Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Styx on November 15, 2008, 06:06:07 AM
-
14 Nov, 2008 Avast Home on Vista Home Premium 32 bit. Today Avast updated to new version and asked for reboot. After reboot it loaded a new set of definitions. A few minutes later it gave and RPC error. I checked FAQ and it said to ensure services were started. It restarted however after a few minutes the
Red X on icon appeared and Windows notified me it had stopped and want to check for a solution. After many trials and reboots I gave up and uninstalled Avast and used the awsclean utility. Then I downloaded
latest 4.8 version. ???
Reinstallation only helped until it again updated and the Windows Notification re-appeared with the
Red X on the icon. Presently I have uninstalled it again. Any thought how to get it working again?
-
What other security software is installed, or has been installed in the past, active or not? Particularly, what firewall do you use?
-
I use Windows Defender and Windows Firewall and have no other installed for many
months so I do not think this is an issue. Nothing else is resident at all. There is no
other Anti-virus. Adaware, SpyBot, SuperAntispyware and MalwareBytes are installed
and have NO resident parts active so used as scanner only. These also have been
installed for many months.
Since the problem started after a program and then a definitions update I suspect
the error is related to one or both of those.
-
Ok, without knowing the operating system (Vista) at all well, nor having experienced the problem, my considerations will go something like this:
If Spybots' TeaTimer were active, and causing it, it would have popped an alert.
AdAware runs a background service even when the program isn't running. (Betcha didn't know that.) It probably isn't the culprit, though, as the service is mainly there to facilitate updates, AFAIK.
Windows Defender runs resident, unless you've disabled it. It might possibly be blocking the update, but it's doubtful. Worth checking the quarantine/log, though, just to be sure.
Normally I'd suspect the firewall blocking the connection by a "new" unknown program, but unless you've configured the firewall to do this, it's doubtful.
So what I'd suggest, from this domain of partial uncertainty, is to let the Avast update occur, reboot as commanded, and if the problem again manifests, try carrying out a repair install, from the control panel. (It's one of the options available when you click "change/remove" in what used to be called "add/remove programs".)
Another thing to think about is the UAC in vista. Which I think defaults to limiting adding/removing software to the equivalent of a limited user, unless it's deactivated for the update?
Maybe someone Vize in the Vayz of Vizta can comment.
But at least try the "repair install".
[EDIT] PS After my Avast auto updated, I also immediately got the definitions update. So that aspect isn't unusual. The problem has got to be to do with something blocking the connection following the program update.
-
Ok, without knowing the operating system (Vista) at all well, nor having experienced the problem, my considerations will go something like this:
If Spybots' TeaTimer were active, and causing it, it would have popped an alert.
AdAware runs a background service even when the program isn't running. (Betcha didn't know that.) It probably isn't the culprit, though, as the service is mainly there to facilitate updates, AFAIK.
Windows Defender runs resident, unless you've disabled it. It might possibly be blocking the update, but it's doubtful. Worth checking the quarantine/log, though, just to be sure.
Normally I'd suspect the firewall blocking the connection by a "new" unknown program, but unless you've configured the firewall to do this, it's doubtful.
So what I'd suggest, from this domain of partial uncertainty, is to let the Avast update occur, reboot as commanded, and if the problem again manifests, try carrying out a repair install, from the control panel. (It's one of the options available when you click "change/remove" in what used to be called "add/remove programs".)
Another thing to think about is the UAC in vista. Which I think defaults to limiting adding/removing software to the equivalent of a limited user, unless it's deactivated for the update?
Maybe someone Vize in the Vayz of Vizta can comment.
But at least try the "repair install".
[EDIT] PS After my Avast auto updated, I also immediately got the definitions update. So that aspect isn't unusual. The problem has got to be to do with something blocking the connection following the program update.
Vista Home Premium 32 - No parts of those programs are resident including Tea Timer NOR any of their services and
yes I am EXTREMELY familiar with them. This issue is Avast. Yes of course Windows Defender runs resident and has
for a year plus now with no Avast problems which has also been running for all of that time.
UAC is totally off here and has been for over a year.
Uninstall - Totally Clean using Avast Awscleaner - reinstall does not help.
Running a Repair does not help. I suspect there is an issue between the
lastest Avast update and the latest definition file.
Vista Home Premium 32 - 2 gig ram Toshiba Laptop T2350 Dual Core - Avast Program and Avast Definitions updates followed immediately by the errors which repeat often.
-
Sorry to sound as though I was making light of this, or doubting your PC knowledge; that wasn't the intention.
Confirm the update number (file version) that seems to be causing this?
Mine is dated 14/11/08, number 081114-0.
No problems here.
-
Sorry to sound as though I was making light of this, or doubting your PC knowledge; that wasn't the intention.
Confirm the update number (file version) that seems to be causing this?
Mine is dated 14/11/08, number 081114-0.
No problems here.
Version 4.8.1282 Definitions 081114-0
Firewall access is enabled - rechecked. I checked for Updates to Program and Definitions within Avast manually
and they both went through and showed current with no issue.
-
I normally only run with 4 Providers running.
P2P is off as I use none
Outlook/Exchange is off as I do not have Outlook
Instant Messaging is Off as I do not use one.
I noticed after the Red X and Windows Notification Error that the
Web Shield was OFF (I restarted Avast! AntiVirus Service) and
Mail Shield, Network and Standard Shield were all running. So
I stopped Web Shield and rebooted. Now only 3 are running so
will see if error re-occurs.
Its 3:30 AM here so off to bed.
OOPS! Just as I was typing the Red X and Windows Error came so that did not
help.
-
I turned off Mail and Web leaving only Standard and Network Shield
and the error still occurred. Now I have only Standard Shield running
as a test.
Anyone else have this issue?
-
The Red X and associated RPC or AAVM errors are often caused by another AV or remnants, I know you have said that you don't have another AV on your system.
I don't know if you have checked out this F.A.Q. information
AAVM subsystem detected and RPC error. http://www.avast.com/eng/faq-other-questions.html#idt_1539 (http://www.avast.com/eng/faq-other-questions.html#idt_1539)
Program & Tutorial - Also useful as a diagnostic tool - FileHippo Download - HiJackThis (http://filehippo.com/download_hijackthis/) and post the contents of the HJT log file here.
Download and run HJT and post the contents of the log file (cut and paste) into this topic, you may need to split it over two or more posts depending on how large it is (or attach the .log file to your post).
-
Well the error still occurred with Network and Standard Shields only so now I have on Standard running to see if the issue was with Network Shield. Of course it could be more than one shield running causes the issue.
-
The Red X and associated RPC or AAVM errors are often caused by another AV or remnants, I know you have said that you don't have another AV on your system.
I don't know if you have checked out this F.A.Q. information
AAVM subsystem detected and RPC error. http://www.avast.com/eng/faq-other-questions.html#idt_1539 (http://www.avast.com/eng/faq-other-questions.html#idt_1539)
Program & Tutorial - Also useful as a diagnostic tool - FileHippo Download - HiJackThis (http://filehippo.com/download_hijackthis/) and post the contents of the HJT log file here.
Download and run HJT and post the contents of the log file (cut and paste) into this topic, you may need to split it over two or more posts depending on how large it is (or attach the .log file to your post).
Thanks but I have NO other Anti-virus running and have not had for many many months and the error started after
the 1282 Update and then the 81113 def update, its at 81115 now. Presently I am running only standard shield to see it the error might be caused by one or more or the other shields active.
-
The update may have been the trigger if there were remnants of a previous AV even if previously you had no problems, that is why I asked about what you had previously.
When running only the standard shield and still getting it it could be more likely a low level driver conflict (the remnants of another AV after uninstall) if you have checked the FAQ link I gave and it wasn't those.
-
The update may have been the trigger if there were remnants of a previous AV even if previously you had no problems, that is why I asked about what you had previously.
When running only the standard shield and still getting it it could be more likely a low level driver conflict (the remnants of another AV after uninstall) if you have checked the FAQ link I gave and it wasn't those.
There are no remnants and have not been for over a year. I did check that FAQ as I said in my 1st statement.
So far with only running Standard Shield for about 2 hours the problem has not occurred. It usually only takes 10 or
less to come up. Maybe the problem was with Network Shield which was the last one I deactivated.
-
I restarted Mail and Web Shields and the error happened in a few minutes.
-
What was the AV used, over a year ago?
With some of them it's necessary to run an uninstall tool after uninstalling. Norton, for example, which seems to have caused the most conflicts of this type.
-
It was AVG and it was totally unistalled.
-
I believe you. But perhaps you'd run the removal tool http://www.avg.com/download-tools (http://www.avg.com/download-tools) just to be sure.
Might make a difference, won't take long, worth a crack.
-
I believe you. But perhaps you'd run the removal tool http://www.avg.com/download-tools (http://www.avg.com/download-tools) just to be sure.
Might make a difference, won't take long, worth a crack.
Just did that, even re-installed and then uninstalled and ran the tool to be sure.
No change. Hard to believe Avast could run 16 months with no issues and after
a program update that this issue is not Avast's problem. There are NO spyware
or anti-virus pieces running on my system.
Any other ideas?
-
Any other ideas?
Nothing particularly inspired or un-random, I'm afraid. :-[
Maybe just check to see if the AdAware service is disabled. IIRC it's aaw.exe in services.
-
Yes Adaware Service and all other spyware except Windows Defender are Disabled.
Folks I am extremely familiar with these programs down to their nuts and bolts levels. The
issue I have is something in Avast. If I leave ANY of the Shields active except Standard
by itself the error will occur in 10 minutes or less.
-
Styx,
I suspect that your configuration may have uncovered an issue with avast. That being said, it is not showing up - so far - on any of the systems of Vista users I support.
Were it a generic issue I am sure it would have been caught in beta and, further, this site would be lit up like the proverbial Christmas tree. It is not and I suspect we may have to defer to the avast team to guide you on next steps for problem resolution of your configuration.
-
I have already sent in a support ticket however have not heard anything from Alwil yet.
-
Hi,
Sorry for my poor english.
I have a " similar" problem than Styx with the new version 4.8.1282. I had to desactivate the Network Shield to boot my computer. Elsewhere, I had a boot in safe mode with the last version 4.8.1229. I sent a mail to Ondrej Vlcek (lead program manager, ALWIL Software) so I let you read his different answers :
Nikolas : " I used for many years your program Avast! Free Home Edition without problem. But with this new update, the computer can't reboot and return on the version 4.8.1229. My computer is a PC Vista SP1 with Intel Core2 and Nvidia 8600 GT. I have the same problem than Gary7 on your forum (http://forum.avast.com/index.php?topic=40018.0). I send you the minidump file.
Best regards"
Ondrej Vlcek : "Hi, sorry to hear about the problems.
I'm afraid you'll have to disable Network Shield in order to make it work.
Boot into Safe Mode, go to Add/Remove Programs, avast Antivirus - Change/Remove -> Change. Now untick the box next to "Network Shield", and follow the on-screen instructions.
Thanks"
Nikolas : "Thanks very much for your answer. It works now. Is this problem considered as a new bug ? Because, I'm surprised that only few persons have it on the forum."
Ondrej Vlcek : "It is strange. It is somewhat "bug", but it only happens if the TCP driver cannot be initialized during the startup of aswTdi.sys. Which should never happen, really"
-
Added to my support ticket yet still no response. Uninstall with Clean utility and
re-install does not solve the issue. Strange since Avast ran on this system for
16 months with no issues.
-
Added to my support ticket yet still no response. Uninstall with Clean utility and
re-install does not solve the issue. Strange since Avast ran on this system for
16 months with no issues.
Hi Styx, sounds like im having a very similar problem to you. I'm a bit of a tech myself so I dont usually have these problems, but just over the last few days I believe ive been infected with a virus, or a recent Avast! update has caused a file access shitstorm somehow.
For the mods, I have *never* used an AV program apart from avast on this installation of xp professional. Ive uninstalled/reinstalled this program many times, using aswclear.exe and no luck.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:30:32 PM, on 11/18/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Appz\defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
E:\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
E:\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Appz\DAEMON Tools Lite\daemon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\NETGEAR\WN121T\wn121t.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Appz\defender\MSASCui.exe
C:\Appz\hijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Appz\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [avast!] E:\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Appz\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Appz\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: NETGEAR WN121T Smart Wizard.lnk = C:\Program Files\NETGEAR\WN121T\wn121t.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Appz\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1200892964078
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1200958859031
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Appz\Alcohol 120\StarWind\StarWindServiceAE.exe
--
End of file - 6959 bytes
-
Hi all,
I have similar problem as described in this thread. After update to Avast Pro 4.8.1282, resident shields sometimes stop. I have XP Pro, SP3, no other AV, standard Windows firewall.
When problem occurs, I use this advice mentioned in FAQs and everything is OK - for some time .... :(
Looking forward to some stable solution
Vaclav
-
no other AV
Even in the past? Or preinstalled (OEM)?
Please, post the last 300-350 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log
-
New 1290 solved my issues! ;)