Avast WEBforum
Other => General Topics => Topic started by: evilgreendwarf on January 15, 2008, 08:57:16 PM
-
Running Avast home 4.7 with windows xp home PC spec 3Ghz Pentium, 1gb ram.
When I run a quick scan it completes fine, but when I try to run a standard or thorough scan it seems to freeze although task manager shows it as running. It has been left overnight in this condition with no change to the file it is supposed to be scanning.
Problem seemed to start following a failed update when my PC was locked with system using 100% CPU. I have managed to resolve the 100% usage issue by disconnecting from broadband internet and uninstalling Avast using the avast uninstall programme and reinstalling. When rebooted (disconnected to internet) 100% CPU usage solved.
But still unable to run full scan to completion on 2 of the 3 partitions on the hard drive. ???
Anybody got any ideas ???
-
How exactly does it freeze? Does it happen always approximatelly at the same place/folder of the scan? Do you see a hard disk activity (when it freezes)? Is only the program frozen, or the whole computer (possibly with mouse cursor)?
Additionally, you can go to the program settings and turn on the creation of the report file (with "OK files" to be included as well in the report). This way, you can find out where the scan really stopped (it's going to be close to the end of the report).
After avast! disappears, check the end of the report file - the "troublesome" file is likely to be close to the end (close in the sense that this particular file will probably not be written in the report, but the previous one will be the last line, so it shouldn't be hard to guess). We would certainly like to have this file - if it really causes problems to avast! - so that we could fix the problem.
The report file created (if you turned it on in program settings) will be (default location) at <avast4>\Data\Report\Simple User Interface.txt
-
End of the report as follows
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc29.exe\[PECompact]
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc29.exe
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc3.bak
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc4.wab
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc5.dbx
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc6.dbx
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc7.dbx
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc8.dbx
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\Dc9.dbx
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\desktop.ini
C:\RECYCLER\S-1-5-21-2674868632-2188511128-308262588-1008\INFO2
C:\System Volume Information\MountPointManagerRemoteDatabase
It freezes in the sense that Task manager shows it running but nothing happens if left overnight. The rest of the PC continues to work normally. I think twice it has stopped in the same area but cant be sure it definitely stopped in another location on one of the scans When I run it again I'll post the end of the report to confirm location
-
Seems ok until the end... just not finishing... this problem is new for me. Maybe the programmers could help.
-
Hi.
I am seeing the same issue. :'(
Doing a quick scan seems to work OK, but when doing a standard or thorough scan, Avast! freezes. I have left the PC running overnight to see if it made any difference, but so far no go. The program was stuck scanning the same file in the morning - or so it said.
When running a quick scan the scan finishes, but strangely enough, when I reopen the screen, Avast! reports that no scan has ever been performed.
I have done several tests while my PC was disconnected from the web, including turning off any other programs running such as my firewall. Still the standard and thorough scans hang. I am able to click the pause, but pressing it again to procede with the scan does absolutely nothing. I can also press the stop button as well as the "x" to close Avast!, though I end up having to stop the scan via task manager.
I am using Avast! 4.7, the patches are all up to date. My PC is running Windows XP, sp2. It has 3GB ram and lots of free space on the 500GB harddisk. The PC is brand new and was only installed about 2 weeks ago.
I would appreciate it if you would look into this as I am convinced I am not the only one experiencing this issue.
Thanks and regards,
Janie
ps. the live protection (On-access scanner) seems to work OK and so does scanning a file manually after download.
-
The program was stuck scanning the same file in the morning - or so it said.
Which is this file and path?
-
Could you create and upload the dump (preferably under some random name), as described here (http://forum.avast.com/index.php?topic=33616.msg281371#msg281371)?
Thanks.
-
Hi, Tech.
The number of files scanned varies every time I run the scan so the file being scanned when it hangs also varies.
-
Could you create and upload the dump (preferably under some random name), as described here (http://forum.avast.com/index.php?topic=33616.msg281371#msg281371)?
Thanks.
Hi, Igor.
Yes, I will give that a try and post back when the dump has been uploaded.
-
Guys,
I've done some more testing on my pc, and have found that unchecking "Recycler" and "System Volume Information" from the list of folders will let the thorough scan run without any problems. I didn't check standard scan, but I expect this will work OK too.
These two folders are system folders and hidden by default. However, I and probably a few other users out there, have opted to show all hidden files in the Windows XP folder options. I have not yet tested what happens if I hide these files, but I can imagine that the scans run properly as the folders will not be showing in the scan list - or so I assume.
I guess most Windows XP users do not change much in their setup, and it would be interesting to see if the other users who are experiencing this issue have also chosen to show hidden system folders.
Anyway, I tested 4 different scenarioes. Dumps were created from scenarioes two and three. I will upload them to the ftp-server as soon as possible.
One
********************
1. Started ashSimpl.exe
2. selected folders, C-drive, unchecked recycler and Sys. volume info
3. Chose thorough scan
4. Did not select to scan archives
The scan finished in 11 minutes 45 seconds without any problems.
Two (dump available)
********************
1. Repeated steps 1 and 2 above, this time including recycler and Sys. volume info
2 Did not select to scan archives
3. Selected thorough scan
The scan hangs while scanning file number 26585, file name is S-1-5-21-725345543-1123561945-839522115-500. This file is located in the recycler. I then paused the scan and tried to stop it, but I eventually had to use task manager to stop the scan.
Three (dump available)
********************
1. This time I selected to uncheck the recycler, but check sys. volume info
2. Selected to scan archives
3. selected thorough scan
The scan hangs scanning c:\program files\ZoneLabs\Zonelarm according to the GUI. File number is 146441. Checking the report (I enabled this option in program settings), the last file scanned was c:\System volume Information\MountPoint manager
Four
********************
1. Selected to scan C-driv, unselected both recycler and Sys. volume info
2. Selected to scan archives
3. Selected thorough scan
The scan finished in 18 minutes without any problems
I hope this information helps find the root cause of the issue.
Thanks and regards,
Janie
-
Which version of ZoneAlarm are you using, exactly? Can you try updating to the latest version (if not used already)?
According to the dump, the issue is exactly the same as this one:
http://forum.avast.com/index.php?topic=31531.0
Thanks
Vlk
-
Hi.
The version of ZoneAlarm is the free version. Here is the info according to "about"
ZoneAlarm version:7.0.462.000
TrueVector version:7.0.462.000
Driver version:7.0.462.000
Update is run automatically, but I'll check on their website to see if a newer version is available.
The version according to "About Avast!" is 4.7.1098 (build Dec2007). It is the Avast! home version. Choosing Program update says that both program and vps files are up to date.
The format of my harddisk is indeed ntfs. There is an external harddisk attached via USB, format is ntfs too. It can easily be disconnected for testing purposes so I will try this later today.
Hmmm... klif... there is an instance of klif.sys on the C-drive. This pc was custom built for me and Windows XP was installed by the vendor. One of the demo programs installed was Kaspersky which I deinstalled straight away together with all the other crap - pardon my French! There might be some debree left on the harddisk and in the registry :-[
I should probably also mention that my pc was disconnected from the internet and the firewall (ZoneAlarm) disabled while the scans were run. The old pc was using the same combo (Avast! and ZoneAlarm) without any problems, by the way.
I am reading the other strings on the forum, and can't help but wonder how the issue was solved for GrahamE (see the thread you referred to above). If the issue is indeed the same, then please let me know what I can do to solve it.
For now, I will just not scan the recycler and the system volume information forlders on my harddisk and hope all is well......
Thanks and regards,
Janie
-
Try removing klif.sys first.
Just rename the file (e.g. to klif.sys.old) and reboot. It shouldn't do any harm unless other parts of Kaspersky are still running on the system.
My understanding is that it's a actually the ZA + Kaspersky combo that is causing the problem (i.e. you need to have both ZA and KLIF.SYS installed for the problem to take place).
Thanks
Vlk
-
Hi.
I wish I could say that renaming klif.sys to klif.sys.old helped, but I can't. I tried running the scan again after rebooting, but it hangs just like before, be it at a different file since I specified to scan only certain directories including recycler and system volume information.
BTW, I upgraded my firewall to the latest version (7.0.470.000). That didn't help either, nor did hiding the hidden files/folders in folder options.
I don't know where to go from here except to use the workaround I found, ie. unchecking recycler and System Volume Information before starting the scan or look for another firewall/virusscanner.
If you have any more ideas, please let me know.
Thanks and regards,
Janie
-
Well, if you'd REALLY like to analyse the problem deeper, you could force creation of a full memory dump and send it to us for deeper analysis.
The procedure is described here: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71
Thanks
Vlk
-
OK, I'll give that a try, probably tomorrow.