Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on October 07, 2015, 10:18:22 PM
-
My OS is Windows XP Pro x64 (64-bit)... custom built in 2012. Previously I had Kaspersky Anti-Virus 2013 installed. Two days ago (Oct 5th) I purchased Avast Inernet Security for my PC because I wanted a more complete protection package.
Background:
1. I uninstalled Kaspersky and then subsequently ran their KARemover.exe tool to remove all traces of it... rebooted.
2. Then I downloaded and installed Avast Internet Security... the installation halted because it said Adaware Antivirus conflicted and had to be removed. So I uninstalled Adaware Antivirus and then proceeded with the Avast installation.
3. Avast installed, started its services, detected my home network (selected Private) and I then ran a quick scan-- no issues. (I may have run the updater... I don't recall). All seemed well.
4. I shutdown my PC.
Problems/Issue:
1. Last evening I fired up my PC to do some work... but the desktop never populated-- I just had black screens with an active mouse. I was forced to do a hard shutdown.
2. Restarted my PC and got the same result as #1... getting aggravated now.
3. Booted using "Last Known Good Configuration" and the PC started normally. Finally Avast populated the system tray and had a red X in it.
4. The Avast UI came up and in the large red section stated "You are unprotected! Avast Services not running/Firewall is off (blah blah)"
5. Nothing I could do started anything... it also interfered with running any other application-- i.e., photoshop, firefox, etc. failed to launch.
6. Rebooted... went thru steps #1-3 again. Very angry now...
7. Uninstalled Avast... and also ran the AvastCleaner in SAFE mode... rebooted.
8. Re-installed Avast using the online installer... and the installation hung at the very end. And I was forced to kill the setup process... seems to have installed... so I launched Avast from the icon and got the same result #4... cursing Avast software at this point.
9. Uninstalled Avast and re-ran the AvastCleaner.
10. Rebooted my PC and all is well again (No Avast to cause problems)... shutdown machine and went to bed angry.
11. Today, I created this post.
From googling and looking on your forums, where many other customers currently describe having similar issues-- I'd say you're Avast programmers have dorked up your software! My plan is to download a previous version for WinXP Pro x64 (maybe go back two versions even!) and see if it installs. If that doesn't work I'll likely be asking for a refund.
EDIT: I also attempted the "Control Panel - Update" and "Control Panel - Repair" methods on the Avast... and neither worked.
-
if you attach diagnostic logs then a expert here can have a look
See here https://forum.avast.com/index.php?topic=53253.0
scroll down to second picture ... Farbar Recovery Scan Tool ... run as instructed and attach the two diagnostic logs
See below the box you write in ... Attachments and other options
-
I will do as you suggest later this evening and post the requested logs.
-
I will do as you suggest later this evening and post the requested logs.
Please attach the logs. :)
-
Here are the two log files... I did not press "Fix" but rather exited the utility without fixing.
-
I did not press "Fix" but rather exited the utility without fixing.
FIX will do nothing ... unless a fix has been made for you. And that may happen when the expert has seen your log, he will be online later today
-
There are a few temp files that Avast left behind and I will remove those now, otherwise the system looks quite clean. As you are using XP x64 I am not fully sure if Avast is compliant with that
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
2015-10-06 18:23 - 2015-10-06 08:59 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw289.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00334024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw284.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw28A.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00206816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw28B.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw287.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw28C.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw288.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00064712 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw285.tmp
2015-10-06 18:23 - 2015-10-06 08:59 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw286.tmp
2015-10-06 08:58 - 2015-10-06 08:58 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\bifmzwff.sys
2015-10-06 08:56 - 2015-01-22 17:16 - 00452040 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\Trufos.sys
2015-10-06 08:55 - 2015-10-06 08:55 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\uxvuzery.sys
RemoveProxy:
EmptyTemp:
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
-
Thanks... I will do this after work today. There was a missing image file in your post (black x)...(but this could be blocked by my work internet security features-- will likely show up at home).
EDIT: The Avast graphic image (and the online spec requirements) say my WinXP Pro x64 machine is supported.
-
@essexboy - attached is the Fixlog.
Prior to running your FRST fix... I first downloaded and ran an nVidia graphics driver update. When I clicked on the EXE to install the new driver... I was greeted with that error message:
"The procedure entry point GetNamedProcessId could not be located in the dynamic link library KERNEL32.dll"
After a number of clicks on closing the pop-up... it finally went back to the graphics driver installer and successfully installed the new nVidia graphics driver (and rebooted).
Tonight when I ran FRST64.exe, it did the same kernel32.dll error thing (Note: it did not give this error pop-up yesterday when I ran FRST to generate the two log files yesterday); but I was finally able to click the pop-up away and ran the FRST64 fix as you requested. Should I assume that somehow my kernel32.dll has been corrupted?
Is there a way to replace just kernel32.dll from within the Recovery Console?
http://www.informationweek.com/langa-letter-the-os-inside-the-os/d/d-id/1042642?page_number=1 (http://www.informationweek.com/langa-letter-the-os-inside-the-os/d/d-id/1042642?page_number=1)
EDIT: I have not attempted to re-install Avast Internet Security yet... as I am awaiting your next instructions. Malwarebytes detailed threat scan does not detect anything.
-
That could be a sign of incipient hard disk problems .. Could you run a disk check on your main drive
-
That could be a sign of incipient hard disk problems .. Could you run a disk check on your main drive
Is it safe to run chkdsk on an SSD? My main C:\ drive is a Samsung Pro 830 Series SSD (512Gb). I have to manually run the Samsung Magician SSD Software to do a manual trim each day... since my OS doesn't supported automatic trimming. Early next week, I can look at the Magician software and see what it says about drive health and attach a screenshot...
Thanks for your assistance.
-
Ahh an SSD bear with me I will check that out
-
Ahh an SSD bear with me I will check that out
I found this from googling (anandtech forums):
CHKDSK allows you to choose 2 procedures:
1. "Automatically fix file system errors" (FAT/NTFS file-system scan & error repair): Perfectly fine to use that to fix issues with the filesystem. (those most commonly occur when you have an improper shutdown)
2. "Scan for and attempt recovery of bad sectors": Don't use it on your SSD. (based on my understanding of SSDs and CHKDSK I believe it is bad to let CHKDSK do that to an SSD; your SSD controller is doing it internally correctly and automatically anyways)
Quote:
Originally Posted by Charlie98 View Post
Soooo... what would be the proper way to run CKDSK for an SSD? When I ran CKDSK on my SSD, I checked both options... it ultimately fixed the problem, but I don't want to screw myself in the long run.
1. Check the box that says "Automatically fix file system errors"
2. Uncheck the box that says "Scan for and attempt recovery of bad sectors"
So it seems OK to run chkdsk and only option #1... I will do this as soon as I can, but it may have to wait until early next week due to travels. Thanks!
-
Aye that was what I was thinking about so I was looking for the SSD equivalent of chkdsk
-
As far as I know, it's OK to run Checkdisk on an SSD drive.
What you should not do is to defrag the SSD
-
I ran chkdsk twice... both times I missed seeing the final screen printout (wife distracted me...)
First time I ran it thru the disk properties tools (at next boot-up)
Second time I ran it from command line prompt using: chkdsk c: /f (and had to reboot to get it to do it)... so I'm sure if there were any issues it would have fixed them.
Is there somewhere I can go (Event Viewer) and see the results?
-
To find the results of a previous chkdisk, go into "Start->Control
Panel" and doubleclick on "Administrative Tools". Then doubleclick on
"Event Viewer", then select "Application".
Now you will see a list of Application events. Look for the most
recent "Winlogon" event. You can tell the date and time of the
Winlogon event to see if that corresponds with the particular chkdsk
you are interested in seeing the results for. Double click on it, and
you will see the results of your chkdsk.
-
To find the results of a previous chkdisk, go into "Start->Control
Panel" and doubleclick on "Administrative Tools". Then doubleclick on
"Event Viewer", then select "Application".
Now you will see a list of Application events. Look for the most
recent "Winlogon" event. You can tell the date and time of the
Winlogon event to see if that corresponds with the particular chkdsk
you are interested in seeing the results for. Double click on it, and
you will see the results of your chkdsk.
Attached is the results from both chkdsk operations I ran last week.
-
That looks OK as the main areas are clean.. Bad sectors etc..
I am at a bit of a loss as to why AIS will not work
Have you tried after I removed the tempt files ?
-
That looks OK as the main areas are clean.. Bad sectors etc..
I am at a bit of a loss as to why AIS will not work
Have you tried after I removed the tempt files ?
No... I did not attempt to re-install Avast Internet Security yet-- I was waiting for you to give me the go-ahead to re-install it. Also, before doing that... is there a way that I can replace just the kernel32.dll (using the one from \dllcache folder) from the Recovery Console?
-
If you are happy using dos then the fcopy command will work nicely
-
On a side note, just something I noticed:
1. I uninstalled Kaspersky and then subsequently ran their KARemover.exe tool to remove all traces of it... rebooted.
There is almost no uninstall tool from a manufacturer that really removes everything although they claim it does. I've tested many of those tools and with almost all of them you will have to remove things manually because the tool doesn't work as they say. This is also true for aswclear.
-
On a side note, just something I noticed:
1. I uninstalled Kaspersky and then subsequently ran their KARemover.exe tool to remove all traces of it... rebooted.
There is almost no uninstall tool from a manufacturer that really removes everything although they claim it does. I've tested many of those tools and with almost all of them you will have to remove things manually because the tool doesn't work as they say. This is also true for aswclear.
Although this is true, I've never had a problem with anything not removed interfering with any other program. :)
-
If you are happy using dos then the fcopy command will work nicely
So boot into the Recovery Console and then at the DOS prompt use the copy command (I don't think XP has fcopy)?
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/copy.mspx?mfr=true (http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/copy.mspx?mfr=true)
copy /v [source] [destination]
There are two kernel32.dll files; one is in ..\system32 and the other in the ..\SysWOW64 directory-- they are different sizes.
My OS is Windows XP64. And the version of the kernel32.dll is as follows:
c:\windows\system32 contains:
kernel32.dll (size 1483Kb) version 5.2.3790.5295 (srv03_sp2_qfe.140205-1447) dated 2/6/2014
c:\windows\SysWOW64 contains:
kernel32.dll (size 993Kb) version 5.2.3790.5295 (srv03_sp2_qfe.140205-1447) dated 2/6/2014
...and they match the versions that are in the DLL cache folder.
Do I replace both of them? In which order? Also, do I need to use regsvr32 to unregister/register this system before/after this copy replacement?
-
So I booted into Recovery Console and renamed existing kernel32.dll file to kernel32.dll.bak and then I copied over the one in the ..\dllcache folder and restarted my computer.
Do I need to run the command: regsvr32 kernel32.dll
Now I'm re-downloading the full AVAST IS installer (not the online installer version)... I will update this post as to whether the installation succeeds or not.
-
...So I had to login on my cellphone to make this post!
Avast successfully installed, detected my network, etc. I ran a full system scan and Avast found nothing (before installation I also ran Malwarebytes and it too found nothing).
So... I only use Firefox on this workstation-- and now Avast causes issues... I can't get to my homepage (WWW.Google.com) and I cannot even login to the Afvast forum site now. Before installing avast I had no issues with Firefox v.41.0.1. ...wtf!?
UPDATE: In order to Login to this forum and also get Google.com to work, I had to disable "Enable HTTPS scanning" in the Web Shield settings. This seems like something Avast should fix.
-
Well, it looks like I spoke too soon. I restarted/rebooted my computer and instead of being greeted by the Windows Login screen... the monitors stayed black with my mouse active. This is exactly what happened originally after I "successfully" installed Avast IS the first time.
So I had to do a hard shutdown and choose to start Windows with "Last Known Good Configuration" to get it to startup correctly. So it seems your Avast software is doing something at the boot up cycle that interferes with loading the Windows Login screen.
Looks like I get to go thru this process all over again. >:(
-
Here are my logs from the FRST64 scan... I'll need your fix to remove the Avast temp files.
-
Have you tried to boot with avast set to load after all other things are loaded ?
Have you disabled all unneeded applications and processes from loading at boot time ?
-
Have you tried to boot with avast set to load after all other things are loaded ?
No, because I anticipated Avast's software to work properly. I could try that after a third pending successful install.
Have you disabled all unneeded applications and processes from loading at boot time ?
When Avast is not installed on my computer all processes, applications, etc. boot up successfully... so you want me to disable properly working applications to accommodate a broken Avast software?
Is this a known issue with Avast? Is there a previous version of Avast Internet Security that is known to work properly with Windows XP Pro x64? Maybe the Avast coders broke something in recent updates? Please advise...
-
I am not sure when the last working version of IAS was that worked with XP64 as the are rather rare systems :)
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
2015-10-15 00:42 - 2015-10-14 23:06 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw287.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00334024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw282.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw288.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00206816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw289.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw285.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw28A.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw286.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00064712 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw283.tmp
2015-10-15 00:42 - 2015-10-14 23:06 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw284.tmp
2015-10-14 23:05 - 2015-10-14 23:05 - 00448968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\yndfmuce.sys
EmptyTemp:
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
-
I am not sure when the last working version of IAS was that worked with XP64 as the are rather rare systems :)
Does the Avast Software Development team not verify their software on all the OS platforms they state they support? They still officially support Windows XP ...that's why I purchased it. From the FAQ:
Software ProductsOperating Systems Avast Premier 2015
Avast Internet Security 2015
Avast Pro Antivirus 2015
Avast Free Antivirus 2015
Operating SystemsSoftware Products Microsoft Windows 10 Home / Pro / Enterprise / Education
Microsoft Windows 8.1 / Pro / Enterprise
Microsoft Windows 8 / Pro / Enterprise
Microsoft Windows 7 Home Basic / Home Premium / Professional / Enterprise / Ultimate
Microsoft Windows Vista Home Basic / Home Premium / Business / Enterprise / Ultimate
Microsoft Windows XP Home / Professional / Media Center Edition
...and I'm thankful it still supports Windows XP-- I just hope they will find this issue and fix it.
-
I will report this to the mods in the hope that they may know something that I do not
-
Here is the updated fixlog... I'm going to hold off on re-installing AIS until you hear back from the developers.
-
Any news? It seems like newer Windows OS platforms have similar issues as I'm having... Do the developers know what the problem is? Is a fix in the works? Or do I need to ask for a refund?
-
I would ask for a refund as that may give them a kick up the behind
-
I have a PC with Widows XP still, things were working fine but slow and I had the 'free' Avast installed... I purchased the offer for the 'Avast Grimme fighter' that was advertized last month and since then have had nothing but issues with many online pages and my hotmail... I have been looking for the 'cancel' section to get rid of Grimme fighter but can't seem to get rid of it.... if I uninstall Avast and then re-install just the free version will it get rid of the paid for 'grimme fighter' account, or am I stuck with it as long as I use Avast??
-
I would ask for a refund as that may give them a kick up the behind
From perusing the AIS forum, it seems that AIS is badly broken for multiple OS platforms; and then they have the audacity to inform me that I can PAY for additional technical support to have them remotely connect to my computer and "install the software for me" -- like I'm some kind of idiot that doesn't know how to install software. There's nothing wrong with my PC and it boots up perfectly after successfully uninstalling AIS. Apparently the developers of AIS and the Quality Control software engineers failed miserably on this latest version.
@essexboy -- thanks for your help. I've submitted a ticket requesting a refund as you suggested.