"Unable to Scan Archive Files: Password Protected"?

[am1432]

I get this message after doing scans on the High setting and choosing Thorough.

I tried to ask a friend about it, they had no idea since they have no experience with Avast, but on another forum I was told this was good.

AVG wouldn't install on my computer for some reason.

I was using Trend Micro before, but then someone said it wasn't great so when it expired I tried the free Avast out.

It ends up saying there's over 700 files when it shows the message, it's beside all of them in the grid/list thingy. Thing...I'm clearly very technical, right? haha

Anyone have any ideas?

I'd uninstalled Trend Micro using the Add/Remove Programs dealy and it said it'd successfully uninstalled. So now I'm just lost.

Scared of this Apr. 1 virus, I just bought this computer not long ago after my other one completely died, seemed like a virus last time so I'm totally paranoid now!

Any help would be much appreciate! =o)

I use Windows XP and downloaded Avast 4.8 if that matters.

[Vladimyr]

Hi am1432

If these files are archives (e.g. .cab .zip) there's probably nothing to worry about.
"Thorough" is very thorough but avast!, like any other anti-malware program, can't open/unpack them to check the contents if it doesn't know the password.
If you're "paranoid" about malware risk, best to cross-check by scanning with MBAM and/or SAS (both excellent and free).

[am1432]

Hey Vlad =o)

Thanks bunches for the reply!

I'll try both of those links.

Also, how can I check what the end of the files are? Should I see it in the grid/list of the 700+ files but I just didn't look hard enough? Or is there something to do with a right click here?

I don't know tons about computers except that usually when something is difficult, the solution involves a right click! haha

Thanks again! =o)
Amanda

[am1432]

Sorry, one more thing. Should *I* know the password? If so and I can actually sort that out, should it be entered into Avast so it will scan everything?

[Tarq57]

"Unable to scan file" is just that, doesn't mean the file is infected.
If you maximise the scan results window and move the column header, you'll be able to see the file name and path, which will usually provide the reason (and usually the reassurance) why. For example: Spybot quarantined items. AdAware defs. System volume information.There is no way to enter a password for same, the programs will be "speaking" different languages, and usually no need for it, either.
So have a look, may need further investigation, but don't be alarmed.

[am1432]

Tarq - Thanks bunches!

Most of them do say System Volume Information.

Ok, now I'm calming down. I had it scan everything except the CD drive (that's only useful if you want to make sure a CD doesn't have bad files, right? Or should I do that regularly?) nearly everything for C: did say that System... stuff in front of it.

Then the D: stuff is groups of things that are all pretty similar too.

You guys are rockin'! I was ready to cry before I came here thinking I had over 700 bad files and would need to replace the computer again in a week. Now I'll actually be able to sleep! haha

Will still try out the links just to be sure, but I definitely feel better already.

Thanks again!
Am =o)

[Lisandro]

If a virus is replicant (coming and coming again), you could follow the general cleaning procedure:

1. Clean your temporary files. You can use CleanUp or CCleaner for that.

2. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).
If avast does not detect it, you can try DrWeb CureIT! instead.

3. It will be good if you download, install, update and run SUPERantispyware, MBAM or SpywareTerminator.
If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
About legit antispyware applications or the bad ones see here.

4. If you still detecting any strange behavior or even you're sure you're not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster for XP/Vista. For XP only: Panda.

5. Also, if you still detecting strange behaviors or you want to be sure you're clean, maybe making a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.

6. After you're clean, disable System Restore on Windows ME, XP or Vista. System Restore is not available in Windows 9x and 2k. After disabling you can enable it again.

7. Use the immunization of SpywareBlaster.

8. Finally, when you're clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.

[am1432]

Tech - Thanks!

That sounds wickedly complicated and over my head, but I'll see if I can sort it out anyhow! haha

Thanks for all the help everyone, I totally appreciate it! =o)
Am

[DavidR]

Don't look at the whole, take it a step at a time and ask questions if required.

Report progress/results at the end of each step

[am1432]

I already have a question *doh*

I downloaded CCleaner.

Using the "Cleaner" part was simple enough, but I have no idea about the other options there.

"Registry" scared me when I did the scan and then it asked if I wanted to "backup the registry" when I clicked "Fix selected issues" -- so I panicked and hit Cancel instead. Is doing the Registry scan even something I should mess with or just never touch it again?

Thanks for the advice, David, step-by-step is theonly way I'll be able to manage this. I'm a tech nimrod when it comes to using these kinds of programs ='o(

But you all help tons! =o)

For the Spyware issue, a friend told me to use SpyBot Search & Destroy, and I did download it a week ago. Is it any good, or I should switch to one that was suggested before?

[DavidR]

All you were asked to do was clean temporary files using ccleaner, then that was it, move to the next step. Try not to ad additional steps to a long journey Clearing out the temporary files frequently removes some malware and that is all we are trying to do in this step.

Leave the Registry, Tools and Options icons/sections alone for now, you should only be working in the Cleaner section.

There are other tools in step 3 that can check your registry and they produce logs so you can copy and paste the contents of the log here and we can advise on actions to be taken.

When compared to the first two applications in step 3 it isn't up to the same standard though it does have resident protection which up to a point is helpful.

[am1432]

David - Thanks for even giving me an image to work wit, awesome!

Ok, so I went for "Spyware Terminator" because it said it had real-time protection and scanning.

Downloaded that, now when I went to install it's giving me options and I don't know which to choose =o/

There's 3 options:

Scan for spyware - checks and removes

Protect against spyware - this is the real-time one

Protect against spyware and viruses - this one also says real time, but more than the 2nd did.

The last one sounds best but I figured I'd ask you guys since hopefully I have a bit of time to double check, and I'm totally lost trying by myself.

I don't know how you guys sort this all out, you're half magic or something ^5

** On closer inspection, looks like I'm an idiot and it was already installed but asking me what exactly I wanted to do with it *doh*

[am1432]

Ok I was gonna post the Report from Spyware Terminator but it said it exceeded the character limit.

It found one cookie and said it was only a small threat, 1 block out of 5, a Firefox cookie.

Now I don't know what to do with it =o/

And apparently it also won't let me choose to do a virus scan using this because it needs 'WinClamAV'?

Do I care? Or because I'm using Avast I'm all covered?

** Again, nevermind. I worked it out with some perusing. Sorry =o/

[Tarq57]

I haven't used ST for over a year (don't miss it, either) but I would recommend against installing Clam AV - not because there is anything wrong with it, but because its' detection rate isn't that flash compared to, say, Avast, - and I would strongly recommend against installing that little toolbar that installs as part of WebSecurityGuard.
Frankly, I would rather use Superantispyware and/or MBAM as on demand scanners that ST in realtime.

[DavidR]

Firstly you don't so much need real time protection but confirming your system is clean and IMHO both SAS and MBAM are better than ST at detection and removal of malware. Cookies are a very minor issue and not one of security.

If a log file is too large to paste it can be split over two or more posts, though I have no idea how it could be so big if it only found 1 cookie and if that is all that is in it then there is little benefit from posting it.

So bearing in mind what Tarq57 said you shouldn't choose option 3. I used ST for less than a week and was totally unimpressed, that was some time ago and you have to avoid installing the crawler toolbar and the AV if you decide to install it. Its only advantage over SAS and MBAM is this resident protection.

I would do the scans with both SAS and MBAM and report the findings and basically if nothing serious is found I would say move directly to step 7 & 8.