Hi,
I have been posting in other forums trying to resolve some issues but think it may be best to post here. Instead of re-writing, I will copy & paste some of my other forum posts here so if the following doesn't read exactly right, this would be why. I look forward to your replies. Thanks!
This first post from bleepingcomputer.com is rather long so I will link to it:
http://www.bleepingcomputer.com/forums/topic269492.htmlAlso,
I have had no further postmortem debugger issues as indicated in the above link but I did receive another "unable to scan" message from Avast. Shortly before I scanned, I thought my FF browser was acting strange as when I was logging into a Google Apps account, the Google favicon wouldn't load in the address bar & when I cleared my cache, Google was still pulling a user name that I had previously used, which is not normal considering the cache was cleared. The issue corrected & that's when I scanned.
The full system scam came up clean, however, as it happened the other day as described in my other post on bleepingcomputer.com linked above, not everything could be scanned. This has never happened to me before with Avast. I also scan with MBAM & AdAware. I check all new website with MacAfee Site Advisor & run Spywareblaster so I would like to think that I am not infected but now I am not sure.
Here are some of the errors & warning reports that I pulled from the event viewer which did not necessarily occur during a scan:
Event Type: Error
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/08/2009
Time: 1:46:22 PM
User: N/A
Computer:
Description:
AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\m29i26zi.default\sessionstore-1.js failed, 0000A413.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/08/2009
Time: 1:46:22 PM
User: N/A
Computer:
Description:
AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\m29i26zi.default\sessionstore-1.js (C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\m29i26zi.default\sessionstore-1.js) returning error, 0000A413.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/07/2009
Time: 12:44:13 AM
User: N/A
Computer:
Description:
AAVM - scanning warning: x_AavmCheckFileDirectEx:
http://help.twitter.com/javascripts/tiny_mce/plugins/visualchars/editor_plugin.js (C:\WINDOWS\TEMP\_avast4_\unp221421909.tmp) returning error, 0000A413.
Event Type: Error
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/07/2009
Time: 12:44:13 AM
User: N/A
Computer:
Description:
AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
http://help.twitter.com/javascripts/tiny_mce/plugins/visualchars/editor_plugin.js failed, 0000A413.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/06/2009
Time: 2:21:19 AM
User: N/A
Computer:
Description:
AAVM - scanning warning: x_AavmCheckFileDirectEx:
http://clients1.google.com/complete/search?hl=en&client=hp&q=Obc5Md6cP3QZj&cp=13 (C:\WINDOWS\TEMP\_avast4_\unp212433553.tmp) returning error, 0000A413.
Event Type: Error
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 11/05/2009
Time: 6:31:51 PM
User: N/A
Computer:
Description:
AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of
http://api.facebook.com/restserver.php?v=1.0&method=fql.query&query=select%20url%2C%20share_count%20from%20link_stat%20where%20url%20in%20(%27http%3A%2F%2Fwww.huffingtonpost.com%2F2009%2F02%2F19%2Fbailed-out-chase-ceo-dimo_n_168121.html%27)&format=json&cal failed, 0000A413.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 10/12/2009
Time: 10:29:15 AM
User: N/A
Computer:
Description:
Sign of "JS:Pdfka-JR [Expl]" has been found in "
http://modloaded.com/flash/pdf.php" file.
There are some more of the same or similar, as well. Most of these errors/warning have occurred over the past 5 days, the same time that my printer spooler error occurred causing me to re-install the drivers. This is explained in the link to bleeping above. Prior to the past 5 days, there are only occasional warning messages, 2 of which I listed above but for the most part, there are only information messages in the logs, going back months.
Going way back, there were the following messages, which I believe I thoroughly addressed at the time & learned that there may at one time been have been an infection on the machine which had been cleared up & that Avast was just picking up traces of it or that they were false positives...I do not recall exactly.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 04/29/2009
Time: 10:30:06 PM
User: N/A
Computer:
Description:
Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{94EBE69A-E7F9-4D99-94FD-297EEDF5C601}\RP39\A0002495.exe" file.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 04/29/2009
Time: 10:15:36 PM
User: N/A
Computer:
Description:
Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\Hewlett-Packard\OrderReminder\uninstall\hpuninstaller.exe" file.
Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date: 04/29/2009
Time: 9:27:36 PM
User: N/A
Computer:
Description:
Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Owner\Local Settings\Temp\hpuninstaller.exe" file.
I also recall updating FF Firebug recently so I followed the warning path above & found a bunch of Firebug files. I proceeded to delete Firebug, rescanned & this time, all files were scanned. Understand, that Avast has not considered any of these errors & warnings as infections.
Any ideas?
