Przyczyny 8 "warnings" w avira 2012 -wcześniej tego nie było

Dla specjalistów Bezpieczeństwo
#1

Witam,

zrobiłem dzisiaj skan avirą i pokazało mi te ostrzeżenia, natomiast zero wirusów. Podaję log:

Avira Free Antivirus

Report file date: 9 maja 2012 21:16


Scanning for 3767777 virus strains and unwanted programs.


The program is running as an unrestricted full version.

Online services are available.


Licensee : Avira AntiVir Personal - Free Antivirus

Serial number : 0000149996-ADJIE-0000001

Platform : Microsoft Windows XP

Windows version : (Dodatek Service Pack 3) [5.1.2600]

Boot mode : Normally booted

Username : SYSTEM

Computer name : MIETEK-PC


Version information:

BUILD.DAT : 12.0.0.1125 41829 Bytes 2012-05-02 17:40:00

AVSCAN.EXE : 12.3.0.15 466896 Bytes 2012-05-08 19:55:52

AVSCAN.DLL : 12.3.0.15 54736 Bytes 2012-05-08 19:55:52

LUKE.DLL : 12.3.0.15 68304 Bytes 2012-05-08 19:55:53

AVSCPLR.DLL : 12.3.0.14 97032 Bytes 2012-05-08 19:55:53

AVREG.DLL : 12.3.0.15 230152 Bytes 2012-05-08 19:55:53

VBASE000.VDF : 7.10.0.0 19875328 Bytes 2009-11-06 19:18:34

VBASE001.VDF : 7.11.0.0 13342208 Bytes 2010-12-14 10:07:39

VBASE002.VDF : 7.11.19.170 14374912 Bytes 2011-12-20 15:34:10

VBASE003.VDF : 7.11.21.238 4472832 Bytes 2012-02-01 15:35:07

VBASE004.VDF : 7.11.26.44 4329472 Bytes 2012-03-28 14:50:33

VBASE005.VDF : 7.11.26.45 2048 Bytes 2012-03-28 14:50:34

VBASE006.VDF : 7.11.26.46 2048 Bytes 2012-03-28 14:50:34

VBASE007.VDF : 7.11.26.47 2048 Bytes 2012-03-28 14:50:35

VBASE008.VDF : 7.11.26.48 2048 Bytes 2012-03-28 14:50:35

VBASE009.VDF : 7.11.26.49 2048 Bytes 2012-03-28 14:50:35

VBASE010.VDF : 7.11.26.50 2048 Bytes 2012-03-28 14:50:35

VBASE011.VDF : 7.11.26.51 2048 Bytes 2012-03-28 14:50:35

VBASE012.VDF : 7.11.26.52 2048 Bytes 2012-03-28 14:50:35

VBASE013.VDF : 7.11.26.53 2048 Bytes 2012-03-28 14:50:35

VBASE014.VDF : 7.11.26.107 221696 Bytes 2012-03-30 14:48:46

VBASE015.VDF : 7.11.26.179 224768 Bytes 2012-04-02 14:46:01

VBASE016.VDF : 7.11.26.241 142336 Bytes 2012-04-04 14:54:07

VBASE017.VDF : 7.11.27.41 247808 Bytes 2012-04-08 14:45:19

VBASE018.VDF : 7.11.27.107 161280 Bytes 2012-04-12 14:53:02

VBASE019.VDF : 7.11.27.159 148992 Bytes 2012-04-13 14:45:24

VBASE020.VDF : 7.11.27.201 207360 Bytes 2012-04-17 11:42:23

VBASE021.VDF : 7.11.28.3 237568 Bytes 2012-04-19 14:47:40

VBASE022.VDF : 7.11.28.49 193536 Bytes 2012-04-20 14:45:22

VBASE023.VDF : 7.11.28.99 195072 Bytes 2012-04-23 16:25:39

VBASE024.VDF : 7.11.28.133 247808 Bytes 2012-04-24 16:25:40

VBASE025.VDF : 7.11.28.183 186880 Bytes 2012-04-26 16:25:37

VBASE026.VDF : 7.11.28.235 166400 Bytes 2012-04-30 16:25:36

VBASE027.VDF : 7.11.29.37 290816 Bytes 2012-05-03 16:26:25

VBASE028.VDF : 7.11.29.75 168448 Bytes 2012-05-07 16:25:37

VBASE029.VDF : 7.11.29.76 2048 Bytes 2012-05-07 16:25:37

VBASE030.VDF : 7.11.29.77 2048 Bytes 2012-05-07 16:25:37

VBASE031.VDF : 7.11.29.132 202752 Bytes 2012-05-09 16:54:54

Engine version : 8.2.10.62 

AEVDF.DLL : 8.1.2.2 106868 Bytes 2012-02-14 15:36:37

AESCRIPT.DLL : 8.1.4.18 455034 Bytes 2012-04-27 16:27:39

AESCN.DLL : 8.1.8.2 131444 Bytes 2012-02-14 15:36:33

AESBX.DLL : 8.2.5.5 606579 Bytes 2012-03-12 15:33:59

AERDL.DLL : 8.1.9.15 639348 Bytes 2011-09-08 22:16:06

AEPACK.DLL : 8.2.16.12 807287 Bytes 2012-05-04 16:28:18

AEOFFICE.DLL : 8.1.2.28 201082 Bytes 2012-04-27 16:27:36

AEHEUR.DLL : 8.1.4.23 4702582 Bytes 2012-05-04 16:27:55

AEHELP.DLL : 8.1.20.0 254326 Bytes 2012-04-27 16:26:15

AEGEN.DLL : 8.1.5.28 422260 Bytes 2012-04-27 16:26:11

AEEXP.DLL : 8.1.0.35 82291 Bytes 2012-05-04 16:28:20

AEEMU.DLL : 8.1.3.0 393589 Bytes 2011-09-01 22:46:01

AECORE.DLL : 8.1.25.6 201078 Bytes 2012-03-15 15:30:43

AEBB.DLL : 8.1.1.0 53618 Bytes 2011-09-01 22:46:01

AVWINLL.DLL : 12.3.0.15 27344 Bytes 2012-05-08 19:55:52

AVPREF.DLL : 12.3.0.15 51920 Bytes 2012-05-08 19:55:52

AVREP.DLL : 12.3.0.15 179208 Bytes 2012-05-08 19:55:53

AVARKT.DLL : 12.3.0.15 211408 Bytes 2012-05-08 19:55:52

AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 2012-05-08 19:55:52

SQLITE3.DLL : 3.7.0.1 398288 Bytes 2012-05-08 19:55:53

AVSMTP.DLL : 12.3.0.15 63440 Bytes 2012-05-08 19:55:52

NETNT.DLL : 12.3.0.15 17104 Bytes 2012-05-08 19:55:53

RCIMAGE.DLL : 12.3.0.15 4450000 Bytes 2012-05-08 19:55:52

RCTEXT.DLL : 12.3.0.15 96720 Bytes 2012-05-08 19:55:52


Configuration settings for the scan:

Jobname.............................: Complete system scan

Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp

Logging.............................: default

Primary action......................: Interactive

Secondary action....................: Ignore

Scan master boot sector.............: on

Scan boot sector....................: on

Boot sectors........................: C:, D:, E:, 

Process scan........................: on

Extended process scan...............: on

Scan registry.......................: on

Search for rootkits.................: on

Integrity checking of system files..: off

Scan all files......................: All files

Scan archives.......................: on

Recursion depth.....................: 20

Smart extensions....................: on

Macro heuristic.....................: on

File heuristic......................: extended


Start of the scan: 9 maja 2012 21:16


Starting master boot sector scan:

Master boot sector HD0

    [INFO] No virus was found!


Start scanning boot sectors:

Boot sector 'C:\'

    [INFO] No virus was found!

Boot sector 'D:\'

    [INFO] No virus was found!

Boot sector 'E:\'

    [INFO] No virus was found!


Starting search for hidden objects.


The scan of running processes will be started

Scan process 'avscan.exe' - '63' Module(s) have been scanned

Scan process 'WielkiSlownik.exe' - '45' Module(s) have been scanned

Scan process 'AcroRd32.exe' - '47' Module(s) have been scanned

Scan process 'AcroRd32.exe' - '45' Module(s) have been scanned

Scan process 'alg.exe' - '34' Module(s) have been scanned

Scan process 'wscntfy.exe' - '15' Module(s) have been scanned

Scan process 'AVWEBGRD.EXE' - '41' Module(s) have been scanned

Scan process 'avshadow.exe' - '24' Module(s) have been scanned

Scan process 'avgnt.exe' - '60' Module(s) have been scanned

Scan process 'Explorer.EXE' - '102' Module(s) have been scanned

Scan process 'svchost.exe' - '38' Module(s) have been scanned

Scan process 'avguard.exe' - '61' Module(s) have been scanned

Scan process 'sched.exe' - '38' Module(s) have been scanned

Scan process 'spoolsv.exe' - '51' Module(s) have been scanned

Scan process 'Ati2evxx.exe' - '34' Module(s) have been scanned

Scan process 'svchost.exe' - '42' Module(s) have been scanned

Scan process 'svchost.exe' - '32' Module(s) have been scanned

Scan process 'svchost.exe' - '146' Module(s) have been scanned

Scan process 'Ati2evxx.exe' - '30' Module(s) have been scanned

Scan process 'svchost.exe' - '38' Module(s) have been scanned

Scan process 'svchost.exe' - '48' Module(s) have been scanned

Scan process 'lsass.exe' - '58' Module(s) have been scanned

Scan process 'services.exe' - '26' Module(s) have been scanned

Scan process 'winlogon.exe' - '69' Module(s) have been scanned

Scan process 'csrss.exe' - '12' Module(s) have been scanned

Scan process 'smss.exe' - '2' Module(s) have been scanned


Starting to scan executable files (registry).

C:\Program Files\Winamp\UninstWA.exe

  [WARNING] Unsupported archive version

The registry was scanned ( '1537' files ).



Starting the file scan:


Begin scan in 'C:\'

C:\Program Files\Techland\WS\Wav\EngWav.db

  [WARNING] The file is password protected

C:\Program Files\Winamp\UninstWA.exe

  [WARNING] Unsupported archive version

C:\Program Files\WinRAR\rarnew.dat

  [WARNING] Error no files to extract

C:\System Volume Information\_restore{3AB29B29-7004-4DD1-A5AD-3AE44DBD6770}\RP50\A0018896.exe

  [WARNING] No further files can be extracted from this archive. The archive will be closed

Begin scan in 'D:\'

D:\System Volume Information\_restore{429B9DBC-E26D-4FB8-9B8F-ADAB634A4D59}\RP9\A0000784.exe

  [WARNING] Unsupported archive version

D:\warchest(ważne dokumenty)\Winamp295_full.exe

  [WARNING] Unsupported archive version

D:\warchest(ważne dokumenty)\uy\avira_free_antivirus_en.exe

  [WARNING] The file is password protected

Begin scan in 'E:\'



End of the scan: 9 maja 2012 21:42

Used time: 26:38 Minute(s)


The scan has been done completely.


   5752 Scanned directories

 205083 Files were scanned

      0 Viruses and/or unwanted programs were found

      0 Files were classified as suspicious

      0 Files were deleted

      0 Viruses and unwanted programs were repaired

      0 Files were moved to quarantine

      0 Files were renamed

      0 Files cannot be scanned

 205083 Files not concerned

   2177 Archives were scanned

      8 Warnings

      0 Notes

 272920 Objects were scanned with rootkit scan

      0 Hidden objects were found
#2

Avira nie wykryła nic szkodliwego.

Ostrzeżenie nie oznacza, że plik jest szkodliwy.

Wyłącz i ponownie włącz przywracanie systemu:

http://support.microsoft.com/kb/310405/pl

#3

Przywrócić system? Dlaczego? Gdzie w logu jest o tym mowa? Co oznacza warn z D:

?

#4

nieznany7, nie masz przywracać systemu tylko wyłączyć i włączyć przywracanie systemu. Instrukcja http://support.microsoft.com/kb/310405/pl

#5

Nigdy nie napisałem żeby przywrócić system.

Napisałem żeby na chwilę wyłączyć przywracanie systemu

Wyłączenie przywracania usunie wszystko z System Volume Information.

#6

Najpierw niech ktoś mi powie dlaczego i który wpis w avirze o tym mówi.

#7

To jest wpis z Aviry dotyczący przywracania systemu

D:\System Volume Information\_restore{429B9DBC-E26D-4FB8-9B8F-ADAB634A4D59}\RP9\A0000784.exe
#8

Dziękuję. A jeśli usunę punkty przywracania, to pomoże?

#9

nieznany7, wyłączenie przywracania systemu usunie punkty przywracania.

#10

Wirusów, jak widać na logu, nie ma:)

A jeśli usunę punkty przywracania, to pomoże?

http://wklej.org/id/749335/

#11

A te warningi

Begin scan in 'C:\'
C:\Program Files\Techland\WS\Wav\EngWav.db
[WARNING] The file is password protected
C:\Program Files\Winamp\UninstWA.exe
[WARNING] Unsupported archive version
C:\Program Files\WinRAR\rarnew.dat
[WARNING] Error no files to extract
C:\System Volume Information\_restore{3AB29B29-7004-4DD1-A5AD-3AE44DBD6770}\RP50\A0018896.exe
[WARNING] No further files can be extracted from this archive. The archive will be closed
Begin scan in 'D:\'
D:\System Volume Information\_restore{429B9DBC-E26D-4FB8-9B8F-ADAB634A4D59}\RP9\A0000784.exe
[WARNING] Unsupported archive version
D:\warchest(ważne dokumenty)\Winamp295_full.exe
[WARNING] Unsupported archive version
D:\warchest(ważne dokumenty)\uy\avira_free_antivirus_en.exe
[WARNING] The file is password protected
Begin scan in 'E:\'

 

dotyczą tego że archiwa które Avira przeskanowała są chronione hasłem albo nie są rozpoznawane przez Avire jako spakowane pliki (np. plik DAT Avira zobaczyła jako paczkę a ten plik paczką nie jest).

#12

Żaden z nich nie jest chroniony hasłem. Ciekawe, czemu pokazuje brak plików do rozpakowania jako warning?

Odpowie ktoś czy usunąć pkty przywracania?

#13

nieznany7, punkty przywracania możesz usunąć.

#14

Wszystkie czy tylko utworzone ręcznie?

Tylko żeby mi coś się nie zepsuło.

Pełny skan drWeb też nic nie wykrył.

#15

nieznany7 , zgodnie z regulaminem, który zaakceptowałeś podczas rejestracji, proszę dokonać zmiany tytułu na taki, który wstępnie opisze problem, w przeciwnym razie temat wyląduje w koszu.