Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: DAV2 on November 04, 2011, 06:03:49 PM
-
Is there a way to fix Avast? It turns itself off and I can not get it to turn back on. I have Avast pasword protected. I tried repair, but it gave the same errors. (See attached) Also where does the backup via “Winmail” go and how would I stop it? Win 7.1 Avast 6.0.1289. Computer scans clean, all drivers are digitally singed and sfc /scannow is clean. Thanks.
-
Hi,
You have got the Side-by-Side error in your computer. This is mostly due to the corrupted Visual C++ Package in it.
This is mainly due to failed Windows Updates. So what you need to do first is, to make sure that the Windows Updates are working fine.
You can follow the bellow work around to fix the issue.
1) Download the Visual C++ 2008 redistributable package.
You will get two different packages for 32 bit and 64 bit. So make sure that you download the correct one.
For 32 bit machines.
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=5582
For 64 bit machines
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=2092
2) Click on Save File and save it to the desktop
3) Double click on the downloaded file (vcredist_x86.exe) or (vcredist_x64.exe)
4) Click on Run
5) Follow the on screen instructions to complete the installation process
6) Try to start the Avast, if error message still persist then follow the below steps
7) Click on Start and then click on My Computer
8) Double click on Local Disk (C, and then click on the Make a new folder in the left pane
9) Copy the file you downloaded into this folder
10)Click on Start and then click on All programs
11)Click on Accessories and then right click on CMD and then click on Run as Administrator
12)In Command prompt, type cd \ms and press Enter
13)Type vcred.msi and press Enter
14)Installer package will install
15)Delete c:\ms folder.
Please update us back. Have a wonderful day.. Good Karma!
-
IYogi….., Thanks for your very knowelegable explanation. I will try your solution. Do you have any insight into my other question? (Also where does the backup via “Winmail” go and how would I stop it?) Thanks
-
Hi DAV2,
The secondary issue seems to be co-related with the first one. We hope that, it will be fixed if you do the work around which we gave before.
About that Winmail issue. We need more clarity on the case. So can you please expalin what the actual issue is, so that we can help you better.
Have a wonderful day. Good Karma!
-
Thanks again. “Source = ESENT “ “Event ID = 215” ”WinMail (1920) WindowsMail0: The backup has stopped because it was halted by the client or the connection with the client failed.” That’s all I know about it. I do not have backup configured. Thanks again for your knowledgeable help.
-
Hi DAV2.
We checked the event ID that you posted before and we found this.
http://support.microsoft.com/kb/927654
Its seems to be a bug in the Windows. The article says there is nothing to worry about.
Have a wonderful day. Good Karma!
-
The first thing to try would be a system restore. Especially before going through a lot of needless work.
Always try the simple way first or you could be wasting your time on something that may not be the trouble. :)
-
The first thing to try would be a system restore.
Well, maybe.
I've gotten into some very deep poo with system restore and avast (whether or not self defence module was active) in the past (and I seem to recall Logos or Tech also reporting problems).
Maybe it's ok now - I've never had the courage to try. :-\
-
The first thing to try would be a system restore. Especially before going through a lot of needless work.
Always try the simple way first or you could be wasting your time on something that may not be the trouble. :)
My experience with W7 is that restoring the "Last Known Good Configuration" works a lot better than just a plain restore. This makes sense since the last backup may not have been a good one and so you could be restoring junk on top of junk. In addition IMO doing a regular restore can lead to timing issues. One time when I used the regular restore the avast updates were all all out wack and it was not that simple a matter to get avast back in sync again.
-
I must be weird. I have never had an issue with system restore. I am, however, very careful about selecting my restore point. With Win7 system restore goes back only about a month. We don't know what OS the OP is using. I wish we did know. ???
-
Win 7.1 Avast 6.0.1289.
-
IYogi, Thanks for the knowledgeable help. I decided to reload Win 7.1 because sfc /scannow started to fail, instead of following your instructions, that probably would have helped. Now with a new load of Win 7.1 and only accessing update and installing Avast, Avast finds a virus (confirmed by virus total as virus/Trojan). When I delete it to recycle bin, it seems to change its name and recycle bin refuses to delete it because it says it is in use by another program. How should I proceed? It took me days to get this far with an almost working load of Win 7.1 that has all drivers digitally signed and sfc /scannow verifies. Thanks.
-
Hi DAV2
Can you update us the file name you said as trojan. Or if possible, can you upload the log file that you get after the scan from virustotal.
Have a wonderful day. Good Karma! :)
-
IYogi, the file (s) are CrucialScan.exe and $RLYWJLC.exe. I will have to reload it to virus total to get some sort of copy of the log, but from memory, it was only 3/about 40 something as virus/Trojan with Avast being one of the positives. CrucialScan.exe has been on the computer for about a year without any detection by Avast until this reload. I am sorry that I do not know what is going on, but that is why I am asking for your knowledgeable input. Thanks.
-
Hi DAV2.
About the CrucialScan.exe, it is a False Positive. You can refer to this forum post regrading the issue.
hxxp://forum.avast.com/index.php?topic=87925.0
About $RLYWJLC.exe, we need more info. Is that .exe file is with any application in the computer. Can you update the location of the file.
Have a wonderful day. Good Karma! :)
-
Check scan the CrucialScan.exe again and report ?
There was an instance of this yesterday and I don't know if it was on an old version of the file or not as I was able to download it, run it without problem.
I would say download the latest version from the crucial site if you have need of it, otherwise there is little point in keeping the copy you have.
@ iYogisolutions1
There is no confirmation of that being an FP in that topic (as I didn't get an alert) and there is no need to break internal avast links (only for suspect sites).
-
Original location was \$RECYCLE.BIN\S-1-5-21-3658569426-2256287987-2341992191-1000 and it apparently is in the virus chest, but Recyclebin would still not delete it, because another program was using it. I think it was CrucialScan.exe before I deleted it.
-
Hi DAV2,
Yes, $RLYWJLC.exe can be a handle .exe file for CrucialScan.exe. As David R posted before, you can download the latest version of Crusial Scan and try out.
Have a wonderful day. Good Karma! :)
-
@DAV2,
If the file is still there and you can't delete it, try to reboot and try to delete it from recycle bin again.
If that is not enough, then reboot into Windows Safe Mode and try to delete it again. Then program a boot scan using Avast and report your results here.
-
Thanks. After removing the culprits from the virus chest, I can now go back to trying to figure out what is interfering with all the security cameras. After an expert failed to get them to work after 8 hours of trying and stating simply to replace the hardware (that all was functional independently), I am back to basically where I started before the hardware replacement. Something is still interfering with all the cameras. (Back to the expert?) I still do not know how Avast flagged an old file as positive, after ignoring it for nearly a year. In any case I never used it and have no need for a replacement. Thanks for all the help.(Maybe some of your knowledge will rub off on us ignorant with time.)
-
What do you mean by "trying to figure out what is interfering with all the security cameras." e.g. what is interfering, do you mean you can't display the feed to the computer, etc. (or is this unrelated to avast) ?
The virus database is constantly updated and added to, so it isn't unusual to find an old dormant file being detected.
-
I am very disgusted with my knowledge level. I have tried many firewalls and have learned that they all get turned off. The latest was Comodo with the message click to fix me, but no explanation as to why or how to prevent it again. Is a firewall even needed, especially since I haven't found one that consistently works? Also is it normal for Avast to now report that the files that it put into its virus chest are now without virus? Thanks. (Sorry, I do not know if it is Avast, or for that mater what is causing all the cameras to not display and for that mater, even the expert after 8 hours of trying. Just expressing some of my frustration. Avast and all firewalls never blocked the cameras before.)
-
Firewalls getting turned off is unusual and the most common cause is malware as they don't want to be blocked. A firewall is an essential part of your system security, the win7 one is better than nothing, but outbound protection is disabled by default it is rules based and you have to create the rules so isn't very user friendly.
You say in other posts scans come up clean, what scanners have you used ?
Try MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe (http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe), right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. Download, Install, Update, run a Quick scan and post the contents of the log file.
As I said before the virus database is constantly updated and added to; this can be because of a false positive detection and the signature would be corrected. This is why it is important not to delete files, but send to the chest and rescan them after a few weeks. If they are no longer detected then they can be restored from the chest.
Presumably your cctv cameras use software to stream the content to your computer ?
If so they would have an IP address (?), this could be excluded from the web shield scanning or there is another option:
- Try opening the avastUI, Real_Time Shields, Web Shield, Expert Settings, and check the 'Scan traffic from well-known browser processes only,' option.
Note: If you break your posts up into sections it is much easier for us to read' help and reply.
-
David, thanks for your knowledgeable suggestion. Thanks for the info on Malwarebytes. Yes, I do run it. Latest scan said Objects infected: 0.
Sorry about all the disorder. Avast was updated at least 1 time between the sequestering of the files yesterday PM and the all clear today AM. This still does not explain the virus total results, nor the flagging right after new reload of Win with the same version of Avast that did not see it before reload. I reloaded Avast from a thumbdrive.
I tried your fix of checking 'Scan traffic from well-known browser processes only,', unfortunately, something else must still be blocking all the cameras.
Yes, being without much knowledge, paranoia abounds and malware does come to mind when I see all firewalls turned off at will. Thanks for all your help.
-
I don't believe the files placed in the chest would have anything to do with the inability to view the cctv content. Have you ever been able to view the cctv content (prior to these detections or prior to avast) ?
I see nothing in this topic about virustotal results, so I can't comment, I'm not even sure what it is in relation to either. Again I don't know what file you are talking about, reloading windows doesn't remove the existing programs and data unless you have it format the drive, otherwise it just installs windows over the old version. Plus there is no mention of any windows files having been detected, so I'm unable to comment without more details.
But it seems we are diving off at a tangent and not concentration on the existing problem rather than historic events.
-
I reloaded Avast from a thumbdrive.
???
I tried your fix of checking 'Scan traffic from well-known browser processes only,', unfortunately, something else must still be blocking all the cameras.
Well, installing several security tools, as for example several firewall tools, all simultaneously or even one after the other, is not going to make things any easier, to say the least. Even after uninstalling, some remnants may be left behind, and that's why there are specific removal utilities for specific security tools.
Yes, being without much knowledge, paranoia abounds and malware does come to mind when I see all firewalls turned off at will. Thanks for all your help.
As David suggested, this topic is all mixed with very different issues. If you really want a working solution, I would suggest some friend or technician that could at least leave your system in a working state. You are welcome to keep asking here, and I'm sure we will try to help, but the fact is that there is some limit about how much directions, instructions and general help can be provided by means of a forum topic.
Please, don't get me wrong. Keep asking whatever you want and need, and we'll try to help anyway we can. I just think that it could be more effective if you get a direct help from someone with direct access to your system (although not everyone might be fit to the specific task).
-
Why not just uninstall Avast from Add/Remove Programs?
Than download and run the complete Avast Uninstall Utility Here: (Follow the instructions exactly.)
http://www.avast.com/en-us/uninstall-utility
Than get a fresh download of Avast at www.avast.com
Register for your license key.
It sounds like a complete removal and reinstall of the product might be needed as previous options for fixing Avast have not worked.
Jack
-
I apologize for my ignorance and yes I will be in contact with “expert” on site help in the near future, but since “something” had changed the name of a suspect file (virus/Trojan?) and was preventing my deleting it, I felt compelled to inquire. It isn’t very often that a suspect file (virus/Trojan?) changes its name and refuses to be deleted, so I was wondering if this was normal “Avast” behavior or if there was another process on the computer that would be changing the file’s (virus/Trojan?) name and opening it so as to prevent my deleting it. Sorry about bringing up the cameras, but that is still a mystery to me.
Yes, the file was confirmed on virus total, but with a very low score and Avast cleared it (?) with its very next update (or was another process rehiding it after reboot?) In any case I was looking for “expert” advice on how to interpret a file that “Avast” was calling a virus, virus total was confirming, its name was changing like a chameleon and “something” was preventing me from deleting it. Thanks for all your help
-
Well I hope that by your silence here that all the experts are confirming that everything sited above is "NORMAL" Avast behavior. Apparently Avast does flag files that it does not see with a previous load of Win, that are confirmed by VT, that names are changed and prevented from deletion by Avast. Then Avast clears them all with next reboot of computer. BTW, I got the cameras to work on one test computer that I applied your fix on and installed a better firewall. They even no longer give the multisecond delay as before but show real live data. Thanks.
-
It is more of we really don't know that this is normal, certainly in my case.
You have only mentioned two file names, CrucialScan.exe, which I though we had thrashed to within an inch of its life, now you have removed it that should be it.
The other file toy mentioned was $RLYWJLC.exe and I can' find zero information on it or on RLYWJLC.exe (dropping the $ from the name).
So I really don't understand what it is that you are trying to say by this:
but since “something” had changed the name of a suspect file (virus/Trojan?) and was preventing my deleting it, I felt compelled to inquire. It isn’t very often that a suspect file (virus/Trojan?) changes its name and refuses to be deleted,
- Nothing has previously been mentioned about file names being changed so what is it change to and what is its location?
- What is the precise wording of any error message ?
-
WT_? ??? >:( This is not the first time my posts are deleted!!!! >:(
-
WT_? ??? >:( This is not the first time my posts are deleted!!!! >:(
What did you post...???
-
WT_? ??? >:( This is not the first time my posts are deleted!!!! >:(
What did you post...???
Does it matter? It was not now. The wrong deletion of posts is not a one-time thing (and it has not happend just to me). My post was all technical, and nothing that would trigger any mod to even think about deleting it.
I am used to see users not reporting back, or not answering, giving the impression that we (users trying to help) are just "throwing" our precious time. But when a post is deleted, specially with no reason, really "hurts" (and please don't take this as an "emotional" reaction or alike).
There is nothing concrete I can do about it (other than stop posting). Sorry for the OT (although I am indeed still P1$$3D 0FF >:( ).
-
But when a post is deleted, specially with no reason, really "hurts" (and please don't take this as an "emotional" reaction or alike).
I understand what you mean..!
-
ady4um, just to say it was not me ;D
-
WT_? ??? >:( This is not the first time my posts are deleted!!!! >:(
What did you post...???
Does it matter? It was not now. The wrong deletion of posts is not a one-time thing (and it has not happend just to me). My post was all technical, and nothing that would trigger any mod to even think about deleting it.
<snip>
Of course it matters as content is king as they say.
For instance if you had replied to a spammer and quoted text from a spammer. Then if the spammer was banned and posts deleted then referenced to the deleted account may have been cleaned up.
I'm not saying that is what happened in this case, as obviously I'm quite familiar with this topic and I can't recall any holes in the topic or and spammer posts. So I'm not sure what happened, which is why content/context and who you were replying to might throw some light on it.
-
As said, the content was technical and in no way related to some spammer, and was certainly not bad language or similar.
Most importantly, also said, there is nothing concrete that can be done now. It's not the end or the world, and I was certainly not going to receive some Nobel Prize for my writing ;). Usually I wouldn't even post such a comment (nothing to do about it). I was mostly "shocked" to find this situation.
The faster we move on (and leave the OT behind), the better. Thanks for your inputs. Let's move on (and I hope this won't stop from the main issue to keep developing forward, if needed).