Some files could not be scanned

Running Avast Free 6.0.1367 with today’s definitions and on my weekly scan and I just started to get an error message stating that “some files cannot be scanned”. The scan is set for “all harddrives” the internal HD (C) and an external HD (J). There are two error messages and they both say “the device is not ready (21)” and it gives some type of info about a volume which I cannot understand. Can anyone help me figure out why I am now starting to get this message? I did a Print scrn and when I post it into Word it saves it as an RTF file and attached it to the post. It will not post the print scrn. Print Scrn info:

Disk\?\Volume{f09d9f2a-ffd7-11dd-ad8f-806e6f6e6963}Boot Record Error: the device is not ready (21)
\?\Volume{f09d9f2a-ffd7-11dd-ad8f-806e6f6e6963}\ Error: the device is not ready (21)

I did a Print scrn and when I post it into Word it saves it as an RTF file and attached it to the post. It will not post the print scrn. Print Scrn info:
use MSpaint crop the picture and save it as gif...then attach

Could you download and run aswMBR please

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the “Scan” button to start scan

http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRScan.gif

On completion of the scan click save log, save it to your desktop and post in your next reply

http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR%20shots/aswMBRsavelog.gif

Ran the aswMBR and it ran for about 6 minutes then found an infected file, did a few more directories and then when it got into the User directory it just sat there and appeared to have stopped. If I clicked on Fixmbr it gave me a warning that it was going to rewrite the boot record. I responded NO and then saved the attached log file. I did not close the application however.

No do not fix the MBR

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

After about 20 minutes, aswMBR finally continued and then finished. I saved the log again and it is attached. Do you want me to run Combofix?

Yes please as I need to determine what is causing the alert as it is now apparent on several systems

Will do, do I need to disable Avast and Windows Firewall?

Just right click the orange blob and select shield control
Disable the shields for one hour

Re-enable the shield once combofix has rebooted your computer

ComboFix ran and the log is attached. While it was running a Windows popup appeared saying PEV.exe has stopped working. Gave two options Check online for a solution and then close program or Close the program. I ignored this popup and it went away when ComboFix rebooted the system. Please let me know what you find and any solution if necessary. Thanks for the help.

Could you now see if the alert has gone please

It appears that I lost the Avast icon in the system tray. Do I need to wait for the 1 hour is up that I told the shields the amount of time to be down and Avast will restart itself?

try avast repair and reboot

For a repair of avast. Windows, Add Remove programs, select ‘avast! Anti-Virus,’ click the Change/Remove button from the pop-up window, scroll down to Repair, click next and follow.

OBS…i think essexboy has logged off for today…he will be back tomorrow

Repair and reboot brought Avast back. Running the scan now and will report on the results.

The scan completed and it has the exact same alerts “some files could not be scanned” as originally posted. Anything else to try at this time?

Don’t know if this means anything, but this morning I ran a quick scan and had no alerts. Then I ran a full system scan and it still has the same errors as initially reported. Thanks.

Some files could not be scanned - means just that . It does not indicate that they are infected

I understand what you are saying. However, does that mean that aswMBR.exe gave a false positive when it ran as its log produced the following message:

16:04:54.262 File: C:\Windows\system32\svchost.exe INFECTED Win32:Downloader-LWR [Trj]

That infection shouls no longer be present

Could you re-run aswmbr to confirm please

You are correct, attached is the log from the latest running of aswMBR:

Happy Holidays to All!!!