dave@replayfilms.co.uk
Joined: 28 Jan 2010 |
Posts: 0 |
Location: United Kingdom |
|
 |
Posted: Sat Feb 13, 2010 8:53 am |
|
 |
 |
 |
 |
Hi,
Can anyone help me.
Every time ClamWin runs a scan I get the following message: "An error occured during scheduled scan. Please review the scan report." However there is nothing in the scan report to indicate what the error is. There are a few "Permission Denied" files, however I understand that is normal.
The scan fails to find the eicar test virus that I have hidden away, so I am reasonably certain that the scan is not completing.
On this forum I found references to the Comspec variable. I THINK this is OK:
Running set COMSPEC in a command window just shows "Syntax error" but by going into system properties, environment variables I see that ComSpec is set to C:\WINDOWS\system32\cmd.exe which I think is correct.
I am running Windows XP.
Can anyone help?
Here is the report:
Scan Started Thu Jan 28 02:30:00 2010
-------------------------------------------------------------------------------
*** Scanning Programs in Computer Memory ***
*** Memory Scan: using ToolHelp ***
*** Scanned 74 processes - 728 modules ***
*** Computer Memory Scan Completed ***
C:\Documents and Settings\All Users\.clamwin\quarantine\Barclays Bank Security Alert (1.88 KB).msg.infected: HTML.Phishing.Bank-797 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Barclays Bank Security Alert (1.88 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Between Us (52.2 KB).msg.infected: Trojan.Downloader-669 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Between Us (52.2 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Bulk The Valentines Angel (51.8 KB).msg.infected: Trojan.Small-1117 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Bulk The Valentines Angel (51.8 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Our Love Will Last (52.7 KB)-1.msg.infected: Trojan.Downloader-1381 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Our Love Will Last (52.7 KB)-1.msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Our Love Will Last (52.7 KB).msg.infected: Trojan.Downloader-1381 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Our Love Will Last (52.7 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.5 KB).msg.infected: Trojan.Downloader-648 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.5 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.6 KB).msg.infected: Trojan.Downloader-648 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.6 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.7 KB).msg.infected: Trojan.Downloader-648 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Sadam Hussein alive! (27.7 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\To New Spouse (51.5 KB).msg.infected: Trojan.Downloader-1381 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\To New Spouse (51.5 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\All Users\.clamwin\quarantine\Unique Love (51.0 KB).msg.infected: Trojan.Downloader-753 FOUND
C:\Documents and Settings\All Users\.clamwin\quarantine\Unique Love (51.0 KB).msg.infected not moved/copied since already in quarantine
C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Windows Live Contacts\{22870edd-713b-4fd2-9290-82debf7167d7}\DBStore\contacts.edb: Permission denied
C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Windows Live Contacts\{22870edd-713b-4fd2-9290-82debf7167d7}\DBStore\tempedb.edb: Permission denied
C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Windows Live Contacts\{ef3f06f8-9c73-4e60-ae0c-b9a322ad8aa4}\DBStore\contacts.edb: Permission denied
C:\Documents and Settings\Dave\Local Settings\Application Data\Microsoft\Windows Live Contacts\{ef3f06f8-9c73-4e60-ae0c-b9a322ad8aa4}\DBStore\tempedb.edb: Permission denied
C:\Documents and Settings\Dave\Local Settings\Temp\~DF4496.tmp: Permission denied
C:\Documents and Settings\Dave\Local Settings\Temp\~DF5FF8.tmp: Permission denied
C:\Documents and Settings\Dave\Local Settings\Temp\~DFF382.tmp: Permission denied
|
|
Drew Barfield
Joined: 27 Feb 2010 |
Posts: 0 |
Location: Elizabethtown, NC |
|
 |
Posted: Mon Mar 01, 2010 12:10 pm |
|
 |
 |
 |
 |
Hi Dave,
Do these two things first:
1. Delete all files in the 'db' folder and then make Clam re-download all virus definitions.
2. run chkdsk /r from the command-line on the drive in question and tell it to scan the drive on the next boot.
Reboot to run check disk and then run Clam. Did you get the error again?
-Drew
|
|