Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: RonaldLeussink on February 04, 2003, 08:22:23 AM

Title: RPC error ?!
Post by: RonaldLeussink on February 04, 2003, 08:22:23 AM
At home I've installed Avast! 4 home edition, but when I press the "a-sign" in the system tray I get the error-message: "The AAVM subsystem detected a RPC error". There is also a sort of traffic sign upon the "a-sign" in the system tray. It is white and round with a red border and a diagonal red line in it.
 
For your information: My PC: Windows XP Home edition SP1. I updated the latest virusprotectionfiles and programs from Avast!
Title: Re:RPC error ?!
Post by: Roman Svihalek on February 04, 2003, 10:47:38 PM
The stop sign signals that avast! service is not running. It means that resident protection of avast! is not working!!!
Check your task manager for ashServ process - it won't be probably on process list. If this is the case check Services administrative tool for avast! service and start it...
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 06, 2003, 09:56:01 PM
Roman, thanks for your comment, but it didn't help. When I try to start the service "avast! Antivirus" I get an error-message. It is (translated from dutch XP-version): "Cannot start avast! ...... Error 1068: dependency-service or -group cannot be started". Of course I've look at the dependencies but could not see anything strange (RPC... was started). What is wrong with my PC?
Title: Re:RPC error ?!
Post by: Roman Svihalek on February 07, 2003, 10:41:41 AM
It looks quite interesting. avast! service has only one dependency - on RPC service. So problem is probably with starting this service..
Check status for this service in your system, it should be enabled and running. avast! uses RPC for multiprocess communication...
Title: Re:RPC error ?!
Post by: Vlk on February 08, 2003, 02:57:36 PM
Quote
avast! service has only one dependency - on RPC service. So problem is probably with starting this service..

Well, not really, it has dependency on the avast! filter driver as well. Please check if you have the files aavmker4.sys and aswmon2.sys present in the <windows>\system32\drivers folder.

Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 09, 2003, 09:11:31 PM
I've checked both statements; the one from Roman on feb. 7th and the one from Vlk on feb. 8th. But without any result. I do have RPC running as a service and I do have both mentioned files in \windows\system32\drivers. On another partition on my PC I have the same OS and installed Avast! 4 as well. On that partition everything is running well and I cannot see any difference.

Any more suggestions?
Title: Re:RPC error ?!
Post by: Vlk on February 13, 2003, 05:46:05 PM
I'd suggest to attempt to reinstall avast... it doesn't take more than a couple of minutes and is likely to help...

Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 14, 2003, 07:42:51 AM
I've already reinstalled Avast! 4 two times but with no success.
Title: Re:RPC error ?!
Post by: Vlk on February 14, 2003, 01:25:09 PM
What about the Event Viewer? Doesn't it show anything suspicious?

If the RPC Service is actually running, there is probably only one possibility - that the avast! Kernel mode filter driver (aswmon2.sys) could not be started... In this case, there should be an entry in the event log (a new one for every start of the computer)...

Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 15, 2003, 04:15:22 PM
Indeed...the event viewer shows an error at every start of the computer. The error is: The avast! Standard Shield Support-service cannot be started because of the following error:
The system cannot find the mentioned file.
For help and support http://go.microsoft.com/fwlink/events.asp.

Because I have a dutch version of XP Home I had to translate the error message. At the microsoft URL nothing helped me to solve the problem.

Which file should be missing? There must be one because of this error message?
Title: Re:RPC error ?!
Post by: Vlk on February 15, 2003, 06:25:28 PM
Since you have the aswMon2.sys file there (you already checked that), there must be something very odd in the settings. Please open the registry editor and look up the HKLM\System\CurrenControlSet\Services\aswMon2 key. What does it contain? Is it there at all?

Thanks,
Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 17, 2003, 09:44:07 PM
The aswMon2key is there, as you described. The name, type and values for the aswMon2key are:

(Standaard)  REG_SZ  (no value...)
DisplayName REG_SZ  avast! Standard Shield Support
ErrorControl  REG_DWORD  0x00000001 (1)
Start  REG_DWORD  0x00000002 (2)
Type  REG_DWORD  0x00000002 (2)

The aswMon2key contains one "subfolder", named "Enum" with the following:
Standaard)  REG_SZ  (no value...)
Count  REG_DWORD  0x00000000 (0)
INITSTARTFAILED  REG_DWORD  0x00000001 (1)
NextInstance REG_DWORD  0x00000000 (0)


Title: Re:RPC error ?!
Post by: Vlk on February 19, 2003, 07:42:04 PM
What happens if you execute the following command:

net start aswMon2

(from the command line)??
Also, you may want to check the AavmKer4 key is well (at the same location as aswMon2).

Thanks,
Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 19, 2003, 09:19:03 PM
When I start a dos command prompt and go to c:\windows\system32 I give the command "net start drivers\aswmon2". Than I receive the following message:

Systemerror 123.
The syntaxis of the filename, mapname or volumename is incorrect.

I receive the same message at aavmker4.
Title: Re:RPC error ?!
Post by: kubecj on February 19, 2003, 11:48:28 PM
Try the exact thing Vlk wrote:

net start aswMon2

(not drivers\).
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 20, 2003, 07:50:18 AM
When I click on Start and Run and than put in "net start aswmon2" there is a little black screen that appears and disappears very quickly.

Do I have to start a Dos command line (Start --> Run --> Cmd) and if "yes" in what map do I have to put the command (where do I have to be)?
Title: Re:RPC error ?!
Post by: Vlk on February 20, 2003, 08:35:42 AM
Sorry; it disappears because it completes very quickly. You're right that to see the results, you should start it from the command line. You can be anywhere, because the net program that you're executing is on your PATH (if you have no idea what I'm talking about, just don't worry about it... ;)).

Thanks
Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 20, 2003, 09:51:16 PM
"net start aswmon2" and "net start aavmker4" lead to the same errormessage:

Systemerror 2.

The system cannot find the given file.

The error appears wherever I give the command. I've checked again and must conclude that aswmon2.sys en aavmker4.sys really are in c:\windows\system32\drivers.

My path is:
PATH=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem

Do you (still) think there will be any possibility that we could get Avast! running on my PC? I still hope so ! Thank you for your cooperation so far.
Title: Re:RPC error ?!
Post by: djalmir on February 21, 2003, 09:56:56 AM
Can't start ashserv.exe  RPC is running.  I've started aswmon2 and aavmker4 from the command prompt.  I'm running XP with all the current updates as of today feb. 20th.  I scanned my system using a MS tool and can not verify one patch which has to do with the msxml.dll files.  I can't use the WMI control utility because my system id denying access.  Using the MMC for Services I get the error the AVAST service fail because it did not start in a timely fashion.  I tried changing logins for this service but no success.  Hope this helps.
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 21, 2003, 02:45:37 PM
I don't understand the comment from Djalmir. What can I do with it. It looks that I cannot start aswmon2 en aavmker4 from the command prompt, so the rest of his comment is not useful for me.

Can someone please help me to get Avast running? I've installed it on other PC's and partitions (XP and 98) and there it is running very well. But on the XP (Home Edition Dutch) partition I work with I cannot get it running.
Title: Re:RPC error ?!
Post by: Vlk on February 22, 2003, 10:21:12 AM
Just a thought: the other partitions (with the other OS's), do they also have Dutch version of Windows? It could be something related to this special language version...

I still can't figure out why is it giving the 'file not found' message when all files are actually there...  ???

Thanks
Vlk
Title: Re:RPC error ?!
Post by: RonaldLeussink on February 22, 2003, 01:40:06 PM
I have two more XP home edition Dutch installed on two other partitions and one W98 Dutch. All those three do not have any problem.
Title: Re:RPC error ?!
Post by: Roman Svihalek on February 24, 2003, 01:26:18 PM
What is the name of program files folder in Dutch version of Windows? (I mean folder which is on English version named Program Files)
Title: Re:RPC error ?!
Post by: RonaldLeussink on March 02, 2003, 08:26:18 PM
The Dutch name is the same as the Englisch one: Program Files.