VIRUS + AVAST log problem

Viruses and worms
1

Hi, (i’m a bit of a novice so please bear with me) …recently have experienced problems with games: Far Cry, Need For Speed 1 & 2 …the symptoms are as follows …while using the keyboard, something takes over the controls/keyboard of the game inhibiting all operating access …thought it may have been a keyboard prob, so replaced it with a new one but problem was still present …then used Avast software to do scan and the log read (from memory) that all archive files coud not been scanned as a password had been placed on them …so suspected some sort of virus / hijack takeover, scanned with numerous tools, but no virus detected …so then had c drive reformatted and installed new operating system …the games were then all working well ,that is untill we reinstalled outlook express …then the problem resurfaced, only now seem to be receiving a different LOG from Avast …please see below! …so wondering if anyone out there can shed some light on this please? …as any assistance would be hugely much appreciated ??? …Mike.

  • avast! Report
  • This file is generated automatically
  • Task ‘Simple user interface’ used
  • Started on Thursday, April 17, 2008 2:44:54 PM
  • VPS: 080416-1, 04/16/2008

C:\63ff5e876b153e333b6b6f16\BaseLine.DAT [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\DefFactory.DAT [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1025.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1028.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1029.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1030.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1031.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1032.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1035.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1036.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1037.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1038.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1040.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1041.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1042.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1043.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1044.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1045.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1046.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1049.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1053.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.1055.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.2052.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.2070.ini [E] File was skipped because of scanner settings. (42016)
C:\63ff5e876b153e333b6b6f16\locdata.3082.ini [E] File was skipped because of scanner settings. (42016)
input\mse_2.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_3.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_4.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_5.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_6.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_7.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_8.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_9.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\mse_g.ini [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f.ini [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_1.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_10.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_2.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_3.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_4.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_5.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_6.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_7.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_8.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msf1f_9.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw.ini [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_1.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_2.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_3.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_4.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_5.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_6.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_7.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\msprw_8.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\raiderpd.ini [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\SV-262e1.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\SV-262e3.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\SV-262e4.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\sv2511.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\DirectX\Dinput\sv2512.png [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\diskmgmt.msc [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\ativmc01.cod [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\eapci2m.ecw [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\Eapci4m.Ecw [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\Eapci8m.Ecw [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\hosts [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\hosts.20080416-032657.backup [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\lmhosts.sam [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\networks [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\protocol [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\etc\services [E] File was skipped because of scanner settings. (42016)
C:\WINDOWS\system32\drivers\gm.dls [E] File was skipped because of scanner settings. (42016)

2

The password protected files from yor first post would be other security programs quarantined file. Programs like spybot etc.

The log from your second post indicates files you have added to the exclution list.

3

Which folders are listed into your Exclusion list?
Program settings > Exclusion list.

4

Thanks for your replies, nice to see someone out there helping out …however would like to confirm that i have no excluded files/folders via Program settings > Exclusion list …i basically want everything to be scanned …so set sensitivity at thorough and marked all drives to be scanned except for roms/media…but still came back as skipped all files/folders …after 4 hours of scanning not one part of my pc was accessed successfully with avast …never had this problem in the past …been using Avast for 5 years now?

5

P.S. Wasn’t able to enter full Avast log due to too many characters for page …so the D & G drives/partitions also have the same skipped entries.

6

Are you using Vista? Did you allow avast with UAC?
If you have XP, are you logged as an administrator?
Strange that avast can’t reach that folders…

7

Hi …yes so we’re using xp with service pack 2 and i’m logged in as the administrator …weird eh, this is why i suspect something else going on behind the scene, like a virus type programe?

8

Are you using Windows XP/Vista?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning.
Select for scanning archives.
Boot.
If infected files are found, it’s safer to send them to Chest instead of deleting them.
This way you can further analysis them.

9

Morning …

Were using XP with service pack 2, not Vista.
here is the Boot-time scan report:

04/20/2008 11:59 AM
Scan of all local drives

Number of searched folders: 4714
Number of tested files: 73235
Number of infected files: 0

As you can see …the boot-time scan shows no problems …and the machine is quite stable other than
the virus type problems that ocur with some games and also the fact that avast keeps skipping files when performing
a normal scan via windows …one other thing with the boot-time scan report, how do we know that this operation, didn’t do
exactly the same thing as the window scan(skip)… as i see the report isn’t very definitive, so possibly could have also skipped?

10

Check here

C:\program Files\Alwil Software\avast4\data\report

for a bootscan log.

11

See above (and repeated now again below) …this is the boot-scan log from that directory ::slight_smile:

04/20/2008 11:59 AM
Scan of all local drives

Number of searched folders: 4714
Number of tested files: 73235
Number of infected files: 0

…and now all my games are affected by whatever this prob is ???

12

I didn’t know where you got the info in your first post about boottime scan results. I thought if you just got it off the screen there may be a more detailed one in the reports.

From what you posted, it would seem nothing was skipped. If there are no exclusions in the lists, I don’t know why avast would report one. ???

13

I didn’t know where you got the info in your first post about boottime scan results. I thought if you just got it off the screen there may be a more detailed one in the reports.
From what you posted, it would seem nothing was skipped. If there are no exclusions in the lists, I don’t know why avast would report one.

Oh ok, got my info from poster “TECH” …he wrote;
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning.
Select for scanning archives.
Boot.
but all my scans (except boot-time) show that ‘ALL FILES/FOLDERS’ are skipped due to some setting prob …so trying hard to ascertain why exactly this happening …thought trying the boot-time scan might at least confirm if the folders/files were still being skipped …but no info on anything?

14

Have uninstalled Avast today and then reinstalled …but now instead of every file/folder specifying
that it’s been “skipped because of scanner settings” …the log now reads on every file/folder: “Unable to scan: Installer archive is corrupted”

I mean Jesus …Whats going on …why can’t avast scan anything …driving me BONKERS! …does anyone from Avast help out on these forums?

15

I don’t think there’s anything wrong here.

In the first report, you obviously ran a “Standard scan” (opposed to Quick or Thorough). In that mode, avast! checks each file - and scans only those it finds infectable; the others are reported as “skipped”.
I’d suggest to uncheck the “Skipped files” checkbox on the Report file page of avast! settings - it doesn’t really make much sense to have a huge list of files that were skipped, because avast! found them harmless.

Regarding the last post, I’m sure avast! doesn’t report every file (let alone a folder) to be corrupted - it’s just that the default setting (after reinstallation) for the report instructs avast! to include only the “Error” items into the report file - so that’s all you can see there. The other thousands of files, scanned correctly, are not listed.

16

Hi Igor,

Excellent information …didnt know about the; “Settings in Report Files page” part of avast …but followed your directions …also tried checking “OK” box, and now my report is looking good! …this is definitely the information i required …one other thing …the symptoms (basically lose control of keyboard to ? …curser or game action moves by itself) regarding my games and now when i write something in notepad,etc …could this be a graphics card prob do you think?

thank you again for the help :slight_smile: