Advanced Questions
Error Messages
Installation
Instructions to Unistall Other AV Products
Additional Support
Advanced Questions
Virus is found in C:\_RESTORE and can not be deleted.
C:\_RESTORE folder is a peculiarity of Windows Millennium (Me). You need to turn off the
System Restore feature. You can do this with the following method: right-click on 'My Computer'
and choose 'Properties'. On the 'Performance' tab, click on 'File System' and click OK. In the
window that appears, select the 'Troubleshooting' tab and uncheck the last option 'Disable System Restore'.
Close all windows and restart your system. Now you should attempt to delete these infected files. This
is not always possible. If you are unable to do this, only operating system reinstallation will help.
Again, this is a peculiarity of Windows Me. Viruses will not spread from within this folder, so there is
no danger. For more information please refer to Windows Me documentation. This folder is used for
emergency backup in case of a system failure. Any access is restricted for all applications. Over time
files will be overwritten in this folder automatically and the virus will be gone.
back to top ^
My programs take a long time to load after a Windows Update (Hotfix 811493).
Microsoft released a Windows Update 811493.
Microsoft recommends "If you restrict access between different users of your computer,
you should install this update. If you are the only person who uses your computer, or if you do not use passwords
or other measures to limit access to accounts on your computer, it is not important that you install this update".
Installing this Windows Update slows down the startup time of the
computer and all programs are slow to open. We recommend that you uninstall this Windows Update if you do not use
password protection. Microsoft has said, "You may experience slower computer performance after
you install the 811493 (MS03-013) security update package on a computer that is running Windows XP Service Pack
1 (SP1), or after you upgrade to SP1 on a Windows XP-based computer on which the 811493 security update was
previously installed. This problem may be more likely to occur if you use some features of some third-party
programs, such as antivirus programs. For example, this problem may occur if your antivirus program is configured
to scan all files when you open (or you run) them. This is sometimes called "real-time" scanning."
To uninstall this Windows Update, please do the following:
- Click Start, click Control Panel, and then double-click Add/Remove Programs.
- From the list of Currently installed programs, click Windows Hotfix Q811493 and click Remove.
- Click Next.
- Once the uninstall is complete, click Finish and reboot your computer.
back to top ^
I have received an e-mail message informing me that I am sending out a virus, but my
CyberScrub AntiVirus has informed me that my computer is clean. What is happening?
If you receive email message informing you that you are sending out a virus, we recommend that you
update your CyberScrub AntiVirus and scan your entire computer to check whether it contains a virus.
On scanning your entire computer with CyberScrub AntiVirus, it is possible that
no virus is detected. This happens because some viruses can falsify the email address from
which they are sent. Therefore, provided your CyberScrub Antivirus is completely up to date,
the message will has been sent from another computer that is infected with the virus.
back to top ^
Trojan program can not be deleted in normal way.
Sometimes it is not possible to remove a Trojan program by means of CyberScrub AntiVirus or
manually because the file is locked by the system and cannot be deleted. You should restart your
computer in Safe Mode and run scanning to delete the virus.
back to top ^
CyberScrub AntiVirus find Trojan.FlashKiller program but can not disinfect or delete it.
Variant 1: Trojan.FlashKiller is found with redundant scan option only. The majority of
antiviral programs do not delete all codes of virus Win95.CIH when they cure it. Trojan
program FlashKiller looks like Win95.CIH. CyberScrub AntiVirus will find remnants of virus
Win95.CIH in the file when you scan this file with "Redundant scan" options (when CyberScrub
AntiVirus looks not only at the entry of program code but entire file). If you contact us through
our Interactive Support Center (www.cyberscrub.com/info) with your registration number we can
send you a special base for deleting the remnants of virus Win95.CIH.
Variant 2: Trojan.FlashKiller is found in both redundant and standard scan options. This
is a trojan program, which writes letter to FLASH BIOS with some special conditions. It is
based on virus Win95.CIH. If you want to get rid of this trojan program you should delete all
files, which are named as infected.
back to top ^
Why does the Scanner shows "Scriptlet.Typelib" during starting up?
This is an informational message. With the help of it CyberScrub AntiVirus notices that you
need to install a special patch of Microsoft software. This patch fixes errors that cause
vulnerability of the security system.
You can download this patch from:
http://support.microsoft.com/support/kb/articles/Q240/3/08.asp
back to top ^
Error Messages
Why has I/O error appeared?
This error appears in those cases when some other program locks the
file being checked by CyberScrub AntiVirus. It is a typical situation when working in the
Windows OS environment. These may be the temporary files, swap files, etc. Actually, these
files do not need to be checked, so this error is not critical and does not govern
CyberScrub AntiVirus work as a whole. If you want to know what file has caused the I/O
error, mark the 'Options' check box "Show clean object in the log" and log file creating,
scan your disks and then look through.
back to top ^
"Unable to disinfect object contained in non-disinfecable archive".
view it
CyberScrub Antivirus does not support curing of archives/zip files. It detects it. Unzipping
them and curing the infected file can disinfect these files.
back to top ^
"Unable to disinfect object contained in non-disinfectable archive or locked by another program".
view it
If a file is opened or is in use by another program then it is locked. CAV cannot disinfect
a locked file that is already in use by other program.
back to top ^
"Unable to disinfect object. Press 'Yes' to delete this object. Press 'Yes to All' to delete all object that can't be disinfected".
view it
Not all viruses can be cured without deleting the infected file. If the 'Delete the file'
option is selected then all information in that file will be lost. The 'Yes to all' option
can be selected if you are sure that your important data is saved at some other location. If
the file in question is the only location of the important info or you are uncertain, ask
the experienced specialists to get information from this file and delete it after rescuing
your data.
back to top ^
What does a "corrupted file" message mean?
CyberScrub AntiVirus displays the message "corrupted" if it assumes
the checked file is in a certain format, but cannot find this format. The reasons for this
vary and could be any of the following:
- The com-file is larger than 64 K.
- The entry point in the executable file (COM, EXE, SYS, NE, PE, LE, LX) is outside the file limits.
- The file archive, OLE document etc. has a defective format/interval structure.
back to top ^
Why does the Scanner gets the message "Object code not linked"?
You have tried to load weekly updates with old cumulative.
back to top ^
During work a messages pops up 'csrss.exe process tries to terminate
antivirus monitor service'. What does this mean?
The csrss.exe is a standard program of MS Windows. One function of it is the termination of
applications and services. Most likely the CyberScrub AntiVirus Monitor was busy at the
moment when the system was sending a request to it, therefore the system recognized this
behavior as stuck and was preparing to terminate the antivirus monitor service as well. It
is a known but not hazardous occurrence. It is a characteristic property of system. Our
developers are trying to avoid this occurrence.
back to top ^
Few viruses were found in Outlook Express Inbox.mbx file, but antiviral monitor reports
"Disinfection failed". When I try to open Outlook Express I receive an error "File access
denied".
CyberScrub Antiviral Monitor cannot cure or delete something from Outlook Express database. Most email
applications (e.g. Outlook Express) keep all email messages together with all attachments in
one file. If one of these emails contains a virus - the antiviral monitor locks access to
infected files. If in the antiviral monitor settings you enable the option to check email
databases - the antiviral monitor locks access to the entire email database.
What to do:
- Disable this option (of mail databases checking) in monitor settings.
- Open the Outlook Express and delete the infected item.
- Compact Outlook Express folders (using the menu File-> Folder -> Compact All Folders).
back to top ^
I have an error message "Incorrect version of module MFC42.dll".
MFC42.dll - is the system library that is used by several Microsoft applications.
If you received this message during installation, just accept the new version installation.
It's a standard Microsoft library, so it will not have any effect on other applications
function but will provide correct CyberScrub AntiVirus function.
If you received this message some time after installation, this mean that some application
that has been installed later copied an old version of system library. In this case you can
reinstall CyberScrub AntiVirus (without uninstall). This problem can be with the msvcrt.dll
and oleaut32.dll file also.
back to top ^
Installation
Installing from the CD if the Install wizard doesn't start automatically.
- Click Start, select Run.
- The Run dialog box displays. - Type :\SETUP.EXE in the Run dialog text box, and click OK.
This represents the drive letter for your CD-ROM drive or the path to the folder that contains
your extracted files. To search for the correct files on your hard disk or CD-ROM, click
Browse. Follow the prompts to install the program.
back to top ^
What should I do if I get a blank page when installing or updating?
1: Remove Temporary Internet Files
2: Configure Browser Security Settings
3: Configure Internet Explorer's Cookie Settings
Configure Browser Cookie Settings
Internet Explorer 5.x
- Click Start, then click Run. Enter the following: inetcpl.cpl
- Note: Windows 98 users must click Start, Settings, Control Panel. Double-click the Internet Options.
- Click the Security tab.
- Click Custom Level.
- The Security Settings window appears. Scroll to the 'Cookies' section.
- Select Enable for both options.
- Click OK.
- Click Apply.
- Click OK.
- Return to Summary.
Internet Explorer 6.x
- Click Start, then Run. Enter the following: inetcpl.cpl
Note: Windows 98 users must click Start, Settings, Control Panel. Double-click the Internet Options.
- Click the Privacy tab.
- If the slider isn't set to Medium, click Default.
- Click Edit.
- The Per Site Privacy Actions window appears. Under 'Managed Web sites', look for a
cyberscrub domain (e.g. www.cyberscrub.com).
- If a cyberscrub domain appears, right-click on it and click Allow.
- Repeat steps 5 and 6 for all cyberscrub domains.
- Click OK.
- If available, click Apply.
- Click OK.
Why am I prompted to install .NET Framework?
If you are prompted to install the .NET Framework Package, please do so. This will allow the
program's Help section to operate. Just follow the prompts when installing this package.
Please DO NOT RESTART the machine if prompted to as part of this package installation.
back to top ^
Instructions to Uninstall Other AV Products
Manual uninstallation of Symantec products.
http://www.symantec.com/techsupp/support_options.html
back to top ^
Manual uninstallation of Trend Micro products.
http://kb.trendmicro.com/solutions/
Enter Solution ID 20059 search for instructions to manually uninstall Trend Micro PC-cillin 2000, 2002, 2003.
back to top ^
Manual uninstallation of McAfee products
http://ts.mcafeehelp.com/default.asp?
|