Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rcpowell2279 on June 13, 2010, 01:39:05 PM
-
After boot, I get a message saying Avast Antivirus Update had a problem loading, and to report it. Nothing ever results from this report. The icoon in the system tray is missing. Avast runs when I start it from the Start menu, and then the icon appears. What's up?
-
have you tried avast repair and reboot ?
For a repair of avast. Windows, Add Remove programs, select 'avast! Anti-Virus,' click the Change/Remove button from the pop-up window, scroll down to Repair, click next and follow.
-
OK, thanks for your reply. I did what you recommended. Altho the icon appears normally now, I still get the message "avast! antivirus Update has encountered a problem and needs to close. We are sorry for the inconvenience." after reboot.
I recently update to Avast 5, been getting this since. BTW, this is Windows XP 64-bit. In the error report details, error signature, app name is avast.setup, ModVer: 5.2.3790.4455 offset: 0004f053, mod name: ntdll.dll
-
do you have avast 5.0.545 ? and virus def 100613-0
-
That's correct.
-
Not sure what this can be...... did you install avast 5 on top of 4.8
if so you may try a new clean install - Uninstall Utility
http://www.avast.com/en-eu/uninstall-utility
from the dropp down meny avast 5 and reboot
then from the dropp down meny avast 4.8 and reboot
then install again ?
-
I might have to do that. One thought:how do I recover my registration number?
-
Well if this is pro or AIS the you got a mail with it
If it is free then it is not a problem, it is free...
On-line registration is very simple and it's the preferred method for all users of avast Free Antivirus 5.0 installed on a computer with standard Internet connectivity. To perform on-line registration follow these steps:
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=459
-
Hi rcpowell2279
It may help to run a HijackThis scan to see if any surface issues are evident.
HijackThis Click here – (will take direct to download)
http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/
Download and run.
Then do scan and save a log file.
Post the log file to this thread. If it is too large you may have to post in two parts
CCleaner Start Manager
You could also go to Startup manager in ccleaner and let us know what programs are set to start with the boot up of yr system
Open ccleaner – open Tools in menu column on left-hand side
select Startup – what programs are enabled to start when you boot?
- provide screenshot or simply outine in yr post
-
All right. Here's HijackThis's log: Well, half, it turns out...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:39:57 AM, on 6/13/2010
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files (x86)\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\SysWOW64\CTsvcCDA.exe
C:\WINDOWS\SysWOW64\svchost.exe
C:\Program Files (x86)\Java\jre6\bin\jqs.exe
C:\Program Files (x86)\Novosoft\Handy Backup\BackupNetworkCoordinator.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\SysWOW64\ctfmon.exe
C:\WINDOWS\SysWOW64\HPZipm12.exe
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\DAP\DAP.EXE
C:\Program Files (x86)\TrippLite\PowerAlert\engine\pal.exe
C:\Program Files (x86)\Novosoft\Handy Backup\hbagent.exe
C:\Program Files (x86)\Winamp\winamp.exe
C:\Program Files (x86)\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files (x86)\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe
C:\Program Files (x86)\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files (x86)\Netropa\Onscreen Display\OSD.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Garmin\MyGarminAgent\MyGarminAgent.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\PROGRA~2\SPEEDB~1\VideoAcceleratorEngine.exe
C:\Program Files (x86)\iPod\bin\iPodService.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
F2 - REG:system.ini: UserInit=userinit
O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files (x86)\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files (x86)\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~2\DAP\DAPIEL~1.DLL
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files (x86)\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] "C:\Program Files (x86)\Netropa\Multimedia Keyboard\MMKeybd.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [CTSysVol] "C:\Program Files (x86)\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files (x86)\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE"
O4 - HKLM\..\Run: [Goodnight Timer] "C:\Program Files (x86)\Goodnight Timer\Goodnight Timer.exe" -s
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MyGarminAgent] C:\Program Files (x86)\Garmin\MyGarminAgent\MyGarminAgent.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files (x86)\DAP\DAP.EXE" /STARTUP
O4 - HKCU\..\Run: [Handy Backup] C:\Program Files (x86)\Novosoft\Handy Backup\hbagent.exe -logon
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Global Startup: Winamp.lnk = C:\Program Files (x86)\Winamp\winamp.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files (x86)\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm
O8 - Extra context menu item: Open using &Advanced JPEG Compressor - C:\Program Files (x86)\Advanced JPEG Compressor\ajcieex.htm
O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
-
2nd half...
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
O15 - ESC Trusted Zone: http://runonce.msn.com
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon/download/tgctlcm.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by108fd.bay108.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1225918406796
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1172411954875
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://ipgweb.cce.hp.com/rdqaio/downloads/msxml4.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://75.149.248.142/activex/AxisCamControl.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {A3256902-51FA-45A0-8A97-FC1143C169D9} (Diagnostics ActiveX WebControl) - http://support.microsoft.com/mats/DiagWebControl.cab
O16 - DPF: {BCBC9371-595D-11D4-A96D-00105A1CEF6C} (View22RTE Class) - http://merillat.view22.com/view22/roomapp/View22RTE.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c9858e1dc5d748) (gupdate1c9858e1dc5d748) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files (x86)\Java\jre6\bin\jqs.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files (x86)\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: Novosoft Backup Network Coordinator (NovosoftBackupNetworkCoordinator) - Novosoft LLC - C:\Program Files (x86)\Novosoft\Handy Backup\BackupNetworkCoordinator.exe
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc64.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PowerAlert Agent - Unknown owner - C:\Program Files (x86)\TrippLite\PowerAlert\engine\pal.exe
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: StumbleUponUpdateService - stumbleupon.com - C:\Program Files (x86)\StumbleUpon\StumbleUponUpdateService.exe
O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program Files (x86)\NVIDIA Corporation\System Update\UpdateCenterService.exe
O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~2\SPEEDB~1\VideoAcceleratorService.exe
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)
O23 - Service: Windows Search (WSearch) - Unknown owner - C:\WINDOWS\system32\SearchIndexer.exe (file missing)
--
End of file - 13472 bytes
-
Here's the startup items tagged to start..
Yes HKLM:Run Adobe ARM "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
Yes HKLM:Run Adobe Reader Speed Launcher "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Yes HKLM:Run Alcmtr ALCMTR.EXE
Yes HKLM:Run AlcWzrd ALCWZRD.EXE
Yes HKLM:Run AsioThk32Reg %SYSTEMROOT%\SYSWOW64\REGSVR32.EXE /S %SYSTEMROOT%\SYSWOW64\CTASIO.DLL
Yes HKLM:Run avast5 C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
Yes HKLM:Run CTDVDDET "C:\Program Files (x86)\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE"
Yes HKCU:Run ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
Yes HKLM:Run CTSysVol "C:\Program Files (x86)\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe" /r
Yes HKLM:Run CTxfiHlp CTXFIHLP.EXE
Yes HKCU:Run DownloadAccelerator "C:\Program Files (x86)\DAP\DAP.EXE" /STARTUP
Yes HKLM:Run Goodnight Timer "C:\Program Files (x86)\Goodnight Timer\Goodnight Timer.exe" -s
Yes HKCU:Run Handy Backup C:\Program Files (x86)\Novosoft\Handy Backup\hbagent.exe -logon
Yes HKLM:Run IntelliPoint "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
Yes HKLM:Run ISUSPM Startup C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
Yes HKLM:Run ISUSScheduler "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
Yes HKLM:Run iTunesHelper "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
Yes HKLM:Run MULTIMEDIA KEYBOARD "C:\Program Files (x86)\Netropa\Multimedia Keyboard\MMKeybd.exe"
Yes HKLM:Run MyGarminAgent C:\Program Files (x86)\Garmin\MyGarminAgent\MyGarminAgent.exe
Yes HKLM:Run NvCplDaemon RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Yes HKLM:Run NvMediaCenter RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
Yes HKLM:Run nwiz C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
Yes HKLM:Run QuickTime Task "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
Yes HKLM:Run RTHDCPL RTHDCPL.EXE
Yes HKLM:Run SoundMan SOUNDMAN.EXE
Yes HKCU:Run SpybotSD TeaTimer C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
Yes Startup Common Winamp.lnk C:\Program Files (x86)\Winamp\winamp.exe
-
OK, well, I uninstalled it and reinstalled. Seems to be fixed. Thanks for your input, Pondus and mkis. I'll be back!
-
Hi there
Sorry but Im not familiar with Windows 2003 64bit. However, I did look over your HjT and your Startup.
Im not going to say much about the HjT log as mostly it passes as okay. Here are a couple of questionable entries -
O4 - HKLM\..\Run: [Goodnight Timer] "C:\Program Files (x86)\Goodnight Timer\Goodnight Timer.exe" -s
This program is okay, providing you do want to always use it, otherwise you do not need it to run at Startup
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
O10 - Unknown file in Winsock LSP: c:\progra~2\speedb~1\sblsp.dll
For these three entries - Check your hard disc drive with Spybot S&D from Kolla.de or LSPFix from Cexx.org. This entry should not be fixed! Your best bet to repair it is to try the LSPFix from Cexx.org.
O16 - DPF: {BCBC9371-595D-11D4-A96D-00105A1CEF6C} (View22RTE Class) - http://merillat.view22.com/view22/roomapp/View22RTE.cab
This seems okay but comes with a warning - Check if you know this site and fix it if you do not. Unknown ActiveX-Objects, or ActiveX-Objects from unknown sites should always be fixed. If the name of the ActiveX-Object or the URL contains the words 'dialer', 'casino', 'free plugin' etc, it should be fixed!
Generally, however, I dont think anything worrisome, other than perhaps a bit software congested - but even in that respect, not bad.
Your Startup options you should take a look at - you dont need all these programs starting with Windows operating system, as long as they able to autorun as you manual open them in run-time environment. I will post a screenshot below of an alternative selection of items to Startup with the OS - they are crossed out in red if they are disabled at Startup, in which case they should still be set as Manual in Services and should start when they are opened by a user.
You may decide upon a different selection that suits better yr requirements.
Alternatively, if you keep having problems, I think that the following article on startup in 'clean boot' state may also apply to Windows 2003.
If 'clean boot' is not recommended for the system, then there is likely to be a post about that from someone on the forum.
http://support.microsoft.com/kb/310353
-
Sorry for coming late to this party, but isn't Windows 2003 a server OS ?
http://www.google.com/search?q=Windows+2003+SP2 (http://www.google.com/search?q=Windows+2003+SP2)
If it is a server OS then I'm surprised you managed to get avast client side application to install much less update.
Or do you simply mean Windows XP SP2 ?
In which case you need to install SP3 as MS security update support ends for you in July 2010 (next month).
-
Hi David
It would seem to be the server OS.
I was wondering myself as to what would be the user's options in the Windows 2003 environment.
here is the heading for the HjT log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:39:57 AM, on 6/13/2010
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
-
It was that that caught my attention too.
We will have to wait for the OP to confirm one way or another.
If it is a server OS then the standard versions of avast should have failed to installed (incompatibility of OS) and they would require a server version of avast.
-
I'm running Windows XP Pro x64 SP2. I have uninstalled Avast! and reinstalled. Now upon reboot, I get a message box that says avast setup had a problem, needs to close.
Also, how do I make those changes to software loading mentioned above? Services on control panel? Msconfig?
-
I'm running Windows XP Pro x64 SP2, all updated.
I have uninstalled Avast! and reinstalled. Now I get a message saying avast setup had a problem, needs to close.
How do I make the changes to startup programs mentioned above? Msconfig? Services in control panel?
These problems have popped up since installing v5, had v4 for years previous, no troubles.
-
Oops, sorry for the dupe.
-
I made most of the changes MKIS suggested to the startup set. When I rebooted, got a message saying "avast antivirus update encountered a problem and needed to close". However, this was followed a bit later by the avast! popup saying virus definitions had been updated. ??
-
Also, I found LSPfix and ran it, it said no changes necessary, and didn't even mention the speedbit files listed above. ??
-
Hi there, sorry about late reply but I've been busy elsewhere.
I imagine you can make changes with msconfig, ccleaner Startup manager, or in Services.
Black Viper suggests to use Services instead of msconfig. (I will direct you to the XP Pro page)
http://www.blackviper.com/WinXP/servicecfg.htm
I find msconfig to be quicker and final in terms of changes that are made. But that is only my preference.
Sometimes I check the changes in Services to see how I'm doing, which is really why I mentioned Services.
The direct to LSPfix is to see if any changes needed to be made - that is a general directive for those entries.
Also there are some questions concerning the usage of SpybotSD and/or Teatimer, and whether or how they run in conjunct with avast.
For myself I have no experience with these products so there is little more that I can add.
Has the recent update in avast virus definitions meant a return to normal running in avast 5?
-
Well, after this morning's startup, Avast! is running, but I still get the pesky message: "Avast! antivirus Update encountered a problem and need to close." I haven't seen the update popup yet. The error signature contained in this error message is "szAppName : avast.setup szAppVer : 5.0.0.0 szModName : ntdll.dll
szModVer : 5.2.3790.4455 offset : 0004f053
Not sure where to go from here.
-
I do run Spybot and Teatimer. Is this the source of the conflict? Is Teatimer a good idea? Spybot runs only on demand, I suppose.
-
I do run Spybot and Teatimer. Is this the source of the conflict? Is Teatimer a good idea? Spybot runs only on demand, I suppose.
Both are obsolete. Try MBAM on demand for Spybot and WinPatrol for Teatimer.
-
Indication from error message is that you have a faulting application (avast5) on Windows Server 2003
-
This is because the win XP Pro 64bit OS is by all accounts based on the win 2003 server OS, which is one reason why the SPs only go up to SP2 and not SP3 in the XP 32bit OS versions.
So I don't know if there is some strange interaction with ntdll.dll in the XP Pro 64bit version, but we would certainly need some intervention by one of the Avast Team.
-
Thanks David. hmm...I have XP Pro 64bit OS here but the computer sits idle since my wireless internet connect (VMClite) does not support 64bit, and I do not feel like upgrading at my own expense while I am only on contract for a few more months. As it is, I pay a reasonably high monthly, and I intend to set up a LAN network at home once my contract is fulfilled. But for the time being, my 32bit systems are doing the job nicely.
-
I removed Spybot and Teatimer, rebooted, and got both messages: Avast.setup and Avast update both had a problem and needed to close. So what are the options for a fix? Are there any?
-
Now Winpatrol is alerting me to "a new auto Startup Program has been detected. Is this acceptable? ..I've never heard of this one, although it is a Microsoft app. I've never seen it in startup...
-
Now Winpatrol is alerting me to "a new auto Startup Program has been detected. Is this acceptable? ..I've never heard of this one, although it is a Microsoft app. I've never seen it in startup...
Which is the application name?
-
I guess giving you the name of the file might be useful, it's Userinit.exe... I just installed MBAM and Winpatrol in place of Teatimer. Is one of these the culprit?
-
It will be good to post where is it, I mean, the file path.
Also, you can submit it to www.virustotal.com and check.
Userinit is a legit file, but it should be already there in "hidden" startup entries of WinPatrol.
-
Sorry, Boss. The full path is c:\windows\system32\userinit.exe. All I read says it's bona fide, but I wonder why it's new? I suppose I'll accept its addition.
-
You should be okay here. Bona fide, a reading by WinPatrol.
If not, in situations like this, one of the members who is more knowing of WinPatrol - like YoKenny - would add to the thread.
I think the changes that you have made are good, despite that the problem is not yet resolved, you have enhanced yr software platform.
This issue which you have (thankfully) brought to attention is not exclusive to avast as you can see from the following link -
http://mcafee-ext.hosted.jivesoftware.com/thread/21005?tstart=-1
Nor exclusive to security programs -
http://forums.adobe.com/message/2901913?tstart=0
What I suggest may be the issue - insecure installation of the application to the 64bit architecture for one reason or another, but evidently the application faulting as the outcome. Whether this will prevent the application from performing in runtime is another thing, and it may in fact run as per normal even though the error message is generated and the app may close at Startup. (which may explain why yr avast might continue to update as per norm, although seems it wont right now). Regardless, as DavidR has pointed out, it appears the issue is one for the devs to deal with - whether writers of the app or Microsoft itself (which seems more likely).
The problem here is that although you may be able to work on despite this issue or perhaps craft a workaround, there is a possibility that the insecure install lays open a vulnerability in the internet explorer platform, and this vulnerability may be exploited by malware. That said, I am not sure what is yr best course of action, and granted I am only speculating about the situation you are experiencing. Unfortunately I cannot replicate the situation, as much as I would like to.
There is also the possibility that one of yr other third party programs is causing this error situation and it is not an issue with 64bit architecture. However, I would not like to speculate further than I already have, and suggest you could possibly take the matter up with Microsoft support.
-
Thanks for your insights. This morning's startup went well. Now that Spybot and Teatimer have gone, and Winpatrol has settled in, I had NO MESSAGES! Woo-hoo! Avast updated by itself immediately, no warnings from Winpatrol, all quick and quiet. I think maybe you've got it. Let's call this closed, at least for now. Thanks again!
-
Go to PROFILE then Modify Profile then Forum Profile Information then select then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.
In Account Related Settings select Hide email address from public? to prevent scammers and spammers harvesting your bellsouth.net email address.