Hi, I’ve been having problems with avast & SO7 lately. It picks up a virus only when trying to launch some part of Star Office, like viewing a document etc. The program came pre-instaled on my system. I can not quarantine anything & manual scanning shows no viruses. Here are some pics
2
Well it appears to be finding something it doesn’t like in the unnamedStream_1, I don’t know if this is an NTFS data stream in parallel with the sb645mi.dll file. You could try to exclude, *645mi.dll and see if that also excludes ntfs data streams (assuming that is what the problem is) ?
Igor or Pavel, is there a way we could test this? :-
BTW, thanks DavidR.
Hopefully someone from the Alwil team will pick up on this it is most strange.
I take it that the exclusion didn’t work ?
Can you move the file to Chest (only the stream content should be moved, I hope) and submit it?
No. See my last pic above…
PS: I have to go out, I’ll be back in an hour…
What if you switch avast! to Greek - so that the error window title is displayed correctly; what does it say?
I’m running the English version ;D
I can see that - but the message in the window title is obviously corrupted, i.e. it’s probably a Greek message from the operating system. I’d like to know what it says…
Ok Igor, I’ll see what I can do to give you more info about that message. In the meantime, this is what I found in the log viewer. Another location for that “UnnamedStream_1” ?
I just installed the Greek version.
The message says (something like): “The system can not find the specified file”
Igor?
Seems like to NTFS Streams unpacker in avast! supports the actions only on the properly named ones. :-\
Oh well… I’ll build a special tool and send it to you; it will extract the stream exactly as avast! does - so that we can see what is being detected there.
Thank you Igor.