Please Help Error 0x80501001

[Guest]

Everytime time I do a Windows Defender full scan I get the dreaded 0x80501001
error messsage with reference to the following "malware" Win32/MS04-28. I
have run event viewer which provides the following details:

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 1006
Date: 7/1/2006
Time: 1:28:29 AM
User: N/A
Description:
Windows Defender scan has detected spyware or other potentially unwanted
software.
For more information please see the following:
http://www.microsoft.com
Scan ID: {9285F2A5-9181-4A04-A8AD-BCC4B187C5D3}
Scan Type: AntiSpyware
Scan Parameters: Full Scan
User: MDG-ED828947CE9\Todd Bruce
Name: Exploit:Win32/MS04-28
ID: 16993
Severity ID: 4
Category ID: 27
Path Found: file:C:\Program Files\Encarta\2005 Encarta
Contents\E05ASTRC\MDSTD02.EIT->/baggage/t002273b.jpg;file:C:\Program
Files\Encarta\2005 Encarta
Contents\E05ASTRC\PICONSTD.EIT->/baggage/t040428a.jsm
Detection Type: Heuristics

The two EIT files in Encarta are large files that cannot be opened up any
further to find the cited jpg or jsm files. I have run Ewido and it doesn't
detect this Win32/MS04-28 malware.

What should I do?

 

[Guest]

Just wanted to include the malware in the subject heading if possible

 

[Guest]

Hi again,
Have a look at this article.It may be relevant to your problem.
Subject: error 0x80501001
5/25/2006 6:25 AM PST
By: rmcs
In: microsoft.private.security.spyware.general

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl

 

[Guest]

Hi Engel,

I found the post and reprint below for convenience:

0x80501001
This error will occur if a threat is detected inside of a container such as
a ZIP file, RAR archive, etc.

My computer, right click , Properties, Disk-Maintenance, Run, Other Options,
check delete old restore points (the last recent checkpoint remªins).

If you really want to keep the ZIP file around but do not want to see this
error, you can disable scanning inside archives. Clear the checkbox for "Scan
inside archives" in the General Settings section under the Tools menu.
Generally, threats inside archives, while good to know about, are not
"active", meaning they can't do anything bad to your system while inside the
archive.

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçеl

My problem was traced in the Event Viewer to two .EIT files in the Encarta
program file, the problem doesn't therefore appear to be zip or RAR archives.
Maybe it is the old restore point. However when I right-click on My
Computer/Properties I get a pop up with General, Computer Name, Hardware,
Advanced, System Restore, Automatic Updates, and Remote and not
Disk-Maintenance, Run, Other Options as described above. So I am embarrassed
to say I can't even seem to get to first base in checking whether it might be
in order to remove old restore points.

Thanks

Rooiberg

 

[Guest]

Ok. Try this:
Start-> Click (Open)on my Computer-> Select your Drive-> Right click on your
drive->Properties-> click in Disk Cleanup-> More options->System restore.

 

[Guest]

Hi Engel,

This route worked fine in terms of getting to the System Restore and
eliminating all but the most recent restore point. I then did a Windows
Defender scan and it unfortunately picked up the same problem
Exploit:Win32/MS04-28 in the .jpg and .jsm files found in the same two .EIT
files in the Encarta program:

Path Found: file:C:\Program Files\Encarta\2005 Encarta
Contents\E05ASTRC\MDSTD02.EIT->/baggage/t002273b.jpg;file:
C:\Program Files\Encarta\2005 Encarta
Contents\E05ASTRC\PICONSTD.EIT->/baggage/t040428a.jsm

Still stymied unfortunately

Thanks

 

[Guest]

I think you may have to work at excluding it from the scan, as an interim
measure. Tools, Options, scroll down to Advanced options, and fill the box,
hit the add button. If the jpg has the same name, or same location, each
time it is created, this should work--browse to whatever is being detected,
anyway.

 

[Guest]

Hi Engel,

I have as your suggestion excluded both the .EIT files in the Encarta
program folder from being scanned by WINDef.

Many thanks for all your help

Rooiberg