ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
"Permission denied" on MANY fliles and folders
faster


Joined: 03 Mar 2012
Posts: 13
Reply with quote
I use W7. I have always liked Clamwin, but not having any way to fix what it finds has been a problem for me. To fix anything, I have to do it manually, which can take a lot of time.

The main problem, though, is that a VERY large number of files and folders cannot be scanned: "permission denied."

I am the ONLY user of my PC, so I'm the administrator. How can Clamwin deny permissions to me?

I stopped using Clamwin, but have recently reinstalled it, hoping that problem would be gone. It wasn't.

Your scanner is the best I've found anywhere. My last scan found 54 nasties on my system. No other scanner finds anything but PUPs.

With all these infections, there are very likely more in the files and folders which are unscannable.

HOW can I get rid of the "permission denied" thing?

And are you planning ways to deal with malware, like a Quarantine and a repair option?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4226
Location: USA
Reply with quote
I would not worry too much about the permissions denied. I have not seen any malware involved with this. If you installed ClamWin by selecting run as an administrator (from the Windows Explorer right click menu), that is all you can do. Those programs are either running during the scan or locked by then system.

ClamWin tends to get more false detections (false positives) than other AV programs.

You should not have to manually take care of a detection by ClamWin. Set the infected file option to Quarantine--do not use remove or Report.

ClamWin will probably never be able to repair an infection. It is dependent upon the Clam AV scan engine.

You can restore falsely detected files by running the QRecover program found in the ClamWin programs\bin folder.

Because ClamWin is an "on demand" scanner, it does not scan in real-time as files are placed or executed on your computer. It should only be used as a backup scanner to a real-time AV, such as Windows Defender (Security Essentials for operating systems before Windows 8). There are also other good free or commercial scanners.

Thanks for using ClamWin!
View user's profileSend private message
Re: "Permission denied" on MANY fliles and folders
voidxor


Joined: 01 Jan 2009
Posts: 21
Location: Lawrence, Kansas
Reply with quote
faster wrote:
The main problem, though, is that a VERY large number of files and folders cannot be scanned: "permission denied."


I agree, and the problem is getting worse with each new release of Windows. Scan the C: drive of your average Windows 10 machine and you'll get a hundred such messages. In fact, the scan log would show more, but I suspect it hits an internal limit on how many are displayed (I know this because each time I add these in-use files to my exceptions list, the litany of "permission denied" messages just moves farther down the alphabet, like towards C:\Windows\WinSxS). Here's a snippet:

Code:
WARNING: Can't open file \\?\C:\hiberfil.sys: Permission denied
WARNING: Can't open file \\?\C:\pagefile.sys: Permission denied
WARNING: Can't open file \\?\C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6ea6cf086ad01241bcce55edf80167b9_4cf541fb-7b7d-427f-834b-257f5dde4578: Permission denied
WARNING: Can't open file \\?\C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\73f915b016b57164cb3d5c796790390d_4cf541fb-7b7d-427f-834b-257f5dde4578: Permission denied
WARNING: Can't open file \\?\C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log_backup1: Permission denied
WARNING: Can't open file \\?\C:\swapfile.sys: Permission denied
WARNING: Can't open file \\?\C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\6ea6cf086ad01241bcce55edf80167b9_4cf541fb-7b7d-427f-834b-257f5dde4578: Permission denied
WARNING: Can't open file \\?\C:\Users\All Users\Microsoft\Crypto\RSA\MachineKeys\73f915b016b57164cb3d5c796790390d_4cf541fb-7b7d-427f-834b-257f5dde4578: Permission denied
WARNING: Can't open file \\?\C:\Users\All Users\NVIDIA\NVDisplay.ContainerLocalSystem.log_backup1: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Comms\UnistoreDB\store.jfm: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Comms\UnistoreDB\store.vol: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Comms\UnistoreDB\tmp.edb: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Comms\UnistoreDB\USS.jtx: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Comms\UnistoreDB\USStmp.jtx: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache\data_0: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache\data_1: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache\data_2: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache\data_3: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache\index: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Cache\index: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Current Session: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Current Tabs: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_0: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_2: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_3: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\GPUCache\index: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_0: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_1: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_2: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Media Cache\data_3: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\Default\Media Cache\index: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_0: Permission denied
WARNING: Can't open file \\?\C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Dropbox\Dropbox.exe.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_3: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\index: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.25BBD71D-54FF-11E7-BAE3-484520D6AE4C.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\25BBD71F-54FF-11E7-BAE3-484520D6AE4C.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\25BBD724-54FF-11E7-BAE3-484520D6AE4C.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\3038FC8F-54FF-11E7-BAE3-484520D6AE4C.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\8E43093E-5509-11E7-BAE3-484520D6AE4C.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\metastore\edb.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\metastore\edbtmp.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\edb.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\edbtmp.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\UsrClass.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\WebCache\V01.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Office.OneNote_8wekyb3d8bbwe\Settings\settings.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.WindowsCalculator_8wekyb3d8bbwe\Settings\settings.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\EntClientDb.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\EntClientDb.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\tmp.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe\Settings\settings.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\EntClientDb.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\EntClientDb.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\LocalState\Database\498c1700c56c2236\tmp.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe\Settings\settings.dat.LOG2: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_AjdGaUVQbA84hSV: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_cYHeFDa2ZDuyeRb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_IEuX7accOKMJnSI: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_ocSsWUezNoBOYAH: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_PBYGuAAS0xiolWz: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_Q63dIeo1B8mWoxG: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\etilqs_u0jefxMGZcc3n07: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\hsperfdata_johndoe\592: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\~DF8B83330C2AE11FD8.TMP: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\~DFD4D5529FF8B38A0E.TMP: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\~DFF0E1902E1FA10C72.TMP: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\Temp\Low\JavaDeployReg.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\TileDataLayer\Database\EDB.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\TileDataLayer\Database\EDBtmp.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\TileDataLayer\Database\vedatamodel.edb: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Local\TileDataLayer\Database\vedatamodel.jfm: Permission denied
WARNING: Can't open file C:\Users\johndoe\AppData\Roaming\Adobe\CoreSync\GUDE\gude-2017-06-19.log: Permission denied
WARNING: Can't open file C:\Users\johndoe\NTUSER.DAT: Permission denied
WARNING: Can't open file C:\Users\johndoe\ntuser.dat.LOG1: Permission denied
WARNING: Can't open file C:\Users\johndoe\ntuser.dat.LOG2: Permission denied
WARNING: Can't open file C:\Windows\diagerr.xml: Permission denied
WARNING: Can't open file C:\Windows\diagwrn.xml: Permission denied
WARNING: Can't open file C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config: Permission denied
WARNING: Can't open file C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe.config: Permission denied
WARNING: Can't open file C:\Windows\Panther\UnattendGC\diagerr.xml: Permission denied
WARNING: Can't open file C:\Windows\Panther\UnattendGC\diagwrn.xml: Permission denied
WARNING: Can't open file C:\Windows\PLA\System\System Diagnostics.xml: Permission denied
WARNING: Can't open file C:\Windows\PLA\System\System Performance.xml: Permission denied
WARNING: Can't open file C:\Windows\security\database\secedit.sdb: Permission denied
WARNING: Can't open file C:\Windows\SoftwareDistribution\DataStore\DataStore.edb: Permission denied
WARNING: Can't open file C:\Windows\SoftwareDistribution\DataStore\DataStore.jfm: Permission denied
WARNING: Can't open file C:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat.LOG1: Permission denied
WARNING: Can't open file C:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{ec770641-22ae-11e7-ba95-484520d6ae4c}.TM.blf: Permission denied
WARNING: Can't open file C:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{ec770641-22ae-11e7-ba95-484520d6ae4c}.TMContainer00000000000000000001.regtrans-ms: Permission denied
WARNING: Can't open file C:\Windows\System32\Microsoft\Protect\Recovery\Recovery.dat{ec770641-22ae-11e7-ba95-484520d6ae4c}.TMContainer00000000000000000002.regtrans-ms: Permission denied
WARNING: Can't open file C:\Windows\System32\restore\MachineGuid.txt: Permission denied
WARNING: Can't open file C:\Windows\System32\Sysprep\Panther\IE\diagerr.xml: Permission denied
WARNING: Can't open file C:\Windows\System32\Sysprep\Panther\IE\diagwrn.xml: Permission denied
WARNING: Can't open file C:\Windows\System32\Sysprep\Panther\IE\setupact.log: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\15CB6E2BC4C7288B6A26F06F2EA3EBAA.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\21BD8E9B6A3575C7E6CFD05471F4DE86.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\3A01647A9113490045B9D4AE10390941.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\5DB779D375458B0C6A4B80A5D8B0F07B.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\65C95633233A81A21D5557E0804A562A.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\79A1347BEE2DDBA266DAC7663C7EC688.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\885A56BB8B1696DBC099A29D28BB3D1D.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\9E721AD57D012C71CF681490F452F678.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\B00FB74CA11300E102C8BD294F6829E0.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\C9824ADC136E4798F4F76A6D48117DA8.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\F8B5EEAA63CB208A0E9ADBD73A3443CC.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\wbem\AutoRecover\FFA7CB08C2CC2CB2D3973F6214D0CCAF.mof: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\AirSpaceChannel.etl: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Application.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\GoProDesktopApp.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\HardwareEvents.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Internet Explorer.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Key Management Service.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AAD%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Inventory.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Steps-Recorder.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4CaptureMonitor.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Biometrics%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-BitLocker%4BitLocker Management.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-CertificateServicesClient-Lifecycle-User%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcnfs%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scheduled%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-Scripted%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Fault-Tolerant-Heap%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-FileHistory-Core%4WHC.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Control Panel%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-HomeGroup Provider Service%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-HotspotAuth%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-IKE%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Errors.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-NcdAutoSetup%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkLocationWizard%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-NlaSvc%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PackageStateRoaming%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Regsvr32%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-ConnectedAccountState%4ActionCenter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4ActionCenter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4LogonTasksChannel.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmartCard-DeviceEnum%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBClient%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Audit.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Connectivity.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Security.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Restricted.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-ClassPnP%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-StorageSpaces-ManagementAgent%4WHC.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-TZSync%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4ActionCenter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-VPN%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Win32k%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Defender%4WHC.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsBackup%4ActionCenter.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsSystemAssessmentTool%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WorkFolders%4WHC.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-Windows-WPD-MTPClassDriver%4Operational.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\OAlerts.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Security.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Setup.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\System.evtx: Permission denied
WARNING: Can't open file C:\Windows\System32\winevt\Logs\Windows PowerShell.evtx: Permission denied
WARNING: Can't open file C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job: Permission denied
WARNING: Can't open file C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job: Permission denied
WARNING: Can't open file C:\Windows\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_10.0.14393.0_none_fea2fc274cb25bba\dnary.xsd: Permission denied
WARNING: Can't open file C:\Windows\WinSxS\amd64_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_10.0.15063.0_none_e24269e56ece70bb\dnary.xsd: Permission denied


You have to do a lot of scrolling to find any positive files. It's high time an option was added to suppress such messages!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4226
Location: USA
Reply with quote
Yes there should be an option. I would go even further to suggest that it be included in the scan code and suppressed so the user will not see anything. These messages may alarm some users. In the meantime, I suggest that you just exclude any folders where this is too much to bear.

Unfortunately, I think this comes from the scan code itself, and the ClamWin developers are reluctant to change any of it. It would have to be re-done with each new verson of Clam AV ported over to ClamWin.

Re Windows 10: you don't really need ClamWin. Windows Defender provides better protection.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
voidxor


Joined: 01 Jan 2009
Posts: 21
Location: Lawrence, Kansas
Reply with quote
GuitarBob wrote:
In the meantime, I suggest that you just exclude any folders where this is too much to bear.

Sorry, I said "exceptions list" but meant "exclusions list". So yes, I'm already adding these files and folders to my exclusions list. But even with liberal use of wildcards ("?" and "*"), it still makes my exclusion list really long, which probably slows scans.

GuitarBob wrote:
Re Windows 10: you don't really need ClamWin. Windows Defender provides better protection.

I'm sorry to hear that ClamWin is falling so far behind the competition that it's hardly worth the effort anymore. Ten years ago we had high hopes for this open-source project. Now, bugs are allowed to persist indefinitely, updates are rarely released, we haven't even hit version 1.0 yet, and people involved with the project are losing faith in it. Furthermore, the ClamWin forums don't have nearly the traffic they used to.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4226
Location: USA
Reply with quote
Yes, a good antivirus effort needs people and resources, and ClamWin has never had much of either. The field is even getting harder for lots of commercial AVs, who might not be around if a few really good AVs (like Bit Defender) did not license their scan engines and virus signatures to them.

I think there is a chance that Clam AV (with Cisco's resources) will stay in the game, and ClamWin might benefit. Clam AV has been improved under the hood (note that it can now use Yara signatures, and so can ClamWin), but Cisco does not want Clam AV to compete with its commercial security products. What ClamWin needs is to fork off of the Clam AV email scan code port and develop some proprietary code for its use on Windows machines like real-time scanning, non-signature heuristics, and malicious web site protection. Let's see what happens by the time Clam AV 1.0 comes around.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
"Permission denied" on MANY fliles and folders
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic