Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Ghost2 on April 22, 2011, 03:40:48 PM

Title: Serious computer crash
Post by: Ghost2 on April 22, 2011, 03:40:48 PM
I'm using Avast Free Antivirus 6. After i try to open something from the 300GB hard drive, the computer crashes. Sometimes it crashes when the computer doesn't do anything. After i turn off a protection, pl. Behaviour prot. and turn if on again, the computer doesn't crash anymore until the next restart.

Can someone help?


Computer parameters:

Intel Celeron 2,4 GHz
2 GB RAM
60 GB and 300 GB hard drive
Windows xp Home SP2
Avast Free Antivirus 6.0.1091
Title: Re: Serious computer crash
Post by: Asyn on April 22, 2011, 03:44:49 PM
First thing to do: update your XP to SP3..!
asyn
Title: Re: Serious computer crash
Post by: igor on April 22, 2011, 03:51:46 PM
If by "crashes" you mean bluescreens - do you have any recent minidump files (with timestamps corresponding to the crashes) in C:\Windows\Minidump folder?
Title: Re: Serious computer crash
Post by: Ghost2 on April 22, 2011, 03:57:31 PM
No blue screen, just crash. I can move the mouse arrow, but can't do anythingelse.

The another problem is that when Avast finds a virus, the computer slows down for about 30 secons.
Title: Re: Serious computer crash
Post by: Lisandro on April 22, 2011, 05:34:18 PM
Maybe you can manual dump: when the machine is in stalled state, hold down the rightmost CTRL key, and press the SCROLL LOCK key twice. This will cause a machine to 'blue-screen' and dump of memory will start.
More info: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71

To generate full dump instead of only kernel (or small dump), see http://www.msfn.org/board/creating-memory-dumps-t130005.html.
Title: Re: Serious computer crash
Post by: Asyn on April 22, 2011, 06:19:55 PM
Guys, first we should be sure that this is a legit XP, else many weird things can happen. ;)
asyn
Title: Re: Serious computer crash
Post by: Ghost2 on April 22, 2011, 11:41:25 PM
Genuine xp
Title: Re: Serious computer crash
Post by: Asyn on April 22, 2011, 11:45:57 PM
Genuine xp

Good. :)
So update to SP3.
Title: Re: Serious computer crash
Post by: Ghost2 on April 23, 2011, 12:06:15 AM
Already tried SP3 on another computer. After the install, can't connect to the internet anymore!
Title: Re: Serious computer crash
Post by: Ghost2 on April 23, 2011, 12:07:57 AM
Some computer works fine with SP3 but some not

PC professionals recommand not to install SP3, only for a nwely installed system.
Title: Re: Serious computer crash
Post by: Gopher John on April 23, 2011, 12:15:58 AM
Some computer works fine with SP3 but some not

PC professionals recommand not to install SP3, only for a nwely installed system.

PC professionals like vulnerable computers.  They get paid to remove malware. ;D
Title: Re: Serious computer crash
Post by: Tarq57 on April 23, 2011, 04:24:07 AM
An important thing to remember is that SP2 is no longer supported by MS.
If you have SP3 installed, support will continue 'til sometime in 2014.
Many security vulnerabilities have had patches issued since SP3 was released. It is likely you would have missed some of those, using SP2.

Update your computer to SP3. Restart when prompted. Let it take the time it needs. A second reboot might be advisable. Then, go to Windows updates. You might be surprised.
Title: Re: Serious computer crash
Post by: Ghost2 on April 23, 2011, 06:43:06 PM
I've installed SP3, the computer (and the internet) works, but the Avast still crashes!

What can i do?
Title: Re: Serious computer crash
Post by: Asyn on April 23, 2011, 06:50:18 PM
I've installed SP3, the computer (and the internet) works, but the Avast still crashes!

What can i do?

Try a clean install.

1. Follow instructions here: http://www.avast.com/uninstall-utility
2. Reinstall avast. http://files.avast.com/iavs5x/setup_av_free.exe
Title: Re: Serious computer crash
Post by: Ghost2 on April 23, 2011, 11:51:56 PM
I've reinstalled, but the problem is the same.

When i run a full system scan, some files can't be scanned (Compression bomb). What is the compression bomb?
Title: Re: Serious computer crash
Post by: Asyn on April 23, 2011, 11:56:29 PM
1. I've reinstalled, but the problem is the same.

2. When i run a full system scan, some files can't be scanned (Compression bomb). What is the compression bomb?

1. What crashes and when and how..??
2. You can ignore this.
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 12:05:52 AM
When i'm trying to read from the 300 GB hard drive, the computer immediately crashes.
Title: Re: Serious computer crash
Post by: Asyn on April 24, 2011, 08:16:38 AM
When i'm trying to read from the 300 GB hard drive, the computer immediately crashes.

As you don't get a BSOD.
How does it crash..? What happens..?
You can run free Mbam, to check if the system is clean. (Update it after install..!!!)
http://www.malwarebytes.org/mbam.php
Title: Re: Serious computer crash
Post by: Coolmario88 on April 24, 2011, 08:23:21 AM
Crashes like what the OP is saying happened on my windows xp computer when i had google chrome installed. but it stopped after google chrome got removed.  So basically the Crashes on your computer Could be happening from a program that you have installed.
Title: Re: Serious computer crash
Post by: Tarq57 on April 24, 2011, 09:08:36 AM
CoolMario, it is possible there is a program confliction, however that doesn't address the cause of it. The majority of users can run Avast and Chrome, or any other legitimate program.

I'm suspecting malware at this point.
I think an OTL log might be called for. But first, details about the system crash would be useful. As Asyn has asked. Please state "how" it crashes.
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 10:52:50 AM
When i'm trying to read from the 300 GB hard drive, the computer immediately crashes.

As you don't get a BSOD.
How does it crash..? What happens..?
You can run free Mbam, to check if the system is clean. (Update it after install..!!!)
http://www.malwarebytes.org/mbam.php



Just stops, doesn't do anything, just the mouse arrow moves.
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 11:17:36 AM
An important thing:
The crashes start only after an update.
Title: Re: Serious computer crash
Post by: Tarq57 on April 24, 2011, 11:26:49 AM
Do you mean it becomes unresponsive, or programs close by themselves? Does it freeze on whatever screen is up at the time? You say you still have the mouse. Can you right-click the bottom task bar when this happens and open task manager: find out what process is using most of the CPU?

If the above isn't accurate, describe more accurately what it's doing.
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 11:38:49 AM
Do you mean it becomes unresponsive, or programs close by themselves? Does it freeze on whatever screen is up at the time? You say you still have the mouse. Can you right-click the bottom task bar when this happens and open task manager: find out what process is using most of the CPU?

If the above isn't accurate, describe more accurately what it's doing.


It becomes unresponsive! The programs don't close, totally freeze, mouse moves, but can't click.
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 12:45:48 PM
The exact problems are:

When i start the computer it starts normally, but after I trying to open something from or copy to the 300 GB hard drive (simply click on its icon from the "My computer", the computer immediately crashes (unresponding). Also when i want to open the Recycle bin, this happens (maybe the recycle bin opens the 300 GB hard drive too). And sometimes crashes suddenly.
BUT when I turn off one of the parmanent protections, and try to use the 300 GB hard drive, and re-enable protection, it works correctly until the next computer restart.



The another problem is that when avast found a threat on the flash drive, the browsers (IE and Firefox) become very slow until the next computer restart, even the flash drive was removed.
Title: Re: Serious computer crash
Post by: Shiw Liang on April 24, 2011, 12:52:00 PM
It is an external hard disk :)
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 12:58:54 PM
It is an external hard disk :)

Can't handle external hard drives?
Title: Re: Serious computer crash
Post by: Shiw Liang on April 24, 2011, 01:00:12 PM
At school when I put my pen drive to the pc (ram half 512mb and OS windows Xp SP2)
Well sometimes it can open properly and sometimes it freezes when "my computer" is opened
When I close "my computer", crash...everything is gone on the screen except wallpaper and cursor.
What I do is that I remove the pen drive (Without doing safely remove might lose data) and the screen returns to normal again...
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 03:43:09 PM
At school when I put my pen drive to the pc (ram half 512mb and OS windows Xp SP2)
Well sometimes it can open properly and sometimes it freezes when "my computer" is opened
When I close "my computer", crash...everything is gone on the screen except wallpaper and cursor.
What I do is that I remove the pen drive (Without doing safely remove might lose data) and the screen returns to normal again...

The pendrive works fine until Avast doesn't find a threat. The computer doesn't crash because of the pendrive, just slows down the browsers.
Title: Re: Serious computer crash
Post by: Shiw Liang on April 24, 2011, 03:47:56 PM
Actually I am wondering if your external hard disk is not overloaded...or that your computer is not reading it too slowly
Title: Re: Serious computer crash
Post by: Ghost2 on April 24, 2011, 07:50:53 PM
Actually I am wondering if your external hard disk is not overloaded...or that your computer is not reading it too slowly

No the hard disk isn't slow without Avast, but when Avast is turned on (after the permanent protection switched off and after switched on), writing to the hard drive is slow (halting). The HDD isn't overloaded (245 GB free)
Title: Re: Serious computer crash
Post by: Tarq57 on April 24, 2011, 11:38:07 PM
So the 300G hard drive is an external hard drive, then.

I recommend you try the MBAM program linked to in reply 18, first on your own computer. Run a quick scan. Have it remove anything found.
If anything was found, run a second, full scan. Remove anything found.
Reboot immediately if prompted.
Then, plug the external drive in and scan that.
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 11:18:12 AM
So the 300G hard drive is an external hard drive, then.

I recommend you try the MBAM program linked to in reply 18, first on your own computer. Run a quick scan. Have it remove anything found.
If anything was found, run a second, full scan. Remove anything found.
Reboot immediately if prompted.
Then, plug the external drive in and scan that.

Avast can't removes malwares?
Title: Re: Serious computer crash
Post by: Tarq57 on April 25, 2011, 01:21:21 PM
Mostly, Avast can, when it is detected.
MBAM is more aimed at trojans and rogues, and has a very good reputation as a demand (or resident) second scanner.
Try it.
Update it after installation. Updates are typically ~5Megs.
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 06:04:02 PM
Mostly, Avast can, when it is detected.
MBAM is more aimed at trojans and rogues, and has a very good reputation as a demand (or resident) second scanner.
Try it.
Update it after installation. Updates are typically ~5Megs.

Ok, I've installed, updated and run.
It found 16 Trojans! Trojan.Agent

15 exe files (in C:\Windows\Temp) and 1 registry key


But the computer still crashes because of Avast!
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 06:07:16 PM
Ok, I've installed, updated and run.
It found 16 Trojans! Trojan.Agent

Post the Mbam log.
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 06:11:27 PM
Ok, I've installed, updated and run.
It found 16 Trojans! Trojan.Agent

Post the Mbam log.


It's hungarian.

Translation to english:

Malwarebytes Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6439

Windows 5.1.2600 Service packet 3
Internet Explorer 7.0.5730.11

The 2011.04.25. 17:30:55
mbam-log-2011-04-25 (17-30-55).txt

The type of an examination: Full examination (A:\|C:\|F:\|)
Examined objects: 240431
Time passed: 5 clocks, 16 minutes, 16 seconds

Infected memory processes: 0
Infected memory modules: 0
Infected system descriptor keys: 1
Infected system descriptor values: 0
Infected system descriptor data elements: 0
Infected portfolios: 0
Infected files: 15

Infected memory processes:
(Cannot be found malicious elements)

Infected memory modules:
(Cannot be found malicious elements)

Infected system descriptor keys:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000005-0000-0000-0000-100009000004} (Trojan.agent) -> Quarantined and deleted successfully.

Infected system descriptor values:
(Cannot be found malicious elements)

Infected system descriptor data elements:
(Cannot be found malicious elements)

Infected portfolios:
(Cannot be found malicious elements)

Infected files:
c:\WINDOWS\Temp\win14a7.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\win14c2.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\win1aa.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\win68c.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\win6e5.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\win733.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\wina34.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\wina4b.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\winad8.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\winaed.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\winc2d.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\winc40.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\wincc1.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\winccb.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\Temp\wind50.tmp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 06:37:08 PM
1. Run a boot time scan with avast.
2. Run Mbam again.
If your system is clean follow step 3-6
3. Run CCleaner. http://www.piriform.com/ccleaner
4. Update your IE to version 8.
5. Run MS update.
6. Report back.
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 07:11:33 PM
I don't use IE!
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 07:15:56 PM
I don't use IE!

Your system does anyway. ;)
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 07:17:51 PM
I don't use IE!

Your system does anyway. ;)


Default browser is Firefox, nothing use IE
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 07:20:55 PM
Default browser is Firefox, nothing use IE

It doesn't matter which browser you use.

Edit: But you can skip 4., if you promise to follow 5. ;D
Title: Re: Serious computer crash
Post by: Gopher John on April 25, 2011, 08:56:13 PM
I don't use IE!

Your system does anyway. ;)


Default browser is Firefox, nothing use IE

Wrong.  Start reading this thread at http://forum.avast.com/index.php?topic=76891.msg637730#msg637730 (http://forum.avast.com/index.php?topic=76891.msg637730#msg637730)

Specifically, follow the links in post http://forum.avast.com/index.php?topic=76891.msg637847#msg637847 (http://forum.avast.com/index.php?topic=76891.msg637847#msg637847).

Title: Re: Serious computer crash
Post by: YoKenny on April 25, 2011, 09:08:50 PM
I don't use IE!

Your system does anyway. ;)


Default browser is Firefox, nothing use IE
I see that you now have more than 20 posts which will permit you to update your profile to include signature information.

Please go to PROFILE then Modify Profile then Forum Profile Information then Please select your country: then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice.

In Account Related Settings select Hide email address from public to prevent scammers and spammers harvesting your freemail.hu email address.
Title: Re: Serious computer crash
Post by: pcclean3453 on April 25, 2011, 10:01:13 PM
You mean a decompression bomb? ??? A decompression bomb is either a too-big file to be scanned by avast!, or it's a zip file that dumps a HUGE amount of data on your hard drive.
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 10:05:53 PM
You mean a decompression bomb? ??? A decompression bomb is either a too-big file to be scanned by avast!, or it's a zip file that dumps a HUGE amount of data on your hard drive.

You should quote the post of whoever this reply goes to. ;)
Title: Re: Serious computer crash
Post by: Ghost2 on April 25, 2011, 10:11:06 PM
You mean a decompression bomb? ??? A decompression bomb is either a too-big file to be scanned by avast!, or it's a zip file that dumps a HUGE amount of data on your hard drive.

This bomb is a file which doesn't exist, but the avast! found it.
Title: Re: Serious computer crash
Post by: Asyn on April 25, 2011, 10:15:53 PM
This bomb is a file which doesn't exist, but the avast! found it.

Forget about the decompression bomb.
That's not your machine's problem. ;)
Title: Re: Serious computer crash
Post by: YoKenny on April 26, 2011, 12:32:07 AM
You mean a decompression bomb? ??? A decompression bomb is either a too-big file to be scanned by avast!, or it's a zip file that dumps a HUGE amount of data on your hard drive.

This bomb is a file which doesn't exist, but the avast! found it.
Please read this topic:
What is a decompression bomb.
http://forum.avast.com/index.php?topic=8943
See igor's answer
Quote
A decompression bomb is a file that unpacks to an enormous amount of data - thus "flooding" the unpacking engine.

You still need to update to IE8.
Title: Re: Serious computer crash
Post by: iRonzel on April 26, 2011, 01:58:50 AM
Some computer works fine with SP3 but some not

PC professionals recommand not to install SP3, only for a nwely installed system.

::)
Title: Re: Serious computer crash
Post by: Lisandro on April 26, 2011, 02:40:05 AM
PC professionals
Professionals? Really? I can't imagine, really.
Title: Re: Serious computer crash
Post by: Coolmario88 on April 26, 2011, 03:24:40 AM
Steps to take before you install Service pack 3 for windows xp: http://support.microsoft.com/kb/950717