Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: valuelurker on January 08, 2006, 03:40:33 AM
-
Offline Files in XP pro crashes, sys freeze with Avast Pro 4.x
Long story short, I am testing out (demo) Avast Pro 4.0 for my shop, looking to switch from Mcafee. All laptops networked to a server. We use XP Pro and synch to our server files to always have a virtual copy of the network on the go. Info here http://support.microsoft.com/default.aspx?scid=KB;en-us;307853& (http://support.microsoft.com/default.aspx?scid=KB;en-us;307853&)
Mcafee had the same kind of problems, but they figured it out. I am disappointed, and I a user and avast home 4.0 and like it.
Here is the situation, after the desktop loads up, everything just freezes. How do I know it is Avast? Safe mode boot, uninstall Avast Pro 4.0 and I am back in business. Only with no virus protection.
If anyone has a solution, ideas, etc, let me know.
-
Here is the situation, after the desktop loads up, everything just freezes. How do I know it is Avast? Safe mode boot, uninstall Avast Pro 4.0 and I am back in business. Only with no virus protection.
Is this a clean installation or you have installed McAffee before in the same system?
Are you sure you're able to use avast! Professional the way you described or, on contrary, you should have the ADNM version of avast?
-
Mcafee uninstalled before Avast Pro 4.0 installation.
Are you sure you're able to use avast! Professional the way you described or, on contrary, you should have the ADNM version of avast?
Unsure as to the technical nature of the question. I am trying to replace one virus scanner with another. I am aware of a issue that virus scanners don't like, offline files, at it seems to be an issue here in that the system hangs before the offline files can load up.
-
This very much sounds like a conflict with some other application running on the machine. Most usually this is another AV (maybe forgotten but still running on the background, or just incompletely uninstalled) but from time to time can also be some other software (especially low level software).
Could you please post e.g. output from HijackThis http://216.180.233.162/~merijn/files/HijackThis.exe
Thanks
Vlk
-
Hi!
I have a similar Problem but am unable to find the cause. I have Win XP64 and installed Avast in November. Everything worked fine until the week before christmas.
I figured out to change the services of avast to manual (from automatic). Now i am able to boot without freeze, but in the moment i activate them everything is frozen.
I make the hijack dump tonight, but the system should be as clean as possible since i have not much running and i could not recall installing anything in that time.. except maybe the starforce driver becouse of a new game...
bests, dready
-
Logfile of HijackThis v1.99.1
Scan saved at 11:07:38 AM, on 1/9/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Chaos Software\Chaos 6\alarm.exe
C:\Program Files\D-Link AirPlus Xtreme G\AirPlus.exe
C:\Program Files\eFax Messenger Plus\HotTray.exe
C:\Program Files\eFax Messenger Plus\Dllcmd32.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\Documents and Settings\Scott Koser\Local Settings\Temporary Internet Files\Content.IE5\ON9ZAMJX\HijackThis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://csimac.blogspot.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: My Search Bar - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - C:\Program Files\MySearch\bar\1.bin\S4BAR.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exeX
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Cleanup] C:\DOCUME~1\SCOTTK~1\LOCALS~1\Temp\2005122914538_mcappins.exe /v=3 /cleanup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [alarm.exe] "C:\Program Files\Chaos Software\Chaos 6\alarm.exe"
O4 - Global Startup: ACS.lnk = ?
O4 - Global Startup: D-Link AirPlus Xtreme G Configuration Utility.lnk = ?
O4 - Global Startup: D-Link REG Utility.lnk = ?
O4 - Global Startup: eFax Tray Menu.lnk = C:\Program Files\eFax Messenger Plus\HotTray.exe
O4 - Global Startup: Live Menu.lnk = C:\Program Files\eFax Messenger Plus\Dllcmd32.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {FF0F7B6E-D733-11D7-8088-0001024743E4} (veoExpress.ctlVeoExpress) - https://www2.advisorservices.com/AdvisorWeb/ActiveX/veoExpress.CAB
O18 - Filter: text/html - (no CLSID) - (no file)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
-
Hi, here is my hijackthis log.
Bests, Dready
Logfile of HijackThis v1.99.1
Scan saved at 17:57:21, on 09.01.2006
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)
Running processes:
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files (x86)\GetRight\getright.exe
C:\Program Files (x86)\Razer\razerhid.exe
C:\PROGRA~2\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files (x86)\Razer\razerofa.exe
D:\Download\Applications\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://update.microsoft.com/
F2 - REG:system.ini: UserInit=userinit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files (x86)\GetRight\xx2gr.dll
O4 - HKLM\..\Run: [Microsoft LSASS Network File] C:\WINDOWS\SysWow64\KLSASS.exe
O4 - HKLM\..\Run: [razer] "C:\Program Files (x86)\Razer\razerhid.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~2\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [XPAgent] C:\WINDOWS\system32\XPAgent.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files (x86)\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - C:\Program Files (x86)\GetRight\GRdownload.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~3\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files (x86)\GetRight\GRbrowse.htm
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~3\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129936856713
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129963893765
O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 - Winlogon Notify: EFS - C:\WINDOWS\SYSTEM32\sclgntfy.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2saag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)
-
With Avast Pro 4.0 uninstalled, had to be able to use laptop.
-
Btw, you still emphasize that it's avast 4.0 (which would be very old) - isn't it rather avast! 4.6?
-
Btw, you still emphasize that it's avast 4.0 (which would be very old) - isn't it rather avast! 4.6?
Yes, that is my bad, thanks for catching that. It's a fresh download of the pro version over the last weekend.
-
Hmm, I didn't find anything suspicious in either of the logs... ???
Probably the only really reliable way to find out what's going on is to generate a dump of the system at the moment the problem happens (i.e. the machine is frozen).
But it's not exactly trivial.
Instructions are here: http://forum.avast.com/index.php?topic=2850.msg20171#msg20171
I'm sorry for the troubles. ;)
Vlk
-
sounds good, i will try that tonight.
bests, dready
-
Thanks. When you have the dump, please ZIP it (give the ZIP file a unique name - e.g. your name) and upload it to ftp://cat.asw.cz/incoming.
Please note that you won't have READ access to the ftp site, just write, so you won't see the contents of the directory as well as the file you have just uploaded.
Thanks
Vlk
-
Hi!
Sorry, but it did not work. Maybe it is becouse of Windows XP 64? Or something is stopping so the system is not able to read the Keyboard Input...
bests,
-
It works even on WinXP x64.
One thing that Vlk didn't emphasize, however, is that initiating the memory dump doesn't work with USB keyboard - it has to be PS/2 (or DIN ;D). Could it be the case?
-
Nope.. i have a normal PS/2 since i don't want to load another driver just to have my keyboard running ;D
I also tried another Testcase: I started the Service and went to sleep, in the morning i still was able to move the mouse over the avast icon and see how many providers are working.. but as soon as i went to start->ControlPanel everything was frozen like before ...
bests, dready
-
Strange... are you sure you pressed the right Ctrl... and that you didn't e.g. put a trailing space after the registry value name (it happend to me...)?
-
Hi!
Yes, i used the right one.
I started everything from scratch and now it worked (a little puzzeling)...
I am now uploading the file called Dready.zip .. it has about 170 MB (zipped) will need another 40 Minutes.
Don't know what went wrong on the first attempt.
bests, dready
-
ok its uploaded.
-
I'll have a look at it asap.
Please note that I'm just about to leave for my winter vacation, going to spend the next 12 or so hours in my car. Hopefully, there'll be some kind of connectivity at where I'm staying. If so, I expect to get back to you tomorrow (Sunday) as soon as I get back from the slopes.
Thanks :)
Vlk
-
Deady, do you have an idea what the file \windows\system32\drivers\acedrv05.sys belongs to??
-
Hi!
It was kind of problematic, but i was able to find out that the file is connected to the Firm Protect Software GmbH (http://www.protectcd.de/With_FL/html/index_de.html) and i think i had installed it with Sacred, since i have the File on 3 Computers and all 3 have Sacred installed at that time.
One of the other PC's has Windows XP (normal 32bit) and avast is running all right. (The acedrv05.sys is also on that machine).
thx, for triing to find the reason!
bests, dready
-
Hello,
i have the same Problem of 3 Computer.
Excel freeze to save a Dokument.
The Document save the Excel Sheet to the Offline file and when to delete the temp Files hangs Excel.
http://forum.avast.com/index.php?topic=12819.0
http://forum.avast.com/index.php?topic=17603.0
Waht is wrong?
Thanks for Info
Logfile of HijackThis v1.99.1
Scan saved at 08:40:23, on 16.01.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\Programme\Intel\Wireless\Bin\WLKeeper.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_WatchDog.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
C:\Programme\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Programme\Power Translator 10\LogoMedia TranslateDotNet Server.exe
C:\Programme\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Intel\Wireless\Bin\OProtSvc.exe
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\UPHClean\uphclean.exe
C:\Programme\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnat.exe
C:\PROGRA~1\TOBITI~1\David\APPS\REPLICA\CODE\REPLICA.EXE
C:\PROGRA~1\TOBITI~1\David\CODE\SL.EXE
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
C:\Programme\Alwil Software\Avast4\ashWebSv.exe
C:\Programme\Citrix\ICA Client\ssonsvr.exe
C:\Programme\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_GUI.Exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\Launch Manager\LaunchAp.exe
C:\Programme\Launch Manager\HotkeyApp.exe
C:\Programme\Launch Manager\OSD.exe
C:\Programme\Launch Manager\OSDCtrl.exe
C:\Programme\Launch Manager\Wbutton.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe
C:\Programme\Intel\Wireless\Bin\EOUWiz.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\Norton Ghost\Agent\GhostTray.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Programme\CASIO\Photo Loader\Plauto.exe
C:\Programme\Citrix\ICA Client\pnagent.exe
C:\Programme\Microsoft Office 2000\Office\1031\OLFSNT40.EXE
C:\Programme\Microsoft Office 2000\Office\1031\msoffice.exe
C:\Programme\Tobit InfoCenter\DVWIN32.EXE
C:\PROGRA~1\TOBITI~1\DVREMIND.EXE
C:\Dokumente und Einstellungen\Andreas_Schwarz.GUENTHART\Desktop\HijackThis.exe
-
Dready, does it mean that if you uninstall "Sacred", the problem disappears?
I.e. it's a collision between avast and Sacred?
-
Hello,
what is scared ??
thank
-
Dammit... i thought i could avoid that ;)
ok, i deinstalled sacred.. it did not work since the sys File was still there (i hate copy protection which does not leave the system when uninstalling the game)..
Then i renamed the File so it was not able to work and rebooted. I tried avast and everythink worked fine. So your definetly right, it is that protection File.
Now the question is: Will i have to deinstall the game and the File to get Avast running or is there a way to upgrade avast for it? The problem: the game is like diablo, something you always play and which does not stop after playing it through...
bests, dready
@brown: http://sacred-game.com/
-
touch thread to top
-
Thanks. Just got back from the mountains.
I have sent an email to the makers of the copy protection software. Hopefully, we'll be able to solve the conflict together asap.
Thanks for all your help,
Vlk
-
thanks!!
best regards, dready
-
Dready, could you please try one more thing?
Add the following mask to the scanning exceptions of the Standard Shield:
*\acedrv05.dll
Save the changes and reboot with the acedrv05.sys driver in place.
Would that make any difference?
Thanks for your help
Vlk
-
Hi!
Just tried that, but no difference.
- I went to the settings => Exclusions
- added the file
- restarted
- checked again if file is there (excluded)
- went to manage=>services and activatet the avast service
- went to start=>control panel => freeeze... as before
bests, thomas
-
And what if the Standard Shield provider is paused altogether?
Does that make any difference?
Or stopped?
Thanks :)
Vlk
-
Hi!
Sorry for the late reply, i am in the middle of my marriage preperations...
No change when pausing the shield or all together..
bests,
-
Hi Dready,
already married? ;)
BTW I think I found the cause of the problem, and created a work around (a patch).
To install it, simply download this file: http://cat.asw.cz/misc/acedrv-fix/aswMon2.sys and place it to the \Windows\System32\Drivers folder (replace existing version). Then restart the machine, and see if it has any effect.
Note this patched driver is for 64-bit Windows only (x64)!
Thanks, and greetings to your fiance
Vlk
-
Hi!
Yepp, now i am back from honeymoon and through all my emails... since i changed my name i had to move all my mails on gmail from one to another account and i had to work through all of them to get them sorted again ;-(
well now i have finally found this one, i will try the file today, hopefully everythink will work fine.
best regards, dready
-
ITS WORKING!!!
You are great! Many thanks!! And also many apologies for the long respond times...
Wow.. it is just so cool that finally everything is working again..
thx, dready
-
***
Congratulations on your marriage, Dready! :D
And congratulations on ... "Wow.. it is just so cool that finally everything is working again.. " :)
***
-
Thanx! ;D