minute(s), 52 second(s)
*

before I go to the recovery chest and start deleting items, I would like some advice on things NOT to touch.

I'm swallowing my pride right now but I need your help so I don't make a bigger mess...some of these things I do not understand--like manifest mf zip file is corrupted--if I should leave it alone or try and repair it.

cojo

Offline MikeBCda

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2251
Re:Again! Help with Scan Results
« Reply #1 on: December 17, 2003, 12:06:24 AM »
Hi cojo,

Sorry I can't help with the rest of your list -- but those "corrupted" Sun Java files near the end are awfully familiar.  I got the same error message from avast for a while, but those have now mysteriously dried up.

I have a sneaking suspicion that those "zip" files aren't in normal ZIP format -- I'll bet anything that, same as in my case, your Java runs just fine except that it and avast don't like each other for some reason.

I'll be interested to see what the tech experts have to say on this one.

Best,
Mike
Intel Atom D2700, 2 gig RAM, Win 7 x64 SP1 & IE-11, Firefox 51.0
(default). 320 gig HD, 15Mb DSL, Win firewall, Avast 12.3.2280 free, SpywareBlaster, MBAM Prem., Crypto-Prevent

Offline .: Mac :.

  • Avast √úberevangelist
  • Ultra Poster
  • *****
  • Posts: 5087
Re:Again! Help with Scan Results
« Reply #2 on: December 17, 2003, 12:06:39 AM »
all are safe to delete these are files that contain the spyware that spybot removed from your system.
"People who are really serious about software should make their own hardware." - Alan Kay

Offline guitar_billy

  • Newbie
  • *
  • Posts: 10
  • I'm a llama!
Re:Again! Help with Scan Results
« Reply #3 on: December 17, 2003, 01:07:27 AM »
i would leave all the JAVA files alone... i had the same message on my java installation, see

http://www.avast.com/forum/index.php?board=2;action=display;threadid=1964

i have now updated my SUN JAVA to a newer version to see if the message goes away but i haven't scanned again and at the moment i am logged in into linux, so new results will have to wait...   :D

good luck with your cleanup.
ALEX

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re:Again! Help with Scan Results
« Reply #4 on: December 17, 2003, 01:26:17 AM »
Now I do understand why some things aren't scanned as I did read some posts on that, but I have hundreds showing that are in SpyBot S&D recovery...literally hundreds! there are various types...here is a sample...sorry it is so long :-[
before I go to the recovery chest and start deleting items, I would like some advice on things NOT to touch.

I'm swallowing my pride right now but I need your help so I don't make a bigger mess...some of these things I do not understand--like manifest mf zip file is corrupted--if I should leave it alone or try and repair it.

cojo

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry37.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry38.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry38.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry39.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry39.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry4.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry4.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry40.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry40.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry41.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry41.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry42.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry42.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry43.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry43.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry44.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry44.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry45.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry45.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry46.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry46.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry5.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry5.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry6.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry6.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry7.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry7.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry8.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry8.zip\sbRecovery.ini [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry9.zip\sbRecovery.reg [E] Archive is password protected. (42056)
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsRegistry9.zip\sbRecovery.ini [E] Archive is password protected. (42056)

Do not worry about these files. As said Mac, all of them are safe to delete and contain just the spyware that Spybot removed from your system. Anyway, I suggest you let these files there and exclude the folder C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ from the scanning.

C:\Program Files\Java\j2re1.4.0_03\lib\charsets.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\ext\localedata.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\jaws.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)
C:\Program Files\Java\j2re1.4.0_03\lib\rt.jar\META-INF\MANIFEST.MF [E] ZIP archive is corrupted. (42125)

These files, if you can, I suggest you send them to Igor or pk (by email or upload). I suggest you send them an email with the link to this forum, asking them who wants these files... I bet for igor...  ;D

The best thing to do now is nothing. Relax, tomorrow you will receive an answer from one of them and could send the files for analysis. They're probably good files and avast is giving you false alarms  8)
The best things in life are free.

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #5 on: December 17, 2003, 02:01:26 AM »
thanks, Technical!

I'll follow your advice :)
 by the way, I like your new picture!

all that is showing in the spybot recovery is registry entries....
all this "junk" was in the scan results
so is it still safe for me to delete the registry entries?

thank you, my friend
cojo

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11765
    • AVAST Software
Re:Again! Help with Scan Results
« Reply #6 on: December 17, 2003, 09:16:58 AM »
Well, I don't thing it's necessary to send those files ;D
These java files are known to be corrupted, they were discussed many times on this board. I'd suggest not to worry about them.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re:Again! Help with Scan Results
« Reply #7 on: December 17, 2003, 11:50:22 AM »
Is it still safe for me to delete the registry entries?

If you mean 'automatic' cleaning of the Registry, if you believe and trust in your Registry Cleaning application, seems to be safe.

But, if you are thinking in 'manual' deleting the entries, it is safer forget them...

Anyway, add this folder to the avast! exclusions and, in the report file settings, un-check the 'Soft error' files. You won't see them again in the report and, like everybody is saying, just forget them there.  8)

Hope this help.
The best things in life are free.

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #8 on: December 17, 2003, 01:57:48 PM »
sorry, Igor :(
disregard the email I sent asking about them :-X

I accept the advice offered...thank you and technical

cojo

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re:Again! Help with Scan Results
« Reply #9 on: December 18, 2003, 12:57:39 AM »
sorry, Igor :(
disregard the email I sent asking about them :-X
I accept the advice offered...thank you and technical
cojo

You're always wellcome...
Did you like my photo? It's me at four...
Easy with the Registry, eh?  8)
The best things in life are free.

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #10 on: December 18, 2003, 01:36:42 AM »
Technical, I love your photo :)
how long ago were you four? ;D

and I am going to be very, very careful with registry ;D
I'm going to use RegCleaner (?) that you suggested...I have it bookmarked.

cojo

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #11 on: December 18, 2003, 01:59:56 AM »
 :o
aha! I should have known that was why he was so smart...and it passed it on to you, W ;D
gotta go clean my registry :-\
cojo

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #12 on: December 18, 2003, 02:03:49 AM »
ok...now I have to behave! and talk about forum things so I don't get into trouble 8)
wish me luck on the "cleaning"
cojo

CoJo

  • Guest
Re:Again! Help with Scan Results
« Reply #13 on: December 18, 2003, 02:24:43 AM »
well, I didn't get very far!!

winzip self extractor header corrupt
possible cause bad disk or file transfer error

what the heck does that mean???
 I unzippped 3 files successfully (in regclean) to the named folder...have a desktop icon...but it won't do anything but give me the above error message

HELP ;D
cojo

Walker

  • Guest
Re:Again! Help with Scan Results
« Reply #14 on: December 18, 2003, 02:34:19 AM »
Quick answer CoJo,

Try downloading another copy of regclean and unzipping again. Possibly was a bad file transfer.

W.