Archive files that AVAST! WILL NOT SCAN

[jasonsos]

Greetings Heavy Hitters!
I have a strange problem that I cannot figure out, let alone understand: When I run a 'deep scan' on my Vista 32 bit HP Compaq, at the end of the scan, there are dozens of files that are posted as follows: "cannot scan these archive files due to password protection." The strange thing is that I do not use a password for Avast, nor to enter Windows! This concerns me, as it has been happening for over a year, although I have had this computer for 3 years. Can anyone help me fix this problem, or is there a fix? Thank you very much.
Jasonsos (Old Dawg new tricks)

[DavidR]

Files that can't be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.

Many programs (usually security based ones) password protect their files for legitimate reasons such as AdAware and Spybot Search & Destroy, there are others (and avast doesn't know the password or have any way of using it even if it did know it).

When you run scans with the above programs and you delete harmful entries that they detect, a copy is kept (in quarantine/restore/backup) in case you need to reverse what you did. These are usually password protected, you should do some housekeeping and delete old backup/recovery/quarantine entries (older than two weeks or so), this will reduce the numbers of files that can't be scanned.

By examining 1) the reason given by avast! for not being able to scan the files, 2) the location of the files, you can get an idea of what program they relate to. You may need to expand the column headings to see all the text.

If you can give some examples of those file names, the locations might help us further ?

[iyogisolutions1]

Hi,

      Files that cannot be scanned using avast might  not be an infection.
   Many programmes ,usually security programmes protect their files using password.If you are having anyother security softwares ,they will kept all the quarantined files (harmful files detected by security software )password protected. if you delete old files including backup ,recovery or quarantined files we can reduce those files that cannot be scanned.


Could you please give us the exact file name (including the location and the reason) of those files that cannot be scanned.


Have a wonderful day. Good k@rma !

[jasonsos]

Thanks DavidR.
Ohe! You are likely correct, as I have not deleted my 'chest' at all. I will try that, but I must do the deep scan to see them again to give you a list of the files and locations. I will do that now. Since I am in Texas and you are in the UK with 6 hours ahead; I will post ASAP. Thanks mate!

[jasonsos]

Thanks iyogisolutions1 and DavidR.
Gads. I didn't know that i could delete those files without running a deep scan, but I did go ahead and deleted those older than a few days, as I haven't had but 2 viruses in 3 years and Avast! caught both of them right away! * But before I deleted the files mentioned, their paths were from an older 'Spyware' program that I tried that found many more than Avast, so although I uninstalled that program; dozens of files ended up in its 'chest,' which is again strange, because when I uninstall programs, I also delete their program folders found in 'C:'. Dozens of the others found in the Avast chest were from active programs, like 'My Free Weather.' Some others were 'jpg' and 'PNG' files. I just checked again, as I left one deep scan result that was left in the log. * I just went ahead and deleted the entire Avast log/chest, as there have not been any viruses in over 2 years, but there were too many to list: dozens. I'll keep deep scanning and when I am successful; I'll post a followup reply for all. Hopefully, they all will be gone and this probelm has been figured out, thanks to you guys. Thanks friends! Good Vibes always, Jasonsos.

[DavidR]

You don't want to delete anything, as my bold text indicates, files that can't be scanned are just that. The only time you should delete is after full investigation.

There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

To be of any assistance the detections need the file name and location or it is just guess work.

[jasonsos]

DavidR and All:
I did not delete the files in the chest. They were listings within the scanned logs from months of scans. The two viruses in the chest are 'Mydoom worms' with one being a 'zip attachment' and the other a 'message.com' prefix, although a Mydoom as well. In re-scanning them both within the chest, I can't tell if they are active or not. They are only shown as mentioned above in a block note. I shall not delete them until I hopefully hear from you. How can you tell if they are still active in the chest? If they can be scanned and a result is shown? Thank you for your help and advice.
Jasonsos

[DavidR]

The logs are historic and I shouldn't worry about those, some people like to keep a record of the detections made on a scan and when. If you don't and you are viewing these logs from the avastUI, Scan Computer, Scan Logs location (see image, click to expand), then you can delete historic scan logs.

If the two files have been in the chest (a protected area where they can do no harm) for a few weeks, you open the chest and scan them from inside; if they are still considered infected you can delete them from within the chest.

I would be wary of any file called message.com even without scanning, as it is trying to trick you to open it to find what the message is. The .com file type is an executable file and not a text file which you would associate with the word/file name 'message.'

[jasonsos]

DavidR:
Thank you Mate. I'm glad that deleting the 'scan log files' was OK. I have kept the latest 'deep scan' and 'quick scan' with both showing no virus. However, the 2 mentioned viruses are still in the 'chest' and when I right click to scan them; I do not get a note stating they are active. I only get a regular Windows block message that names them as 'attachment.zip--Mydoom,' and 'message.com--Mydoom' with a lot of numbers that proceed. They have been in the chest that was updated to my newest version of Avast! from 2/16/2011, and 4/29/2011 (16/2/2011 & 29/4/2011 in UK) respectively. I feel safe leaving them in the chest, as a normal Windows delete does not wipe multiple times as a DoD program does. I assume you would agree with this action, and once again: I thank you for your help and attentions in this matter.
Good vibrations to you and yours.
Jasonsos
(I have friends in London and in Cornwall. Great friends).

[DavidR]

What do you mean by active ?
Do you mean that they are no longer detected as infected ?

Is this how you are scanning them inside the chest, see image (click to expand) ?

Where are you getting this:

I only get a regular Windows block message that names them as 'attachment.zip--Mydoom,' and 'message.com--Mydoom' with a lot of numbers that proceed.

What is detecting this ?