Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on October 08, 2016, 09:39:48 PM

Title: (Solved)Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 08, 2016, 09:39:48 PM
This is on Win7 Home Premium  64 bit system.
SuperAntiSpyware Quick scan was OK
Malwarebytes found spyware.hawkeyeKeyLogger, and fixed.
Avast Free full scan ran for an hour and only looked at 10 files and stopped on winlogon.exe each time ( 4 tries ).
Rebooted and tried again, same result.
Booted into Safe Mode to try.
Opening Avast it says I'm in not protected, the background service is not running ( probably because I'm in Safe Mode? ).
Try Full Scan and get the following message: Unable to start scan, there are no more endpoints available from the endpoint mapper.
SuperAntiSpyware quick scan ran fine in Safe Mode. Malwarebytes running now, looks normal.
Avast Free is the only one of these three that is always active, the other two I run as standalones.
Any help would be appreciated and thanks for your time.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: Pondus on October 08, 2016, 10:06:21 PM
Repair and reset > https://www.avast.com/faq.php?article=AVKB204#artTitle

Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 09, 2016, 08:10:27 PM
The repair went ok, but I still have the same scenario, a full scan stalls on winlogon.exe.
I tried a Quick Scan which ran fine.
I checked the scan history and in late August the full scan ran fine.
Now starting a full scan, the system locks up tighter than a crabs butt.. Task Manager doesn't even stop it. The Avast GUI grays out with a small blue spinning circle that doesn't stop.
Only way I've been able to break out of it is unplug from the AC and remove the battery.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: Eddy on October 09, 2016, 08:17:33 PM
I suggest to follow these instructions > https://forum.avast.com/index.php?topic=53253.0
Let's see if there are things that can cause the problem.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 09, 2016, 09:53:15 PM
Just to be sure of your instructions:
I've already ran Malwarebytes, it found a key logger the other day but hasn't since. It removed the file with no problem.
So you still need me to download and run Farbar Recovery Scan Tool and aswMBR.exe?
I don't have an infected USB stick and I can boot my machine, so I don't need to run MCShield and OPTPENet.exe?
Also. I'm not sure where to post the resultant logs.
Thanks for your time
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: Pondus on October 09, 2016, 09:59:33 PM
Only the two FRST logs are needed, and attach them here
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: bob3160 on October 09, 2016, 11:35:48 PM
You attach them right here:
(http://screencast-o-matic.com/screenshots/u/Lh/1476048893681-82266.png)
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 10, 2016, 01:18:46 AM
The Farbar files were ran from my Limited User account as an Administrator and the files ended up on that account's Desktop.
When I ran the aswMBR program, I couldn't find it on the Limited User Desktop ( I'm pretty sure I said to save it to the Desktop ) so I ran it again. When it ran the second time it seemed to run a lot quicker, I found it on the Desktop of the Admin account.
So here they are, please let me know if this is how you needed them.
Thanks again for your time.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 12, 2016, 08:14:49 AM
Can one of the moderators please move this thread to the Virus / Malware section.  Thank you.

pbmac => The reason for the scan stalling is that you have a possible ZeroAccess infection.  We will try and remove what we can with this script and then check to see what else we need to do.



FIRST >>>>

Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed):

Coupon Printer for Windows
QuickTime 7
Yahoo! Toolbar

To do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window. 

Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software.


SECOND >>>>

(https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif) Fix with Farbar Recovery Scan Tool
(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) This fix was created for this user for use on that particular machine. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)
(https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif) Running it on another one may cause damage and render the system unstable. (https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif)
Download attached fixlist.txt file (located at the bottom of this post) and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

Please attach it to your reply.


LAST >>>>

If you still have a Addition.txt log file on your desktop, please delete it now.

Start FRST64 that is on your Desktop by double clicking and allowing the software to run when the User Access Control asks (if it does).

The tool will start to run.
When the tool opens click Yes to disclaimer. (if it does)

Select Additional.txt in the Optional Scans section of FRST64.

Press Scan button.

It will make two logs (FRST.txt and Addition.txt) on your Desktop. Please attach the logs in your reply back.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 12, 2016, 03:03:41 PM
Under "LAST>>>" you say to remove the Addition text file generated from the first time I ran FRST. Should I also remove the FRST text file as well? They both reside where the FRST app is, all on the Desktop. Or just rename them.Thanks.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 12, 2016, 05:42:23 PM
You can remove both log files (FRST.txt and Addition.txt); they are backed up in a separate directory if needed anyway.  We ask for the Addition.txt file to be deleted as FRST used to leave that file instead of replacing it.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 12, 2016, 07:45:24 PM
Logs attached.
Thank you.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 13, 2016, 08:06:17 AM
The script seems to have fixed some issues but the rescan did not show everything needed.  Can you log in as the Main Admin and run the FRST scan again?  Thank you.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 13, 2016, 03:04:48 PM
You probably think I'm crazy for this, but I wasn't sure if you wanted me to "Run As Administrator" or run the scan from the Main Account.
I did both just in case there is a difference.
The "*_1" logs were ran on the Main Admin account.
The "*_2" logs were from the Limited User account, but "Ran As Administrator".
Thank you.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 13, 2016, 08:21:49 PM
You have two different versions of Skype on the machine; I would uninstall from both users for the time being and decide on whether needed or not.  Also, why is ooVoo on the system?  It seems to be blocked by the firewall rules so is it needed?

After these uninstalls (or version correction for Skype), does a full scan by Avast under the Main Admin account (not Alex account) still hang?
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 14, 2016, 05:26:15 PM
I removed both Skypes and the ooVoo.
Ran a full scan on the Admin account and it ran fine.
While uninstalling ooVoo it a box came up thanking me for installing some kind of tool bar, plus there were boxes with IE and Chrome references in regards to settings. The network switch was off so I wasn't ( always disconnect when doing this sort of stuff ) connected to the internet. Not sure if this info is meaningful to you or not. Rebooted the machine and no sign of Skype or ooVoo.
If there's still more work to do these following questions can wait:
- The sleep settings have changed. Usually I just move the mouse and the desktop comes up, now I have to hit the power button once and   click on the account. Any significance here? Not a big deal to me.
-The Avast scan history only goes back to 10/8 when this problem first started, is this normal after the fix?
-Is there any cleanup post fix that needs to be done?
-Should I always run my AV scans from the Admin account? Or does running the program on the Limited User account "as an Administrator" function the same way?
-In scan history for the full scan that ran last night there are a bunch of files that could not be scanned. They all seem to have the words; archived and password protected in them, any worries about these?
Thank you again for your time.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 15, 2016, 05:45:47 AM
Running a program under the "Run as Administrator" seems to fine and in some cases better.  The password archives are not a concern; the malware in them (if there is any) can not do anything in a archived state and once out in the open, Avast will immediately pick them up.

As long as Avast is back to running and scanning then you should be good to go.  We will clean our tools and you are on your way...


Clean up of Malware Removal Tools
Now that we are through using these tools, let's clean them off your system so that should you ever need to have malware removed again (we hope not) fresh, updated copies will be downloaded.

(http://i1351.photobucket.com/albums/p785/dbreeze2/just%20stuff/DelFixSelectall_zps0f04cec4.png)
You can delete any log files left on your desktop as these are no longer needed.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 15, 2016, 08:06:05 PM
Here's the Delfix text file.
After it finished, many links and icons were removed from the Desktop.
I downloaded and ran Delfix from the Limited User account/Desktop, it asked for the Admin password to run.
The Limited User account background is there, but the icons match what are on the Admin Account's Desktop.
Should I just do a restart?
Thanks
Edit:
I restarted the machine and the Alex(Limited User) account looks fine now with all shortcuts and files on the Desktop, however, FRST, Aswmbr and Delfix are still there. I logged off that account and checked the Admin account, and FRST ( only one ever ran from there ) is gone. Is this something to do with running Delfix from the Limited User account "as Administrator"? The Delfix really took a long time on "cleaning restore points", not sure if that's meaningful to you.
Thanks.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 17, 2016, 09:40:02 AM
Delete the tools left on the desktops please; they are no longer needed.  As to the restore point deletion taking a long time, you had a lot of restore points removed and DelFix (I believe) removes them one at a time.  The idea is to remove what could possibly have malware stored in it and to leave you with a good starting point (a base, so to speak) to go forward with.

Run your scans from each account when you can but use the "Run as Administrator" regardless of what account you use.  This triggers certain permissions to be added to the task level.

Thanks for sticking with us and come back and ask if you need any more help.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 17, 2016, 04:13:16 PM
Just a couple more quick questions , please.
I'm probably missing where you told me this already, but, is there a better account to run my scans from? The Admin or The Limited User ( as an Administrator )? I know you stated whichever one I run from be sure to run as an Administrator. For some reason I was under the impression, actions performed on/from the Admin account affected the entire system and all other accounts.
Also, is there a way to mark the thread solved?
Thanks again for your time.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: bob3160 on October 17, 2016, 04:19:05 PM
To mark the topic as solved, simply edit your first post and change the title to:
(Solved) Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 18, 2016, 03:55:11 PM
Thank you bob3160. Posting this in hopes dbrisendine will see I had one more lingering question from reply#19.
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: bob3160 on October 18, 2016, 04:04:31 PM
Quote from: pbmac on October 18, 2016, 03:55:11 PM
Thank you bob3160. Posting this in hopes dbrisendine will see I had one more lingering question from reply#19.
Your welcome.
Once signed in as a User, changes made via Admin, only effect that users settings. It allows changes to be made for that
individual user that can only be made by the Admin.


To effect all users, you would need to start your Windows session as the Admin not as an individual user.
Hope that answers your remaining question. :)
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: dbrisendine on October 18, 2016, 04:34:01 PM
Thanks, bob3160.  Good answer (as always, I see  ;) ).
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: bob3160 on October 18, 2016, 04:37:13 PM
Quote from: dbrisendine on October 18, 2016, 04:34:01 PM
Thanks, bob3160.  Good answer (as always, I see  ;) ).
My pleasure. You already had your hands full and this was an easy question to answer. :)
Title: Re: Avast Free Full Scan Hangs After 10 Files on winlogon.exe
Post by: REDACTED on October 19, 2016, 06:01:32 AM
Thanks for your help and your time.