MOVE TO CHEST: ERROR: this type of oper. is not avail for this type of archive

[PoliticalFreedom]

Hi,

I just installed and ran a full system scan.  I received many 'high' threats, and attempted to 'move to chest'.   Instead, one or two were moved to chest, but for the rest (100+) would not.   

See the following examples:

Many of the scan result had the STATUS comment of Error:  archive is password protected (42056) with SEVERITY = blank:     [I was prevented from moving these particular items to the chest.]

      most are file such as

c:\Documents and Settings\Sandi XXXXX\Local Settings\Temp\install_reader10_en_air_mssd_aih.exe|>launguage-it.xml
c:\recycler\s-1-5-21-861567501-1482476501-725345543-1004\Dc2718\Rescue\PC Tuneup 2011\111201230211000.rsc/>...\actiongccheck.js

The following show SEVERITY = HIGH, status = multiple threats.   Many were of the same file "Rescue\PC Tuneup"

c:\recycler\s-1-5-21-861567501-1482476501-725345543-1004\Dc2718\Rescue\PC Tuneup 2011\111201230211000.rsc/>111201230211000-004555.file|>...|>siv.exe

The multiple threats included: 

Threat: Win32:Malware-gen
Threat: Win32Boonanan[Trj]
Threat:  MSIL:Boonana [Trj]
Threat:  Java:Boonana-A [Trj]
Threat: MacOS:Boonana-A [Trj]
Threat: Other:Malware-gen
Threat: INF:AutoRun-BI[Wrm]


For these threats, when I tried to moved to chest, I received the following errors:

ERROR: Internal program error (42003)
ERROR: This operation is not supported for this type of archive.  (42111)
ERROR: ZIP Archive is corrupted. (42125)

Can you tell me how to remove these threats or why Avast didn't move them and how i can fix it? 
I would have attached a file, but I couldn't find it.

Also, I did run Malwarebyte's AntiMalware and no threats were found.

[PoliticalFreedom]

Bump

[DavidR]

The problem is that avast can't extract the infected/suspect file from within an archive file as it may corrupt the archive (making it worthless). In fact it is within several levels of archives.

I presume it is for the ones in this location c:\recycler\s-1-5-21-861567501-1482476501-725345543-1004\Dc2718\Rescue\PC Tuneup 2011\, which to me is certainly suspect as this is the recycle bin, so why would it be there is strange.

Did you previously have this PC Tuneup 2011 and end up deleting it ?
So the first thing I would do is ensure that the recycle bin is empty.

[Pondus]

Many of the scan result had the STATUS comment of Error:  archive is password protected (42056) with SEVERITY = blank:     [I was prevented from moving these particular items to the chest.]

bc it is not malware, files detected are given a malware name
avast is just reporting a scan error and the reason why
files that can not be scanned are just that, no more no less...does not mean they are infected

[PoliticalFreedom]

Hi DavidR,

I googled pc tuneup 2011.   it was part of AVG free... I wonder if 'rescue' files were like the 'chest' files of avast.
I emptied the recycle bin.  Am I protected from these files... in the event they had viruses?

What about the files in the "temp" file?  Should I find each one and delete it for fear of threat?

thanks so very much for your help.  I am feeling more confident that my laptop is protected.   

Sandi

[DavidR]

Well sometimes what you see in the desktop the recycle bin may differ from the c:\recycler\s-1-5-21-861567501-1482476501-725345543-1004\ that can be a user based recycler and in this case could possibly be a quarantine (though not very effective if that is the case as the files are accessible {unencrypted} to avast's scan).

Check and see if there is an entry for PC Tuneup 2011 in add remove programs and uninstall it.

Ensure you have completely removed AVG - Uninstall possible remnants of previously installed AVs see, http://singularlabs.com/uninstallers/security-software/, this has a collection of manufactures removal tools, so that should remove any remnants, registry, etc.