Files could not be scanned

[ronnycopeh]

I did a scan and there was a lot of files that could not be scanned, attached is the cleaner log file. Is this the norm or is something wrong somewhere? thanks for any help

[DavidR]

Well none of these look suspicious, avast normally gives the reason why a file can't be scanned (there are many legit reasons) and that is in the Home version, so I'm surprised at the lessor info of the Pro version log.

See http://forum.avast.com/index.php?topic=35347.msg297170#msg297170 this topic for more information on why files can't be scanned. Was there a pop-up list displayed after the scan with these files (this is where the Home version displays files unable to be scanned and why) ?

Unfortunately, the above like will be of little use as you can't really compare as you haven't been given a reason why they can't be scanned.

[ronnycopeh]

That log was from the virus cleaner in avast, I just ran a scan from the task within avast the first thing was *BOOTC: unable to scan. no more data is available, but it continue to scan my pc and found nothing.

[Lisandro]

*BOOTC: unable to scan.

Strange... avast was not able to scan the boot sector of the drive C
Did you run avast at boot time?

[ronnycopeh]

No, I didn't but I do it and report back

[ronnycopeh]

I did a boot scan and this is what the report says, How to I repair this?

01/01/2009 08:54
Scan of all local drives

File C:\Windows\System32\dgmcrrx.dll is infected by Win32:Fasec [trj], Repair: Error 42060 {The file was not repaired.}
Number of searched folders: 13925
Number of tested files: 89055
Number of infected files: 1

[Lisandro]

A lot of files can't be repaired. In fact, only few executables that are present in the VRDB could.
Move the file to Chest for further analysis. It's a dll.

[ronnycopeh]

Okay, please tell me how do I do that, it scanned at boot and I don't see what I'l suppose to do, need help here, how do I get rid of it anyway

[DavidR]

Well if you were able to select Repair, you would equally have been able to select the number for Sent to Chest. In the boot time scan you should get a screen like this when something is detected, chose the number for Send to Chest.

[Lisandro]

Okay, please tell me how do I do that, it scanned at boot and I don't see what I'l suppose to do, need help here, how do I get rid of it anyway

It's not possible to repair.
You should be able to send file to Chest at boot time (see the picture David posted).

[ronnycopeh]

Thank you all so much and Happy New years, I finally got all the stuff repaired, I was searching and found a program called combo fix and it scanned, found, delete and repaired the drive, now it scans the boot and defrags the drive. I have avast with 3 shields running, mail, web, & standard and all thats listed in my signature and I wonder how I still got this, but you all were so helpful and thanks again.

[DavidR]

I would enable the Network Shield as it now has extra functionality, e.g. blocking known sites that can infect your system.

You don't say what combofix found (file name, location and malware name), so it is hard to speculate how something got on your system.

Commonly things get on your system through vulnerabilities in out of date software, JAVA being a very common one. I would also suggest a visit to this site, which scans your system for out of date programs that have patches to close vulnerabilities, http://secunia.com/software_inspector/.

[ronnycopeh]

What it found was the same thing avast did but it cleaned and deleted it "File C:\Windows\System32\dgmcrrx.dll is infected by Win32:Fasec [trj], Repair: Error 42060 {The file was not repaired.}"

I usually try and keep all my drivers and software up to date but I know they are updated daily and thanks. I have java set to keep updated, so it up to date.

[DavidR]

An avast boot-time scan is likely to have been able to detect and move to the chest (rather than the failed repair attempt in the boot-time scan).

You would be surprised what software is found to have an out of date version, which could leave you vulnerable, acrobat, windows media player, etc... The actual scan doesn't take long at all.

[ronnycopeh]

Thanks just did the scan, the only thing it found was that my java was outdated, but I had just went to java verify and it said I had the latest version so I decided to download from secunia results and it said the program was already installed would I like to reinstall, so I see their scans are not to accurate but thanks I'll add the network shield