I just tried to scan with ClamWin Free Antivirus. I got numerous messages like:
WARNING: Can't open file \\?\C:\Program Files\HP Connections\6811507\Users\Default\Data\D0000000.FCS, Permission denied

The help file says this is normal:
ERROR: Can't open file C:\WINDOWS\system32\..
This is normal, the files mentioned are locked by OS. nothing to worry about


Isn't this a problem ? It seems like system files or protected files would be where
a virus writer would hide virus files. I am running Windows Visa Home Premium.

Thanks.

M

Your heading says "AVG can't open file," but it looks like you're really talking about ClamWin. As you said, an antivirus can't open files that are in use or that are locked by the system at scan time. The locked/unopenable files will usually be the same ones each scan. If you happen to see a new one listed, and you can't recall what it does, you might look into it (Google it). Generally those locked files should be system files--primarily in C:\windows\whatever. If yo see a locked file that is not a system file, look into it.

Viruses/malware can hide anywhere. Lately, the trend is not to do anything so crude as to lock a file, however. The trend now is for the virus to make the antivirus "brain dead" by using the Windows Registry to prevent it from running but still give the appearance of operating. Some of them will prevent updates.

This is a good reason to ocasionally check with another antivirus--they should generally both find the same locked/unopenable files. Just make sure only one of them is set up to scan resident/real-time. ClamWin is not yet a resident scanner, so you are okay there.

If you think there is a problem, you might try booting into Windows Safe mode and running a scan. Safe Mode loads only basic system files, so it is sometimes easier to spot any viruses/malware by booting into it and doing a scan. Some antiviruses don't work as well in safe mode, however, as they depend upon "hoods," etc. Last time I tried AVG in safe mode, it didn't seem quite as effective, but ClamWin works fine--although maybe a little slower there.

Hope this helps!

Regards,

it seems a data file of the hp software try closing/killing the process then rescan
additionally you can find who owns an handle by using process explorer from ms (search google for download location)