Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: olddog on November 06, 2013, 01:08:16 AM

Title: USB Rescue media - what a shocker !
Post by: olddog on November 06, 2013, 01:08:16 AM
1. Having clicked on "Create on USB", I was rewarded by the Avast dialogue panel turning completely white, and with the "windows not responding spinning cursor"
2. Task Manager also reported Avast as not responding, but clued by a very occasional flash of the drive light, I left it alone.
3. Nearly 10 minutes later, the dialogue returned, and said it was going to download the toolkit. That download took another 29 minutes (and I'm on high speed cable).
4. Finally it told me I had a rescue USB device.
5. Booted up, selected the rescue USB flash drive from the boot menu, and was rewarded with "Reboot & Select Proper Device, or insert boot media in selected boot device and press a Key", and no way could I get it to accept the rescue as valid boot media

I have repeated the above several times, and the results bad as they are, are consistent.

I can make a Paragon recovery USB flash drive in a fraction of the time it takes to make the Avast one, and it works. I can also make an entire partition image using Paragon in less time that it takes to do the above. The Paragon recovery flash drive (made on the same Flash drive that had been used for the Avast recovery, after reformatting) works from the same USB socket, selected from the same boot menu.

I am using the latest avast 2014.9.0.2007.  It was done as a clean installation after a complete uninstall of the previous version (2006), and clean up using both the Avast uninstall tool (Avastclear.exe) from safe mode, and RejZoR's Avast Cleanup Tool.

 

Title: Re: USB Rescue media - what a shocker !
Post by: Gandalf1369 on November 06, 2013, 01:35:19 AM
Based on my own experience and that of numerous other posters here, I really believe that the creation of a Rescue USB is broken in avast!  On the other hand, making a bootable Rescue CD works with no problems for me. . . .
Title: Re: USB Rescue media - what a shocker !
Post by: schmidthouse on November 06, 2013, 02:08:27 AM
Has anyone had success achieving a workable USB Rescue?
I can't recall reading any success stories relating to USB Flashdrive Rescue.
Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 11, 2013, 09:47:21 PM
Hi
I prepared a USB Rescue drive from a Win 7 64-bit system.
The USB volume size made by Avast was 113MB.
The \boot\bcd was set to boot from \sources\boot.wim

Entry #1
Name: Windows Setup
BCD ID: {default}
Device: [boot]\sources\boot.wim
Bootloader Path: \windows\system32\boot\winload.exe

Problem is there is no \sources folder on the USB drive and no boot.wim!!!!


So, of course, it does not boot. I am using todays free version.
HTH
Steve





Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 11, 2013, 11:18:19 PM
I tried using the boot.wim from the rescue_disk.iso that I made. The USB drive then booted to PE but gave a missing dll error.
I then updated the three missing dll's and one 0 byte length dll with the dll's from the ISO.
Now the USB drive boots to the WinPE desktop but I get a

'aswShMin.exe - No Disk' dialogue box, saying  'There is no disk in the drive, please insert a disk into drive A:'.

This is now the same message that I get if I boot from the rescue_disk.iso file from a USB boot drive using grub4dos.

So no solution.. :-(
Title: Re: USB Rescue media - what a shocker !
Post by: RejZoR on December 11, 2013, 11:26:00 PM
I could NEVER get the USB Rescue Disc bootable either. Files get copied to USB, but i can't boot ANY system with it. And apparently i'm not the only one with such problem...
Title: Re: USB Rescue media - what a shocker !
Post by: olddog on December 11, 2013, 11:54:24 PM
From mid 2012, manufacturers of USB flash drives like SanDisk buckled to pressure from Microsoft, and changed the structure of all of their USB flash drives so they are no longer seen by Windows as "Removable Media". This was in order to meet with Windows 8 certification. At the same time, they announced that they no longer supported being able to boot from these drives.

for more details see http://kb.sandisk.com/app/answers/detail/a_id/12830

This issue is not confined to Avast, it also affects other rescue or recovery software that is based on booting to a USB flash drive.

It is possible to make a workable Avast bootable rescue USB flash drive from the option provided in Avast 2014, but only on flash drives that are seen as "removable". 

Some software specifically looks for "removable media" and doesn't show the newer "non removable" flash drives as an available destination at the start of the process.

But even when a "non removable" USB flash drive can be selected as a destination, and the make rescue media process is completed, some PC's see the "non removable" flash drives as normal hard drives in the boot up selection screen, but cannot boot from them, and this applies even if you make a drive image from a "Removable" rescue drive that does work, and restore it to one of the "non removable" flash drives.

Edit: There is a difference in the controller chips in the "Non removable" flash drives.  There are reports of some success toggling the removable bit in the controller, but only on specific model drives. On other brands and models it has either not worked, or has resulted in the complete failure of the drive.

Title: Re: USB Rescue media - what a shocker !
Post by: SpeedyPC on December 12, 2013, 05:58:26 AM
I could NEVER get the USB Rescue Disc bootable either. Files get copied to USB, but i can't boot ANY system with it. And apparently i'm not the only one with such problem...

+1 Me too :'(
Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 12, 2013, 12:23:46 PM
It is possible to make a workable Avast bootable rescue USB flash drive from the option provided in Avast 2014, but only on flash drives that are seen as "removable". 
So are you saying that you can make a working Avast rescue USB drive?
I used a removable drive to prepare one and it didn't work. Others here report the same thing.
If you have made it work please tell us how (what OS were you using, what version, etc.)?
Title: Re: USB Rescue media - what a shocker !
Post by: Lisandro on December 12, 2013, 01:45:11 PM
I could NEVER get the USB Rescue Disc bootable either. Files get copied to USB, but i can't boot ANY system with it. And apparently i'm not the only one with such problem...
+1
Right now, I can't even create it...
Title: Re: USB Rescue media - what a shocker !
Post by: Undead-Divine-Assassin on December 12, 2013, 02:37:53 PM
What happens if you use a boot manager (either installed or from disk) like PLOP to add a USB boot option to systems which don't otherwise support USB booting?

http://www.plop.at/en/bootmanagers.html
Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 12, 2013, 03:30:00 PM
As I explained, the main Win PE boot file \sources\boot.wim is missing from the USB drive - it is never going to boot!
Title: Re: USB Rescue media - what a shocker !
Post by: RejZoR on December 12, 2013, 05:10:50 PM
From mid 2012, manufacturers of USB flash drives like SanDisk buckled to pressure from Microsoft, and changed the structure of all of their USB flash drives so they are no longer seen by Windows as "Removable Media". This was in order to meet with Windows 8 certification. At the same time, they announced that they no longer supported being able to boot from these drives.

for more details see http://kb.sandisk.com/app/answers/detail/a_id/12830

This issue is not confined to Avast, it also affects other rescue or recovery software that is based on booting to a USB flash drive.

It is possible to make a workable Avast bootable rescue USB flash drive from the option provided in Avast 2014, but only on flash drives that are seen as "removable". 

Some software specifically looks for "removable media" and doesn't show the newer "non removable" flash drives as an available destination at the start of the process.

But even when a "non removable" USB flash drive can be selected as a destination, and the make rescue media process is completed, some PC's see the "non removable" flash drives as normal hard drives in the boot up selection screen, but cannot boot from them, and this applies even if you make a drive image from a "Removable" rescue drive that does work, and restore it to one of the "non removable" flash drives.

Edit: There is a difference in the controller chips in the "Non removable" flash drives.  There are reports of some success toggling the removable bit in the controller, but only on specific model drives. On other brands and models it has either not worked, or has resulted in the complete failure of the drive.

I don't think that's the case, i tried both, new Sandisk Extreme drive and older A-DATA USB drive (from around 2010 i think). Neither worked...
Title: Re: USB Rescue media - what a shocker !
Post by: olddog on December 12, 2013, 11:11:15 PM
I don't think that's the case, i tried both, new Sandisk Extreme drive and older A-DATA USB drive (from around 2010 i think). Neither worked...

RejZor,

If you are referring to the situation regarding the change where currently produced drives from a number of the main manufacturers are no longer seen as  "removable", then I can only say there is a plethera of supporting documentation available on line about that.

If you are saying that you don't think that is a factor in the making of an Avast rescue USB flash drive, then I can say I have successfully produced Avast rescue USB flash drives on 2 different Transcend 4GB units, 3 Dick Smith Electronics Cat XM1450 8GB units (these identify as USB DISK 2.0 PMAP), 1 Sandisk Cruzer Micro 8GB (very early model) and one 8 GB Sandisk Cruzer Switch (about two years old and seen as removable).  They have all booted without issue on this PC (Intel DQ67SW MB, Intel i7) using the F10 key to open the Boot menu, and selecting the removable USB flash drive from there.

Conversely, attempts to make Avast rescue USB drives on 4 Sandisk Cruzer Switch 8GB flash drives, all of which are the new "Windows 8"" type (and are not seen as removable) have failed. 2 of these drives seem to work well enough as general purpose USB flash drives, but also can't be made into bootable Paragon recovery drives. Despite being seen by Windows 7 64 bit as normal hard drives, Paragon's WinPE recovery builder doesn't see them as valid destination media because they appear as normal hard drives. The other two are totally unreliable and more often than not have to be reallocated a drive letter when ever they are inserted just to get windows to see them. 
Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 12, 2013, 11:15:39 PM
Under what OS were you running the Rescue disk creation utility?
Title: Re: USB Rescue media - what a shocker !
Post by: olddog on December 12, 2013, 11:21:26 PM
Under what OS were you running the Rescue disk creation utility?

It's in my signature - Windows 7, 64 bit.
Avast 2014.9.0.2008.

Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 13, 2013, 01:41:05 AM
Hi
I tried several times using the same 'removable' flash drive and it always failed to format the drive correctly.
However I tried a different one (8GB Verbatim removable) and it worked.
I then tried a 2GB Lexar flash drive (Removable) and that worked too.
I then used BootIt to 'flip the RMB' so that it became a Fixed disk. When the Avast utility tried to format it, I got a 'Preparing files' message and then it simply finished (no error message). Note that when a removable flash disk is used, Avast warns that the drive will be erased. This does not happen when the drive is converted to a 'fixed disk' type.
Also note that the tool lists both removable and non-removable USB drives (even though non-removable drives won't work).

The 2nd issue is to do with the 'Drive A:' error message you get when the USB drive boots to WinPE - this occurs (it seems) because the code is looking for the \rescue folder on a removable drive.
If I make a rescue-disk.iso using the Avast tool and copy it to my Easy2Boot multiboot removable USB drive + extract the whole \rescue folder to the USB drive, then it boots OK.
If you do the same thing but to a Fixed-disk type of Flash drive or a USB Hard disk, then you get the 'Drive A:' error when WinPE boots.

So the utility does work (I used Win7-64bit SP1) but you need a reliable, removable USB drive.

Title: Re: USB Rescue media - what a shocker !
Post by: olddog on December 13, 2013, 01:58:29 AM
I then used BootIt to 'flip the RMB' so that it became a Fixed disk...

The Lexar Bootit utility gets mixed results, it is reported to work on some model Lexar flash drives and not others. From memory it doesn't work with the larger sizes.

It also doesn't as far as I am aware work with other brands (it may be specific to a particular controller chip). It certainly doesn't work with any of the Sandisk drives I've tried. Sandisk say they have no equivalent utility for any of their products.

One of the bad aspects of this removable/non removable thing is that it is not generally specified on the packaging. The two versions of the Sandisk Cruzer Switch drives I have are identical to look at including what is written on them.  I've seen some very recent packaging that advertised the product being Windows 8 certified, or words to that extent (and they are definitely not seen as removable), but some packaging gives no indication.  As the "non removable" drives works in terms of general usage, one can't return them in most stores because they can be booted from.
Title: Re: USB Rescue media - what a shocker !
Post by: stevesi on December 13, 2013, 02:18:28 AM
OK - just to add to my last post and revise my statement that the USB tool works ...... It 95% works because is does not seem to write a valid Master Boot Record to the USB drive!
The following was done using 'removable' flash drives.

I used a 2GB USB flash drive which I had previously used for HitmanPro. When I booted from it after running the Avast USB installer tool - it still booted to HitmanPro. The drive itself contained the correct Avast files and folders. To prove it, I installed a standard MBR using RMPrepUSB and it then booted to Avast Rescue just fine.

In a 2nd experiment, I wiped the bytes in the MBR but left the partition table intact on the working Verbatim drive I used earlier. I then reinstalled Avast on it and the MBR was NOT changed and of course it did not boot.

If I wipe a USB flash drive using RMPrepUSB - Clean, then the drive is not listed by the Avast USB tool. So it needs a partitioned/formatted USB drive but it assumes that it contains boot code in the MBR of the flash drive.

I suggest that people therefore format their flash drives using  RMPrepUSB (as FAT32+HDD) or a similar tool to ensure that it contains valid boot code in the MBR (first sector).
If you format using Windows 7, it may format the drive as a floppy disk with no MBR and therefore it will not boot to Avast WinPE. You can check that it has a valid MBR and partition table using a suitable utility (e.g. RMPrepUSB - Drive Info - 0).

As many store-bought flash drives come ready-formatted and don't contain MBR boot code, this may explain why it doesn't work on some flash drives...?





Title: Re: USB Rescue media - what a shocker !
Post by: olddog on December 13, 2013, 08:37:03 AM
It 95% works because is does not seem to write a valid Master Boot Record to the USB drive!

I raised some of the problems relating to making an Avast USB rescue drive on Ticket  #LSI-274-95323 back on 12th of November. After some further correspondance where I it was elevated to Level 2 on 19th November and subsequently sent to developers on 22nd November. on 25th November I pointed out that Avast was not properly writing some of the first 512 bytes on the drive, and the results varied depending on what format was placed on the drive prior to the Avast process.

I have heard nothing since.  I assume it is still with the developers.