Avast error or misunderstanding.

[Timo Ditlevsen]

I use avast home 4.8
apparently run avast as it should. - But
when I scan my files I get notice about 16 viruses. I search a viral exist not.
this is confirmed by ReimageRepair from kapinsky Applicable 0 files.
how can such errors occur and how do I get rid of it.

However, something happens on your computer.
Computer administration:
Avast! Antivirus: Automatic
avast! iAVS4 Control Service: Automatic
avast! Mail Scanner: Automatic
avast! Web Swans: Automatic

changed after several restarts to

avast! Mail Scanner: Manual
avast! Web Swans: Manual

Does this mean that there is something wrong?

[DavidR]

What is the malware name, the infected file name, where was it found e.g. (malware name, C:\windows\system32\infected-file-name.xxx) ? 
Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe
 
- Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log and copy and paste the entry.

The Mail and Web Scanners should be set back to their default status of Manual start.

[Timo Ditlevsen]

Thanks for the quick reply.

is it true that is a file in Warring.log not noticed with Embedded then the virus is active as in the example here:

07-05-2010 19:38:44 1273253924 Timo 424 Sign of "Win32: Adware-gen [ADW]" has been found in "C: \ Users \ Timo \ AppData \ Local \ the Microsoft \ Outlook \ Gl Outlook \ Outlook. pst \ Personal Folders \ Top Level of the Personal Folders \ Inbox \ Friends and acquaintances and CHILDREN \ Brian \ ReGet 1.7 \ rgl17.exe \ CTInstall.exe "file.

Am I right in that the virus is Outlook.pst file in the folder "Friends and acquaintances o CHILDREN \ Brian. Am I right in that here are two viruses?
How can slip into one. Pst should I drop all my. Pst files or what?
Hope will explain log example. and say what I should do

[DavidR]

Yes it is in the .pst file and as such a bit risky as it is possible to end up losing your .pst file and associated emails.

There aren't two infections, just one, as the rgl17.exe would appear to be a self-extracting archive file and the infected file, ctinstall.exe is within that archive.

So this is likely to be an old email in the .pst file and personally I would exclude *.pst files from on-demand scans and don't have avast scan old archives when opening an email folder, etc. I don't know the exact name of the option as I don't use MS Outlook and it has been some time since I used avast 4.8 (so I have no reference to the help file or Outlook/Exchange provider.

So you can try manually finding this email within Outlook, it would have an attachment and probably rgl17.exe. Once found, delete the email and empty the deleted emails folder in Outlook and them compact your folders.

Personally I would suggest that you install avast5 (once you have this resolved), if you have XP, Vista or Win7 32 or 64 bit OS versions.

[Timo Ditlevsen]

is this an example that my computer has scanned "her brother" grave bale through a wireless link?

28-11-2008   14:45:40   1227879940   SYSTEM   1224   AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: \\Gravballe\D\TimoBruger\fra Mediecomputer\Favoritter\Favorites\REJSE RELEVANT\Verdens UR\timeanddate.com.url:favicon (\\Gravballe\D\TimoBruger\fra Mediecomputer\Favoritter\Favorites\REJSE RELEVANT\Verdens UR\timeanddate.com.url:favicon) returning error, 00000005.


is it true that is a file in Warring.log not noticed with Embedded then the virus is active as in the example here:

07-06-2010   14:54:13   1275915253   Timo   5044   Sign of "Win32:Spyware-gen [Spy]" has been found in "C:\Users\Timo\AppData\Local\Microsoft\Outlook\Gl Outlook\Outlook.pst\Private mapper\Søgerod\Alle meddelelser\ReGet 1.7\rgl17.exe\tsad.dll" file. 

09-06-2010   17:58:45   1276099125   SYSTEM   1144   AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\Users\Timo\AppData\Local\Microsoft\Live Mesh\GacBase\Store\Device.sdf (C:\Users\Timo\AppData\Local\Microsoft\Live Mesh\GacBase\Store\Device.sdf) returning error, 00000005. 

Wath is: 00000005

[DavidR]

1. if going through a wifi link, it is entirely possible that they don't have permission for certain areas as that is what error 00000005 (error 5) is 'access is denied' and in truth not being able to scan a file doesn't mean it is infected/suspicious, just that it can't be scanned.

2. this is effectively the same as your first example relating to CTInstall.exe in the same rgl17.exe.

3. just another access denied and in this case it looks like Live Mesh is protecting its data.