Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Skooter on March 08, 2009, 08:00:32 PM
-
I installed Avast! a short time ago, but so far it hasn't worked properly for me. The icon at the bottom has a red slash and says "The AAVM substation detected an RPC error". The other one that deals with the VRDB is always inactive and doesn't seem to be doing anything at all. Also, I cannot get resident protection to stay on. Once I close Avast!, it turns back off.
I don't have any other AV programs or firewalls installed. Any idea what the problem may be?
Thanks.
-
Did you have any other antivirus in the past in this computer? How did you remove it?
-
I had Stop-sign installed for a bit- but I uninstalled when people told me they were unreliable... I am pretty sure I got rid of it all though I suppose there could leftover registry entries causing a conflict.
-
Which firewall do you use? Any other security program?
RPC errors are generally due to older antivirus leftovers...
-
Just whatever the Stop-sign had...
Its a new system and is pretty clean.
-
I suggest an installation from the scratch:
1. Uninstall avast from Control Panel first.
2. Boot.
3. Download the latest version of Avast Uninstall (http://www.avast.com/eng/avast-uninstall-utility.html) and use it for complete uninstallation.
4. Boot.
5. Install again the latest avast! (http://www.avast.com/eng/programs.html) version.
6. Boot.
7. Check and post the results.
-
Someone said elsewhere that My problem is the I have a file named "common files" in my program files and that I should move. Any truth to this at all? I don't think so personally, I think your right that a re-install would be best. I'll let you know.
-
Someone said elsewhere that My problem is the I have a file named "common files" in my program files and that I should move. Any truth to this at all? I don't think so personally, I think your right that a re-install would be best. I'll let you know.
No, Common files should be stay where they are...
-
Tried to uninstall and I couldn't... got a BSOD upon starting windows. Is there another way?
-
Tried to uninstall and I couldn't... got a BSOD upon starting windows. Is there another way?
Uninstall in Safe Mode using the Control Panel.
Boot in Safe Mode again, use the uninstaller tool of avast.
-
I forgot about that.... well, it worked, so thanks.
I just thought about something though: Do I need to be registered to fully use it? Cause I wasn't before...
-
I just thought about something though: Do I need to be registered to fully use it? Cause I wasn't before...
Yes. You need a free registration to use it (Home version) or a Pro key.
The trial period is 60 days at first installation and 6 days if you uninstall/install again.
-
Maybe that's where the problems are coming from, then... I just requested a key, so I'll see if that clears it up. I thought you had to pay to register, which is why I didn't register before. I saw just now that it was free... :-[
-
Go to the SSL page version and register from there: https://secure.avast.com/scripts/register.php?lang=ENG. The Registration key is valid for 14 months.
See the tutorial: http://www.avast.com/files/tutorials/insert_key.htm
-
Okay, I registered and the problems are still there; same messages and issues... I think I'd be best off going with Kapersky.
-
Is Kasperky installed? ???
Please, post the last 300-350 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log
-
See attachment. No, Kapersky is not installed.
-
its strange the problem i read all fast but if im not wrong maybe a virus is attacked his pc im not sure but im thinking
-
10.03.2009 13:05:49.000 1236708349 package Tried to download servers.def but failed with error 0x000004C7.Please, post the last 200-250 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log
All you need to know about updates and IP addresses: http://www.avast.com/eng/updates2.html#idt_1366
Also check:
1) If your subscription allows the update right now (i.e., if it is not expired). Home (free) version need registering each 14 months.
2) If your firewall settings and allow avast.setup to connect.
If you're not sure, just turn off your firewall (to be sure the update failure is not due to it).
Maybe you should 'remove' avast.setup entry, try to update, receiving a new alert from the firewall, allowing it and checking it to remember.
3) Check your proxy settings into avast!:
Left click the avast icon > Settings
Update (Basic) > Details > Proxy
Make sure your browser is not set to "Work Offline" (this option is generally in the File menu).
If it doesn't help, try switching from "Auto-detect" to "No proxy" (I'm assuming you're not connecting to the Internet via proxy).
4) Also you can try changing update service's login account, follow this:
Open services control panel (e.g. Start->Run, and type: services.msc
Double-click on avast! iAVS4 Control Service to show properties. Switch to LogOn page.
Enter administrator account name and password.
Do the same for avast! Antivirus service.
Then start update again.
5) The last option, check if the servers.def file is corrupt or 0KB (C:\Program Files\Alwil Software\Avast4\Setup\servers.def).
You can try and download the servers.def file, http://files.avast.com/iavs4x/servers.def and replace the one in the avast setup folder.
-
1.) can't update.
2.)Firewall is currently off.
3.)No proxy is on now.
4.)Avast! doesn't appear on services...
5.)The smallest server.def is 4kb.
-
4.)Avast! doesn't appear on services...
Very strange... your installation is deeply corrupted...
Which was your old antivirus? How did you uninstall it?
-
Stop-sign. I uninstalled it through the built-in uninstaller. I think there could be some traces of it left over that is causing this though. Any idea how to check and if there is how to delete it?
-
Stop-sign. I uninstalled it through the built-in uninstaller.
Which antivirus?
-
***
It is Stop Sign antivirus, Tech.
Not a very good program at all.
Click the image below to enlarge.
***
-
I found this info on how to remove StopSign on their site. http://support.stopsign.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=168&nav=0,33
I hope it helps.
-
Yeah, that's how I un-installed it. The potential problem is left over registry entries...
-
***
Please download HiJackThis from the link below and we will see if we can find some remains.
Download it to the hard drive and not to the desktop. Copy & Paste the log in this thread OR attach it to your next post.
***
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:16:52 PM, on 3/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCM3.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1217613169515
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: OSCM Utility Service - Sprint Spectrum, L.L.C - C:\Program Files\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
-
***
There is no ending.
Is that all of it?
***
-
-= Me too.. I suffer that AAVM RPC Error.. It was after my latest update a few days ago & moreover, I don't have any previous antivirus.. I started a topic about this but can't find any solutions yet.. The problem does not persist in other antiviruses like Avira and AVG..
-= Is this due to a malware or a conflicting program..?
-
-= Is this due to a malware or a conflicting program..?
Maybe. Which one are you talking about?
-
Charlie, yes.
The only thing after it was --- end of file- 5622 bytes.
-
-= Is this due to a malware or a conflicting program..?
Maybe. Which one are you talking about?
-= I don't know but avast! suddenly get to be acting that way..
-
AAVM errors could be verbose of the logs.
RPC errors not. Generally are due to conflict software.
-
***
Charlie, yes.
The only thing after it was --- end of file- 5622 bytes.
OK, thanks ... I just wanted to be sure that nothing important was missing. There was only a few things worth mentioning in your HJT log.
1- It seems that you don't use an anti-virus scanner or your scanner is not active.
Only an anti-virus scanner can protect you against new viruses.
2- We didn't detect any active process of a firewall on your system. Reasons maybe:
(1.) You are using the windows firewall or a hardware firewall.
(2.) You are using a firewall of an unknown vendor.
(3.) You are using a firewall, but for unknown reasons it is disabled
(4.) You don't use any firewall at all.
We recommend you to use a firewall.
One thing I did notice is that there is only one entry of avast in the log.
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
No entry for any other av.
Otherwise, a clean HJT log.
***
-
AAVM errors could be verbose of the logs.
RPC errors not. Generally are due to conflict software.
-= I guess, I'll try again.. But if it fails again.. I guess, I have no choice but to wait for avast 5..
-= I want to be back to avast.. Avira is fully annoying with the "Upgrade to Premium" notifications..
-
OK, thanks ... I just wanted to be sure that nothing important was missing. There was only a few things worth mentioning in your HJT log.
1- It seems that you don't use an anti-virus scanner or your scanner is not active.
Only an anti-virus scanner can protect you against new viruses.
2- We didn't detect any active process of a firewall on your system. Reasons maybe:
(1.) You are using the windows firewall or a hardware firewall.
(2.) You are using a firewall of an unknown vendor.
(3.) You are using a firewall, but for unknown reasons it is disabled
(4.) You don't use any firewall at all.
We recommend you to use a firewall.
One thing I did notice is that there is only one entry of avast in the log.
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
No entry for any other av.
Otherwise, a clean HJT log.
***
1.) Okay, well I guess that rules out a Stop-sign conflict then... I do have Spybot, but right now that, and my internet smarts, are the only things protecting me.
2.)The windows firewall should be running, but it totally sucks, I know... I was thinking about picking up Comodo or something similar.
So... what else could cause this? I'm like... totally baffled here... ??? I think my only option is do a uninstall of Avast and choose something else...
-
***
Well, there should have been more entries for avast in your HJT log. There must be more registry entries for avast or it will not work correctly.
Try to do a repair of avast :
Control panel > Add/remove programs > click once on avast to select it > click on Change/Remove > scroll down the left pane and click on repair > click OK> follow directions
***
-
I think I already tried that, but I guess it wouldn't hurt to try again.
What entries am i missing?
-
-= Surprisingly, my avast is working fine now after a system restore.. Thanks for all the help..
-
I wish mine would just fix itself...
Repairing didn't do a thing either.
-
-= Did you download the installer to install avast..? Try downloading a new one and see if it works..