Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: dragonez2001 on July 31, 2004, 07:25:14 PM
-
I am using Win98SE and have had Avast for quite a few months. I ran Avast today and in the middle of running a Windows error message popped up saying "This program has performed an illegal operation and will be shut down." I came here to your site and downloaded the virus cleaner and when I try running it I get the same error message...ASWCLNR caused an invalid page fault in
module USER.EXE at 001e:00002a04.
Registers:
EAX=0000000c CS=16f7 EIP=00002a04 EFLGS=00000a02
EBX=00448908 SS=4df7 ESP=000088d0 EBP=000088d4
ECX=00020004 DS=4df7 ESI=000088e6 FS=5757
EDX=0000000c ES=016f EDI=0044c44c GS=0000
Bytes at CS:EIP:
67 66 ab e2 f7 c3 66 33 c0 b9 02 00 ad 67 66 ab
Stack dump:
16d70b1d 38868908 4df788e4 00000004 02380413 0018000c 00300024 01920238 00000004 0044c44c 00000001 c0360006 0044c44c 16f72d8c bff714d9 00000167
HELP!
-
Dragon,
l
Page Fault errors and the Stack dump are usually caused when an attempt is made by a program to access a memory location which fails.
This is normally not a cause for worry. Usually rebooting takes care of the problem.
If not, then I would recommend a diskscan and defrag.
Let me know.
Techie
-
ASWCLNR caused an invalid page fault
Just a curiosity, did you 'empty' your windows temporary folder to cause this error? ::)
-
Hmm, strange error from the 16-bit subsystem. Does the same error occurs when you restart the computer and try to start Cleaner again?
What was the exact error of avast! itself? (check the <avast4>\Data\log folder, please - is there a file called unpXXXXXXXX where X are some numbers, with the date corresponding to the crash?)
-
As far as I know I didnt do anything different than before. I havent tried to do the virus cleaner again...and no, there is nothing in the log...*sighs* I just tried the virus cleaner again and same thing...Avast is working kinda ok...my puter has a trojan in the memory that it cant repair, move or delete. a .dll file the system uses it says...the only thing I can tell it is affecting is IE home page continues to default to msn.com no matter how many times I change it...grrrrr
-
my puter has a trojan in the memory that it cant repair, move or delete. a .dll file the system uses it says...the only thing I can tell it is affecting is IE home page continues to default to msn.com no matter how many times I change it...grrrrr
Don't get angry get even, let us try to help by telling us what it is, trojan name, location and name of dll file you mention. With a lack of detailed information it is hard to help. Check out the two threads below.
Please Help us to Help you - User's FAQ (http://forum.avast.com/index.php?board=9;action=display;threadid=4818)- we need more information to be able to help fully. A visit to the - thread will give you a lot of useful advice and an idea of the information needed to Help you fully.
General Advice&Tools for virus/trojan/malware removal (http://forum.avast.com/index.php?board=4;action=display;threadid=5373)
If you need more help, come back here with more info..
HTH David
-
thanks so far...this is so frustrating :-\
the trojan hasnt popped back up today but I still get the error message when I download the virus cleaner and try to run it...what can I do to get it to work??
I will write down the necessary info next time! ;)
-
okies! got the info!
VBS:Malware [Script]
C:\Windows\Temp\sp.html
C:\Windows\Temp\hp.html
also memory is infected...the .dll changes each time...this time it showed as:
Win32:Startpage-006[Trj]
C:\Windows\System\nhb.dll
VPSversion 0432-1,08/03/2004
-
okies! got the info!
VBS:Malware [Script]
C:\Windows\Temp\sp.html
C:\Windows\Temp\hp.html
also memory is infected...the .dll changes each time...this time it showed as:
Win32:Startpage-006[Trj]
C:\Windows\System\nhb.dll
VPSversion 0432-1,08/03/2004
Did you read and follow the information on the thread I gave the link for, General Advice&Tools for virus/trojan/malware removal (http://forum.avast.com/index.php?board=4;action=display;threadid=5373) ???
Much of the information and other links, etc. should help you. A search of this forum for Win32:Startpage-006 would return much information, this has been a thread topic before (many times).
In order to get into memory a program has to run to put it there, you need to disable that startup entry.
Programs like HijackThis can remove these entries and give you a head start.
1. Clear your temp directory.
2. Clear your browser cache.
3. Read the information (again) on the General Advice&Tools for virus/trojan/malware removal (http://forum.avast.com/index.php?board=4;action=display;threadid=5373) thread that I gave you before. If you need more help, come back here with more info...