Hi Steve,
Thanks for this however it happens on a lot please see attached .txt file.
Kind regards,
Nathan
From: clamav-users <clamav-users-boun...@lists.clamav.net> On Behalf Of Steve
Basford via clamav-users
Sent: 30 April 2024 12:50
To: ClamAV users ML <clamav-users@lists.clamav.net>
Cc: Steve Basford <steveb_cla...@sanesecurity.com>
Subject: Re: [clamav-users] Failed to open file. ERROR.
On 30 April 2024 10:42:39 Nathan Millard via clamav-users
<clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>> wrote:
Hi, when I am scanning using clamav on windows I am getting lots of errors
staying “Failed to open file. ERROR”
[cid:image001.png@01DA9AFF.3AB8F9B0]
Does anyone know how to solve this? Seems like it would be a permissions
problem?
Hi.
While there is a windows remove unc bug..
https://github.com/Cisco-Talos/clamav/issues/839#issuecomment-1982145731
Yous is probably due to locked files (in use) on the windows system you are
scanning.
Maybe use excludes... eg for pagefile.sys etc
--exclude= --exclude=
Kind regards,
Nathan
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
Cheers,
Steve
Twitter: @sanesecurity
\\?\UNC\My IP\C$\DumpStack.log.tmp: Failed to open file. ERROR
\\?\UNC\My IP\C$\pagefile.sys: Failed to open file. ERROR
\\?\UNC\My IP\C$\InterSystems\Cache\mgr\clockjd: Failed to open file. ERROR
\\?\UNC\My IP\C$\InterSystems\Cache\mgr\clockwd: Failed to open file. ERROR
\\?\UNC\My IP\C$\Program Files\WinRAR\Uninstall.exe:
Win.Virus.Expiro-10016185-0 FOUND
\\?\UNC\My IP\C$\Program Files\WinRAR\Zip.SFX: Win.Packed.Uztuby-10017876-0
FOUND
\\?\UNC\My IP\C$\Program Files (x86)\Lansweeper\SQLData\lansweeperdb.mdf:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Program Files (x86)\Lansweeper\SQLData\lansweeperdb_log.ldf:
Failed to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\IMpService77BDAF73-B396-481F-9042-AD358843EC24.lock: Failed to open
file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.01: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.67: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.6C: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.79: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.7C: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.7E: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.80: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.83: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.87: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.A0: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.DB: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\mpcache-69D84D41B9B592839B65E798CE3BAB1165D97A33.bin.E6: Failed
to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows Defender\Scans\MpDiag.bin:
Failed to open file. ERROR
\\?\UNC\My IP\C$\ProgramData\Microsoft\Windows
Defender\Scans\History\CacheManager\106A4943-D46C-4EAC-A5AD-E443685BE603-0.bin:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Users\Administrator\ntuser.dat.LOG2: Failed to open file. ERROR
\\?\UNC\My IP\C$\Users\Administrator\NTUSER.DAT: Failed to open file. ERROR
\\?\UNC\My IP\C$\Users\Administrator\ntuser.dat.LOG1: Failed to open file. ERROR
\\?\UNC\My
IP\C$\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat: Failed
to open file. ERROR
\\?\UNC\My
IP\C$\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_96_01.mss:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\NTUSER.DAT:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\ntuser.dat.LOG1: Failed
to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\ntuser.dat.LOG2: Failed
to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\templog.ldf: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\master.mdf: Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\mastlog.ldf: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\model.mdf: Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\modellog.ldf: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\msdbdata.mdf: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\msdblog.ldf: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Microsoft
SQL Server Local DB\Instances\LSInstance\tempdb.mdf: Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Windows\UsrClass.dat:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\ServiceProfiles\LansweeperLocalDbService\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\LocalService\NTUSER.DAT: Failed to
open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\NetworkService\NTUSER.DAT: Failed to
open file. ERROR
\\?\UNC\My IP\C$\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\SoftwareDistribution\DataStore\DataStore.edb: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\SoftwareDistribution\DataStore\DataStore.jfm: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb: Failed to
open file. ERROR
\\?\UNC\My IP\C$\Windows\SoftwareDistribution\DataStore\Logs\edb.log: Failed to
open file. ERROR
\\?\UNC\My IP\C$\Windows\SoftwareDistribution\DataStore\Logs\edbtmp.log: Failed
to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\catroot2\edb.log: Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb.jfm:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb.jfm:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SECURITY: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\BBI.LOG1: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\BBI.LOG2: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\DEFAULT: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\DEFAULT.LOG1: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\DEFAULT.LOG2: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SOFTWARE.LOG2: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SYSTEM: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SYSTEM.LOG1: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SYSTEM.LOG2: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SAM: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SAM.LOG1: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SAM.LOG2: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\BBI: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SECURITY.LOG1: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SECURITY.LOG2: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SOFTWARE: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\SOFTWARE.LOG1: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\RegBack\SAM: Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\config\RegBack\SECURITY: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\RegBack\SOFTWARE: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\RegBack\SYSTEM: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\config\RegBack\DEFAULT: Failed to open file.
ERROR
\\?\UNC\My
IP\C$\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.jfm:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSS.log:
Failed to open file. ERROR
\\?\UNC\My
IP\C$\Windows\System32\config\systemprofile\AppData\Local\DataSharing\Storage\DSTokenDB2.dat:
Failed to open file. ERROR
\\?\UNC\My IP\C$\Windows\System32\LogFiles\Sum\Current.mdb: Failed to open
file. ERROR
\\?\UNC\My IP\C$\Windows\System32\LogFiles\Sum\Svc.log: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\LogFiles\Sum\Svctmp.log: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\System32\LogFiles\Sum\Current.jfm: Failed to open
file. ERROR
\\?\UNC\My IP\C$\Windows\appcompat\Programs\Amcache.hve: Failed to open file.
ERROR
\\?\UNC\My IP\C$\Windows\appcompat\Programs\Amcache.hve.LOG1: Failed to open
file. ERROR
\\?\UNC\My IP\C$\Windows\appcompat\Programs\Amcache.hve.LOG2: Failed to open
file. ERROR_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
