Error scanning files,fakealert,help

Viruses and worms
1

Hello,
First I would like to thankyou for your devotion to this endevor and taking the time to help individuals like myself,because without your assistance we would be lost or would make many unneccessary mistakes.This is my first time here and at problem resulution in this area ,so please bare with me.Anyway here goes…lol.
While surfing the net a security warning claimed I had security breech in system and to dowload software for immediate removal.Ive had pproblems with this type of thing before,so I cancelled out before it could finsh and aborted connection,then scanned with avast.
No viruses were detected but there were 5 files that errors occurred and could not be scanned ,moved ,renamed or deleted.
If I remember correctly these are the same files from a previous scan that I moved to chest,when viruses were detected.
I`m attaching corresponding images or logs.
My main question is should I be concerned ?If so,what actions should I take ?
Once again I am truly thankful to you and those here to help those of us in need.

Thankyou Lavi

C:\Program Files\Microsoft SDKs\Windows\v7.0A\Bootstrapper\Packages\SQL Server Compact Edition\EN\SSCERuntime-ENU.msi\01AdminExecuteSequence\79:@¬ÀÁea= >  ea=N [E] The file is a decompression bomb. (42110)
C:\System Volume Information_restore{62FA673F-D6B0-4F24-B9E1-E774C79B3D0A}\RP4\A0000359.msi\01AdminExecuteSequence\79:@¬ÀÁea= >  ea= [E] The file is a decompression bomb. (42110)
C:\System Volume Information_restore{62FA673F-D6B0-4F24-B9E1-E774C79B3D0A}\RP9\A0000593.msi\01AdminExecuteSequence\79:@¬ÀÁea= >  ea= [E] The file is a decompression bomb. (42110)
C:\System Volume Information_restore{62FA673F-D6B0-4F24-B9E1-E774C79B3D0A}\RP9\A0000606.msi\01AdminExecuteSequence\79:@¬ÀÁea= >  ea= [E] The file is a decompression bomb. (42110)
Infected files: 0
Total files: 580608
Total folders: 10189
Tot
*

[/img]
http://1/16/2010 8:45:52 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:45:52 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\Y02L0VBH\install[1].exe” file.
1/16/2010 8:47:52 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:47:56 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\G6EFKUQT\install[1].exe” file.
1/16/2010 8:48:16 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\MUJW3RGK\install[1].exe” file.
1/16/2010 8:48:16 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:48:20 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:48:39 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\ASAP5V31\install[1].exe” file.
1/16/2010 8:49:04 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\OAM9Q4JK\install[1].exe” file.
1/16/2010 8:49:04 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:49:16 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:49:17 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\MUJW3RGK\install[1].exe” file.
1/16/2010 8:49:24 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:49:32 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\YPUE3Z4B\install[1].exe” file.
1/16/2010 8:49:33 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:50:01 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “http://bestfirewallgui.com/downloader.php?affid=91701” file.
1/16/2010 8:50:01 AM SYSTEM 1388 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\Y02L0VBH\install[1].exe” file.
1/16/2010 9:02:21 AM larry 5480 Sign of “Win32:Walivun [Trj]” has been found in “C:\Documents and Settings\larry\Local Settings\Temporary Internet Files\Content.IE5\Y02L0VBH\install[1].exe” file.
1/18/2010 7:36:38 AM SYSTEM 1124 Sign of “JS:Pdfka-TW [Expl]” has been found in “http://google.com.analytics.egilkemecun.com/nte/TREST11.exe/oH986bd4d5V0100f080006Rb1449407102Td33fab2a201l0409K6834783a317” file.
1/19/2010 4:21:07 AM SYSTEM 1124 Sign of “JS:Pdfka-TW [Expl]” has been found in “http://google.com.analytics.sbeqpirscun.com/nte/trest11.exe/oH986bd4d5V0100f080006R11ff6ce1102Td33e7765201l0409K9c8d9195317” file.
1/19/2010 5:25:44 PM SYSTEM 1124 Sign of “Win32:FakeAlert-GH [Trj]” has been found in “C:\Documents and Settings\larry\My Documents\My Music\58488740.exe” file.
1/22/2010 9:17:29 PM SYSTEM 1148 Function setifaceUpdatePackages() has failed. Return code is 0x20000011, dwRes is 20000011.
1/23/2010 1:16:24 AM Larry Melton 2788 Sign of “Win32:FakeAlert-GH [Trj]” has been found in “C:\Documents and Settings\All Users\Application Data\59983337\59983337.exe” file.
1/23/2010 1:18:09 AM SYSTEM 1148 Function setifaceUpdatePackages() has failed. Return code is 0x20000011, dwRes is 20000011.
1/23/2010 1:27:02 AM Larry Melton 2788 Sign of “Win32:FakeAlert-GH [Trj]” has been found in “C:\System Volume Information_restore{1A97EBC6-8261-40AB-8177-38426EC3036A}\RP31\A0003172.exe” file.
1/23/2010 1:28:42 AM Larry Melton 2788 Sign of “Win32:FakeAlert-GH [Trj]” has been found in “C:\System Volume Information_restore{62FA673F-D6B0-4F24-B9E1-E774C79B3D0A}\RP6\A0000409.exe” file.
1/23/2010 1:28:57 AM Larry Melton 2788 Sign of “Win32:FakeAlert-GH [Trj]” has been found in “C:\System Volume Information_restore{62FA673F-D6B0-4F24-B9E1-E774C79B3D0A}\RP9\A0000582.exe” file.
[img]1

2

I doubt you would be able to move these to the Chest as they would also be likely to exceed the maximum file size to send, being such large files.

The name really is the most dangerous thing about this and I wish they would change it or simply not report it, a real PITA.

So there is a) no need for concern and b) no action required.

3

In addition to David’s information :

ea= [E] The file is a decompression bomb. (42110) [b]Infected files: 0[/b] Total files: 580608 Total folders: 10189

I added the bold to note that it is stated that there are no infected files.

4

Thankyou David and CharleyO,you gave me the confirmation that I was looking for,sometimes I like to check myself so I dont wreck myself.Y ou like avatars?I`m an artist and I do personalized avatars and tournament pages ,web ,ect.Avatars are free come browse my website if like…http://laviathons.webs.com…
thanks Lavi :slight_smile:

5

You’re welcome.

6

Glad to have helped. :slight_smile: