Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Ethrea on August 19, 2010, 05:20:20 PM
-
Hello,
I've a strange problem.
Avast free 5.0.594 stops alone, about twice an hour. Someone told me he has the same problem and think it's linked to a bug when it tries to update.
I've added exceptions for the *.exe in avast5 for MSE (I have it too, may be the source of the problem too) but it hasn't changed anything.
I wanted to try a repair of avast... And finally I cannot find it in the list (whether it's correctly installed and registered.
Do you think I should remove all avast features and try to reinstall it (and hope that the bug desappears)? Or should I do something else ?
Thanks
PS : Excuse my quite poor English, I'm French.
-
You should only run one resident AV...!!!
Drop MSE... ;)
asyn
-
Agree....Running two resident (running all the time) antivirus (AV) programs on the same computer can create all kind of mysterious windows errors and false detections. Please uninstall MSE per the instructions of MSE, then reboot the machine.
-
Thank you for advice.
-
No problem...and welcome to the forum. :)
-
Thank you for advice.
You're welcome..!
Let us know, if everything is ok now...
asyn
-
I'm back...
I have done all this : remove avast, remove MSE, reboot, reinstall avast.
And I still have the same problem (Avast stops every hour...).
I have no other antivirus now (I think. I still have the default windows defender).
Any Idea ?
-
And I've found something else which has probably no effect on this.
When I stop or uninstall Avast, there is a window to confirm... And I cannot see my mouse (I have to move it randomly till I see the right button changes
-
I have done all this : remove avast, remove MSE, reboot, reinstall avast.
You also need to do each uninstall separately and reboot in between or there will be remnants (left overs) behind on your machine which may cause conflicts with other security software.
It sounds like you didn't uninstall both software correctly and that is why you are having problems now.
I recommend doing an uninstall of MSE first:
http://uninstallers.blogspot.com/ (http://uninstallers.blogspot.com/) - 21b is MSE
Remember to reboot after you uninstall MSE.
After this, do an uninstall and do a clean install of Avast:
1. Save a copy of newest version of Avast (5.0.594) for the version you need and save it to your HDD:
Free – http://files.avast.com/iavs5x/setup_av_free.exe (http://files.avast.com/iavs5x/setup_av_free.exe)
2. Download the Avast Uninstall Utility, aswClear5.exe http://www.avast.com/uninstall-utility (http://www.avast.com/uninstall-utility) and save it to your HDD (it has uninstall tools for both 4.0 and 5.0).
3. Disconnect from the Internet at this time.
4. Boot into Safe Mode (http://Safe Mode) (hit F8 repeatedly) and run the Avast Uninstall Tool.
5. Reboot twice.
6. Install the newest version of Avast and reboot twice.
7. Get Internet access and update Avast definitions.
8. Register your copy or add the license key for Free – http://www.avast.com/registration-free-antivirus.php (http://www.avast.com/registration-free-antivirus.php).
Let us know how this works for you. Thank you.
-
If I have understood i must first reinstall MSE, reboot, remove, reboot etc... Well, let's see
-
No...
1. Uninstall MSE.
2. Reboot.
3. Uninstall and do a clean install of Avast.
4. Reboot...follow the rest of my directions.
-
impossible to uninstall it anymore (already uninstalled) but Today... avast stopped only twice within 5 hours.. It's better.
I'm just starting the step 2.
-
All that is done. Now I'm waiting for avast to stop...
I'll tell you tonight.
-
Ok, that's not better.
stopped alone at 15h50 (French hour)... It's 15h56.
Any other idea ?
(my computer is running win 7 32b)
-
Another stop... just now.
It's quite embarrassing to know your antivirus stops and doesn't always protect you.
-
Did you follow the reply #8 suggestions?
-
Yes, from number one to number eight. BUT, I cannot uninstall MSE anymore because I've already done it (as I was writing reply #3)
-
I would like to check your machine for malware, which may be causing problems.
Download free Malwarebytes’ Anti-Malware (MBAM) http://www.malwarebytes.org/ (http://www.malwarebytes.org/) for an on-demand scanner.
· Double Click mbam-setup.exe to install the application.
· After install, click update so you have latest database before scanning.
· Under Settings:
o General: Automatically Save File After Scan Completes is checked off
o Scanner Settings: Check all boxes
o Updater: Download and install update if available is checked off
· Once the program has loaded, select "Perform FULL Scan", then click Scan.
· The scan may take some time to finish, so please be patient.
· When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
· Click the “remove selected” button to quarantine if anything found. You will find the infection details under the Quarantine tab.
· The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
· Copy & Paste the entire report in your next reply.
After posting your MBAM log, then update your Avast definitions and run a Boot-time scan.
Please let me know if you have any questions. Thank you.
-
Seems I had many malwares (already 13 in 3 minutes) and if they were here for more than a week, that means MSE wasn't able to found them when it was scanning... And Avast simply couldn't because it was stopping 10 minutes after starting the scan.
-
Did MBAM put them in quarantine?
-
It did and I have deleted them. (14 elements : 1 trojan, 12 registry entries and 1 malware)
-
I have restarted the computer and waited. It seems it's not better.
-
I may have found something else.
It seems like searching something on the web stops avast! services (each time I search something on google, or watch something on youtube, and very often when i just navigate on a web site) because I had to restart it about 100 times during the last hour, and there is no viruses left on my computer.
If you want to compare, I must restart Avast! about 1 time each hour when I am not connected to the internet.
-
Can you copy and paste your last MBAM log and post it here for me to review. Thank you.
After this, I will give you further instructions.
-
ok.
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Version de la base de données: 4474
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
25/08/2010 12:33:32
mbam-log-2010-08-25 (12-33-32).txt
Type d'examen: Examen complet (C:\|D:\|E:\|H:\|)
Elément(s) analysé(s): 484911
Temps écoulé: 1 heure(s), 55 minute(s), 31 seconde(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 15
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\glassfishv3\pkg\python2.4-minimal\msvcr71.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
-
It's not the last i made but it's the lonely which found something
-
At least we know now that malware was causing your problems. :'(
-
Next, I'd like you to run an OTL log. See the thread here: http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0). You have already run the MBAM part, so you can skip that. When you run your mouse over "OTL" in red, you can download OTL to your machine...put it on your desktop and follow the instructions on the thread.
I would like you to attach the OTL log to your next post because it is very long. To attach: click on "Additional Options" in the post page > "Attach" > browse (your OTL logs will be on your desktop -- 2 logs).
Do you have any questions?
-
Now you have many informations about me..
-
I will take a look and get back to you. Thank you.
-
I'm going to refer you to one of our Certified Malware Experts. His name is Essexboy. He will respond to you in this thread. I want him to review your logs in detail and he will ask you additional questions and ask you to do more things to problem solve so we can get your machine working again. In the meantime, I will sit in the background and monitor the situation. Do you have any questions?
-
In the meantime, please to not make any changes to your machine. He should be checking in with you most likely tomorrow evening.
-
Ok, thank you and him too.
I have no question at the moment.
-
When exactly did your problem start? Is the problem that you have only with Avast starting/stopping and the mouse or is there more? He will want to know this.
-
I think my little problem with the mouse started when i have first installed avast 5 (I was running avast 4.8 before). I don't know really when it was but more than a month ago.
The problem of Avast stopping, I don't really know, I noticed it first about two weeks before starting this topic. I don't remember if I already had MSE or if I installed it later.
(I've already uninstalled MSE, following your advice)
-
I haven't seen any other problem.
-
We'll just wait for Essexboy and he will ask you more questions and give you more instructions. For now, do not make any changes to your machine or you will need to do the MBAM and OTL logs again. OK?
-
Do you think I should reinstall Avast now I have used MBAM to clean my computer from viruses ? I've just done a new analysis and it finds nothing else.
-
Does Avast update normally when you trigger a manual update ?
Run OTL
- Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {6D6B212B-2245-4898-8B16-9A11B81FF9E1} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {6D6B212B-2245-4898-8B16-9A11B81FF9E1} - No CLSID value found.
2010/07/27 17:41:47 | 000,000,000 | ---D | C] -- C:\Program Files\e
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
- Then click the Run Fix button at the top
- Let the program run unhindered, reboot the PC when it is done
- Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
-
Hello,
manual updates seem to work, automaticall updates sometimes work (at least) because my definitions are updated.
I've just done what you told me to.
-
Avast stopped while sending the last message (not writing, sending).
It seems like it couldn't be send before avast crashes
-
I can see no further indication of malware there, but it does not mean it is not hiding. Although the way it is operating is very unusual
I would like to run one further programme before I start thinking about system errors
Download ComboFix from one of these locations:
Link 1 (http://www.forospyware.com/sUBs/ComboFix.exe)
Link 2 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
* IMPORTANT !!! Save ComboFix.exe to your Desktop
- Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
- Double click on ComboFix.exe & follow the prompts.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
-
done.
-
c:\windows\system32\wininit.exe . . . est infecté!!
First lets see if you have a spare copy - if not I will give you one from my windows 7
Run OTL
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- Select All Users
- Under the Custom Scan box paste this in
/md5start
wininit.exe
/md5stop
- Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
-
It's done.
Are you sure you can give me a copy of this file ? (Will there be any problem with registration ? )
-
Ethrea,
Essexboy should be back with you shortly. Thank you for posting your logs. :)
-
Hi there my apologies for the delay I seem to have lost notification for this thread
Further analysis indicates that it was a bug in Combofix, and it was pulled. So your winit is not infected and OTL confirmed that with the MD5 signature..
What are your current problems ?
-
Still the same as before :
- Avast stops alone about every 2 hours, for no reason.
- Avast stops when I'm surfing on the Internet (about every 5 pages, and sometimes it stops firefox or google chrome).
- When I stop or uninstall avast, I cannot see my mouse.
-
This is a tad baffling as I can see no malware that would be causing this
When Avast stops could you open task manager and take a screenshot so that I can see what is happening at that stage
-
Could you please try updating to the latest pre-release version and see if it makes any difference?
http://forum.avast.com/index.php?topic=63151.0
Thanks
vlk
-
It's very surprising, Avast didn't stop today. I'll do this next time it happens.
If It doesn't happen before tomorrow evening, I'll consider there is no problem anymore. And I'll tell you on this thread.
-
Did you check the application log in the event viewer? Any errors related to avast?
Either way your best bet is to run an out of windows virus scanner or reformat and reinstall the computer. Some infections just can't be removed once they take hold.
AVG has a rescue kit that will make a bootable CD that is basically an out of windows virus scanner. UBCD also has a couple of included virus scanners that run outside of windows. These solutions require that you are comfortable in making a boot cd and booting from that CD.
http://www.avg.com/us-en/avg-rescue-cd (http://www.avg.com/us-en/avg-rescue-cd)
http://www.ultimatebootcd.com/ (http://www.ultimatebootcd.com/)
I always resort to these tools when faced with a consumer level computer that is infected heavily. They work 95 percent of the time. The other 5 percent are those cases that require a reformat and reinstall of all software.
I wish Avast had a similar tool.
-
@ Treborprime, while we appreciate your help, the OP is currently working with a Certified Malware Expert (Essexboy). Thank you. :)
-
I had no problems for two days. I think this problem : "Avast stops" is gone, I don't know how.
I still have this one : when I stop a service or uninstall Avast, I cannot see my mouse on the confirmation screen, but it's not a big problem and as long as I remember, I've always had this bug with Avast 5.
Thank you all
-
You are very welcome Ethrea. You have been very patient through this process and we appreciate it while trying to help you.
You may want to give it a few more days to make sure things are working OK. If things are working fine to your satisfaction (fixed), then please go back to the first open post in this topic, click the modify button in that Post and change the title/subject, add [Resolved] to the beginning of the title so this thread can be closed.
Feel free to come back any time you need help, to learn something new, or just to ask questions. We are here 24/7 for your convenience. It has been my pleasure assisting you. Thank you. :)
-
S***. It did it again today.
I'm trying to update to the pre-release version.
-
I'm trying to update to the pre-release version.
v.668? Are you trying a manual or automatic update?
This is a tad baffling as I can see no malware that would be causing this
When Avast stops could you open task manager and take a screenshot so that I can see what is happening at that stage
Are you able to do this for Essexboy?
Otherwise, is your machine acting OK?
Perhaps sending a mini-dump file to Avast to analyze may help....here is how to do it:
Here is additional information on how to invoke a memory dump file: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71 (http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71).
Please, zip and upload the C:\Windows\Memory.dmp file to this anonymous ftp server and name it uniquely: ftp.avast.com/incoming (http://ftp.avast.com/incoming). Avast will analyze it to try to see what might be causing the problem as well.
Let me know if you have any questions as I will be online later. Thank you.
-
I've uninstalled Avast 5.0.594, reboot twice and then installed avast 5.0.668 (which was the pre-release at this time I think), and reboot again..
Avast didn't stop "alone" but when I open firefox or chrome, avast stops as soon as I call the page www.google.com (to be precise, the first time I call this page, it stops the request and Avast, and the next time, I can do what ever I want but avast is off).
I'll try to do what you tell me to Safesurf.
-
Please check the folder C:\ProgramData\Alwil Software\Avast5\Log - are there any files called unpsome_numbers.mdmp?
If so, please send a few of them (e.g. the most recent ones) to my email.
Thanks
Vlk
-
Ethrea,
Do as Vlk, suggested in his post and email him as he requested.
Update MBAM and Avast and run scans again to make sure everything is still clean.
Do you have any add-on's in FF running? If so, what are they?
What is your Firewall? I just want to see if anything might be conflicting.
Did you already have Chrome on your machine or did you download with Avast install?
I do hope you have some antivirus running now as you should not be unprotected. If you want, the latest beta Avast version it is posted on the first page of the forum as a Sticky for download (I believe it is 5.0.673).
-
I'm just uploading my memory dump as you told me (I don't know why you told me to upload).
I will update MBAM (Avast has been updated this morning) and run a scan.
I will do what Vlk suggested but I didn't have much time last week-end.
I have many add-ons on FF which are : (I don't think it comes from this because I have the same problems with Chrome)
- Edit Cookies
- Firebug
- Firephp
- Foxtab
- Javaconsole (many versions)
- Gestionnaire de Session (sorry, it's a french one but I think you can understand what it does)
- Tamper data
- Unplug (The lonely which might cause the problem because it does something on the videos (Avast automatically stops when I'm opening a pag with a video)
- View Cookies
- View Source Chart
I already had Chrome before installing Avast! 5 (And no add-on on Chrome)
Don't worry for new viruses, I reactivate Avast as soon as it stops most of the time and I run a scan regularly, with MBAM and Avast.
-
Thanks for the dumps.
The crashes may be related to a software called "SpeedBit Video Accelerator".
Is that you have installed on your computer deliberately?
Could you please try uninstalling it temporarily to see if it solves the problem?
(you'll have to reboot after the uninstallation of the program as the DLLs are loaded into the avast process and won't unload before the reboot).
Thanks much
Vlk
-
yes, I installed it deliberately.
I uninstall it and see if the problem still happen.
-
Seems it works.
Thanks a lot.
I'll wait one or two days to be sure.
-
Which version of the product were you using by the way?
We tried to simulate the problem on one of our test machines by installing the latest version of SpeedBit but we weren't able to cause any of the crashes.
Could you please try installing the latest version of SpeedBit -- maybe the problem has already solved by them?
Thanks
Vlk
-
I'm don't think I can find which version it was anymore.
But I have no problem since I deleted it... So, it probably came from this.
If you want, I can try with the last version.