Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: edison on July 26, 2004, 06:26:18 AM

Title: problem in Boot Scan
Post by: edison on July 26, 2004, 06:26:18 AM
i already reinstall it a couple it times but the boot scan still would not work, my avast is updated always both VPS and Program update, so any suggestions....please.....
Title: Re:problem in Boot Scan
Post by: .: Mac :. on July 26, 2004, 07:30:25 AM
What OS do you have?

Boot Scan is only for 2k/XP
Title: still a newbie but HOW PLZ
Post by: AA55US on July 26, 2004, 05:09:26 PM
do i make AVAST do a boot scan or see it run a scan when booting up plz,
win98se with 650 mhz,256 ram dsl pro package,
thanks for the info, "AA"
Title: Re:problem in Boot Scan
Post by: Eddy on July 26, 2004, 05:41:19 PM
As MacLover2000 said. Bootscan is only for 2K/XP, not for 98(se).
There is a way you can run avast before windows loads.
Install Avast for dos and change the autoexec.bat so that it will run Avast for dos before windows loads.
Title: Re:problem in Boot Scan
Post by: PhilC on July 29, 2004, 08:20:55 AM
I am running Windows XP with the Home version of AV and, although I have sceduled a boot time scan and it reports that a scan in scheduled, it will not run when I reboot. I have tried clearing and rescheduling the boot time scan with no luck. Any ideas?
Title: Re:problem in Boot Scan
Post by: Eddy on July 29, 2004, 08:41:09 AM
Click on the Menu button.
Choose Schedule Boot Time Scan.
Doing so displays a dialog allowing you to schedule virus scanning.
Check Archives, if you want scan all the archives.
Specify whether all the disks or just a specific folder should be scanned.
Select Advanced options for scheduling details.
Select how to automatically process infected files.
Choose how to automatically process infected system files.
Click the Schedule button to confirm the settings.

Are you doing this? If not, try it.
Also check the Avast log file as well as the event log and the system log for errors.
Title: Re:problem in Boot Scan
Post by: igor on July 29, 2004, 09:57:13 AM
I am running Windows XP with the Home version of AV and, although I have sceduled a boot time scan and it reports that a scan in scheduled, it will not run when I reboot. I have tried clearing and rescheduling the boot time scan with no luck. Any ideas?

The boot takes about the same time as it does when you don't schedule the scan?
In any case - schedule the scan, reboot and when you're back in Windows, check the file <avast4>\Data\log\aswBoot.log. Is it there? If yes, attach/post it here, please.
Title: Re:problem in Boot Scan
Post by: PhilC on July 29, 2004, 05:51:57 PM
I unscheduled the boot scan I aready had set up and followed your instructions exactly to create a new one. I rebooted and the system seemed to start up as normal. I checked the scheduled scan and it still shows as being scheduled.

Checked for the aswBoot.log file and it did not exist. I did find this entry from yesterday in the error.log file:

7/28/2004   12:34:33 AM   1090992873   NT AUTHORITY\SYSTEM   1992   AAVM - scanning error: x_AavmCheckBootDirectEx: avscanScanReal of *BOOTA failed, 00000022.  

Not sure if this is related. It appears that no entry was made with today's reboot. I am using Windows XP Professional with SP1.
Title: Re:problem in Boot Scan
Post by: igor on July 29, 2004, 06:07:41 PM
I think it's not related - the log record is about scanning BOOT record of floppy A:

How did you check that the boot-time scan was still scheduled after restart - tried to schedule it again?

Please, open regedit and check the value BootExecute in the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
Normally (when nothing is scheduled), only the following line should be there:
autocheck autochk *
When avast! boot-time scanner is scheduled, a reference to aswBoot.exe should appear there.
Is there anything else inside? Is the path to aswBoot.exe short or long?
Can you dump the content of the key to a file and post it here? (note that if you export the key, a big amount of data will be saved - the whole Session Manager key; the only interesting part here is the BootExecute value).
Title: Re:problem in Boot Scan
Post by: PhilC on July 30, 2004, 12:19:01 AM
Here is what mine says:

autocheck autochk *
C:\PROGRA~1\Alwil Software\Avast4\aswBoot.exe /A:"*" /L:"English"   /archives

Not sure what it means.  :) I noticed that the path is long but not in quotes. This is how, what I would consider a simple scan, was written to the registry.
Title: Re:problem in Boot Scan
Post by: igor on July 30, 2004, 08:57:32 AM
Do you have the latest build of avast? (4.1.418)
Title: Re:problem in Boot Scan
Post by: PhilC on July 30, 2004, 06:12:47 PM
Yes, that is the build I have dated June 2004.
Title: Re:problem in Boot Scan
Post by: Vlk on July 30, 2004, 09:03:56 PM
I think this version logs the exact hex dump of the registry key to <avast>
\data\log\aswBoot.log, right Igor?

It may be worth trying to send this file to Igor's e-mail address for further inspection. Version 418 of avast should actually contain some means of preventing of the behavior you were describing.

Thanks
Vlk
Title: Re:problem in Boot Scan
Post by: PhilC on July 31, 2004, 04:48:20 AM
Would be glad to send it but like I said earlier, it does not exist on my PC.

I thought that I found the problem when I noticed that NAV had not totally cleaned itself up. I went through the registry and got rid of the NAV and Symantec keys but I still have the problem.
Title: Re:problem in Boot Scan
Post by: Lisandro on August 01, 2004, 04:53:29 PM
It may be worth trying to send this file to Igor's e-mail address for further inspection. Version 418 of avast should actually contain some means of preventing of the behavior you were describing.

Thanks
Vlk

Vlk, I can't schedule a boot scan into XP  :'(
Should I send the file aswBoot.log to Igor?  :'(
Title: Re:problem in Boot Scan
Post by: igor on August 01, 2004, 07:56:13 PM
I believe the problem is not with the key - but in the fact that there is a long path there; it should be short. However, I checked the code and wherever the scheduling is called from, the GetShortPathName() call is prepended... I really don't understand.
What happens when you unschedule and schedule the scan again? The long key is created again?

Technical: what exactly does it mean "you can't schedule"?
Title: Re:problem in Boot Scan
Post by: Lisandro on August 01, 2004, 08:07:46 PM
Technical: what exactly does it mean "you can't schedule"?

I'm sure I schedule a boot scan but nothing happens...  :'(
I'll try again and post the results.
Title: Re:problem in Boot Scan
Post by: igor on August 02, 2004, 03:03:57 PM
OK, one more thing: please, open regedit and navigate to
HKEY_LOCAL_ MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
What is the value of NtfsDisable8dot3NameCreation in the right part of the window?
Title: Re:problem in Boot Scan
Post by: PhilC on August 02, 2004, 04:05:24 PM
Mine is set at Hex 1.
Title: Re:problem in Boot Scan
Post by: igor on August 02, 2004, 04:09:28 PM
Hm, that's the problem then.
The "short file names" are disabled on your system; however, the boot-time scanner needs them, because it simply doesn't start with a long one.

We may try to do something about it (such as installing the scanner into the system folder, instead of the avast! installation folder) - but right now, I'm afraid it won't work for you (unless you enable the short file names again).
Title: Re:problem in Boot Scan
Post by: PhilC on August 02, 2004, 06:08:18 PM
No problem... I will enable them. I'm glad that we located the problem.
Title: Re:problem in Boot Scan
Post by: PhilC on August 02, 2004, 07:30:31 PM
One last question,,,

Is all I need to do is change the 1 to a 0 or do I need to do a reinstall of Avast Home?
Title: Re:problem in Boot Scan
Post by: Vlk on August 02, 2004, 07:32:04 PM
I guess you need to reinstall.
There are some other ways to do it but the easiest would be to reinstall.
Title: Re:problem in Boot Scan
Post by: Lisandro on August 03, 2004, 12:28:09 AM
Technical: what exactly does it mean "you can't schedule"?

Everything is right now... sorry for giving you work...  :-\
Maybe I did the stupidity of clicking twice on the scheduling button :-\
Title: Re:problem in Boot Scan
Post by: PhilC on August 03, 2004, 01:51:53 AM
Thanks for all of your help.

I uninstalled, rebooted, reinstalled, rebooted (without scheduling a boot scan), started Avast and sceduled a boot, rebooted and no boot scan still.

Although the 9.3 filenames are enabled now the path in the registry is still the same as before. Have no idea but thanks again for the suggestions.