WindowsXP Home Edition, SP 3
Avast Free AV 7.0.1474
Hello. I’ve looked around for over an hour and can find nothing that answers my question…so forgive me if this has been addressed before.
My quick scan results always include a list of “system volume information” items that could not be scanned: “Error: Archive is password protected. (42056).” Full scan results often list other items also that could not be scanned because they are PW-protected. I understand that the action is normal, and the unscanned files do not mean there is a problem, but the comment that I keep running across, “files that can not be scanned are just that, no more no less,” tells me little.
I found one thread, in which a member advised another, that reporting of such errors can be disabled. I think I will do that, but first, I’d like to know… If Avast cannot scan an item because it is PW-protected, would it be logical to expect that those same PW-protected items are safe from any possible infection from viruses, thereby eliminating the need to see such scan results reported?
Thanks for the link - I did not think to google for this issue - I came here looking around thinking I would find something. However, it appears to me the discussion on that forum is mostly about whether encrypted files can be infected.
I’m not a computer expert (I know just enough to get into deep $#!+ sometimes), so are you indicating by directing me to that off-site discussion that a password-protected file and an encrypted file are basically the same, thus the password-protected file is just as vulnerable to infection as one that is not? And if that is the case, then it would be advisable to continue to allow such scan results to be reported in case a password-protected file does come up infected?
well avast cant tell if it is infected or not since it does not know the password it can not unpack and scan
so i would imagine that a virus will have the same problem…unless it is able to crack the password?
and a archive file is not dangerous until unpacked and the content is run…and when that happens avast realtime monitoring will scan it
many antivirus programs does not display scan errors in the log, or you need to activate advanced logging
Password protection on documents prevents antivirus software’s from using conventional methods of accessing archives in order to scan executable’s and disinfect any threats.
In order to let avast scan your files and archives, please disable the password-protection,
But the situation is not that dramatic as given above, because there is always a form of heuristic scanning to detect unknown macro viruses available.
AV test may report warning - potentially dangerous object for some files, which may be infected or pose a potentional threat. Typical examples of objects that are detected include hidden files, cookies, suspicious registry keys, and password-protected documents or archives. Then you may disable the password protection and start to really scan of course…
We have the same problem, and all of the files on our system are in C:\System Volume Information. The unanswered question is, can these files be infected? I have never had an antivirus tell me that it cannot scan such files before. Are they dangerous or not?
Password protected files could well be infected at source prior to password protection.
However, for the most part password protected file would have to be run before they are a risk - presumably the program/function that password protected them would have to supply the password to run/restore them - at that point it would no longer be protected and could be scanned and detected if infected.
Those password protected files are also likely to be archive files, which for the most part are inert; they would need to be unpacked (which would require the password) and then run, etc. Again at that point the file/s would be scanned.