Author Topic: Startup delay  (Read 37033 times)

0 Members and 1 Guest are viewing this topic.

Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Startup delay
« on: December 04, 2004, 10:35:35 PM »
Hi,

i have W2K Pro latest Win Update.

Avast 4.1 was running great, also with Kerio Pers. FW.

Avast 4.5 has always taken about 30 secs to finish startup after login, but moving from 4.5.523 to 4.5.549 increased the delay up to 3-4 min.! The notorius red interdiction sign on its systray icon is visible and most of other processes get stuck in the meanwhile. Clicking it shows the classic "The AAVM subsystem detected a RPC error" popup.

At the same time a warning is logged in the App Log (WMI ADAP was unable to process the RemoteAccess performance library due to a time violation in the open function), an error is logged in the Sys Log (The avast! Antivirus service hung on starting) and the Avast Antivirus service shows up as "starting" in the Services MMC snapin.

Pls note that i already tried:
- repair installation
- remove/reboot/reinstall/reboot/update/reboot
- remove Kerio 4.1(2)

and verified that RPC services are running fine.

Could somebody gimme some other ideas pls?

Thank you,
Schar07
« Last Edit: December 04, 2004, 10:41:18 PM by schar07 »

Offline DukeNukem

  • Sr. Member
  • ****
  • Posts: 335
Re:Startup delay
« Reply #1 on: December 04, 2004, 10:52:10 PM »
I had win2k installed on my pc a few days ago and was experiencing the exact same problem with 4.5 home ed

Perhaps its a bug??

« Last Edit: December 04, 2004, 10:52:39 PM by DukeNukem »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67247
Re:Startup delay
« Reply #2 on: December 05, 2004, 04:56:27 AM »
and verified that RPC services are running fine.

Sure they will... you won't even start Windows without this service  ;D

Do you have any other antivirus installed in your computer?
Did you have in the past? Which one?
RPC error is generally related to other antivirus present or, at least, firewall blocking. Do you use a firewall? Which one?

Anyway, RPC error is most likely correct by this procedure:
Go to Control Panel > Add/Remove programs > avast! antivirus > Remove
Then choose Repair function in the pop up window (Repair).

If this does not help, can you uninstall / boot / install / boot again?
The best things in life are free.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67247
Re:Startup delay
« Reply #3 on: December 05, 2004, 04:57:07 AM »
Perhaps its a bug??

No, it's a problem on your computer or on your avast installation...  :'(
The best things in life are free.

Offline techie101returns

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1900
Re:Startup delay
« Reply #4 on: December 05, 2004, 05:26:51 AM »
schar,

Try one of these links.  I believe that the first link should solve your problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;266416

also..

http://support.microsoft.com/default.aspx?scid=kb;en-us;259796

Good luck.

Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Re:Startup delay
« Reply #5 on: December 06, 2004, 12:22:25 PM »
Hi,

Techie101,
thanks for suggestion. I Set PerfDisk and RemoteAccess Performance Counters to disable and now i no longer have those warnings in the logs. It means they weren't related to Avast.

Technical,
Repair does not work, neither does Uninstall/Reboot/Install/Reboot, i tried several times.

I had PC Cillin 2002, then moved to Avast 4.1 and so forth. I have cleaned disk and registry a long ago, though, and Avast was doing great.
I have Kerio Personal Firewall 4.1(2), but it is not the issue (see below).
I do have Norton SystemWorks 2004, Norton Utilities 17.0.0.82 and Norton Cleansweep 8.0.0.79 but no Norton AV, if it matters.
I am always logged-in as Administrator.
I also used Dependency Walker to analyze ashserv.exe: no suspect missing functions or libraries, of course.

OK, let's try again.

I uninstalled Avast (and Kerio), cleaned HD and Registry with tool from Alwil (and instructions from Kerio website FAQ) and manually, removing also the relevant LEGACY_* protected keys. Of course with reboot after every step.

Then i started installing a copy of Avast 4.1: same issue.
This means something happened to my W2K installation. However Avast is the only program to have issues, and if you wait long enough .. it works great.

Avast is simply waiting for a timeout, somewhere ...

4.1 up to 4.5.523 do show 1:37 delay in the System Log between these 2 events:
Information - eventlog - Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor Free.
Error - Service Control Manager - The avast! Antivirus service hung on starting.

4.5.549 delay is 4:34.

After 6 seconds all hung startup processes have loaded, and Avast tray icon is active and working with no further issues at all until next reboot.
An example of process waiting for Avast is the 2nd User-owned kpf4gui.exe (while kpfss.exe and System-owned kpf4gui.exe start flawlessly), but there are other programs that will wait if i run them while Avast is hung.

All delays are very consistent.

So Avast is somewhat guilty, here: what did change between 523 and 549?? Answer to this could lead to issue solution.

Oh, yes: i find quite funny that ashserv.exe stays "starting" for so long ... and right after logging the error in the System Log it moves to "started" and works flawlessly :-)

Schar07

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31302
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Startup delay
« Reply #6 on: December 06, 2004, 12:31:45 PM »
There is a util with which you can manage Windows boot options and the sequence in which way applications are loaded at boot time. I can't remember the name and don't know if it will work with 2k, but give it a try. It is mentioned in several threads here.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67247
Re:Startup delay
« Reply #7 on: December 06, 2004, 02:02:05 PM »
There is a util with which you can manage Windows boot options and the sequence in which way applications are loaded at boot time. I can't remember the name and don't know if it will work with 2k, but give it a try. It is mentioned in several threads here.

It is Startup Delayer: http://www.r2.com.au/downloads/files

Anyway, I think Alwil team should make some tests with the compatibility with Kerio Firewall. Maybe some 'extra' update is needed for it (as it was for Norton and McAffee firewalls...).
The best things in life are free.

Offline DukeNukem

  • Sr. Member
  • ****
  • Posts: 335
Re:Startup delay
« Reply #8 on: December 06, 2004, 02:26:15 PM »

Information - eventlog - Microsoft (R) Windows 2000 (R) 5.0 2195 Service Pack 4 Uniprocessor Free.
Error - Service Control Manager - The avast! Antivirus service hung on starting.


I have done 4 clean re installs of 2k and still get this error message.

Each time all i had installed was nforce system drivers and display drivers, no other software.

On each reboot once I was at the desktop you cant do anything  for about 3 mins until avast has started.

I will try win2k and avast on a completely different PC and post back my results.


Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Re:Startup delay
« Reply #9 on: December 07, 2004, 12:24:52 AM »
Anyway, I think Alwil team should make some tests with the compatibility with Kerio Firewall. Maybe some 'extra' update is needed for it (as it was for Norton and McAffee firewalls...).

Actually my tests convinced me that Kerio is not the bad boy here, see prev. post.

Guys,

I tried several startup tools one after the other, like StartupFaster, NitroBOOT, Startup Guru, Startup Faster! 2004 and Startup Delayer.

All of them focus on startup programs launched by registry keys or startup group, and none of them allows to control the services load order neither to put some checkpoints/breaks within the boot sequence (if you are aware of such a tool let me know, please).

Here ashserv.exe is the problem, unfortunately, and it starts far earlier.

The only dependency it has got is RPC service (which has none itself). So with Process Explorer i got the PID of the svchost -k rpcss instance and confirmed that when Avast starts the RPC service is already started and running:

- RPC = 456
- aswUpdSv = 532
- ashserv = 548
- ashDisp = 1252

1st startup program has PID = 1076, just to give you the idea (well, of course supposing that greater PID means more recent process...mmhhh)

Great, so why the hell is Avast hanging for so long???

Thanks all in the meanwhile,
Schar07
« Last Edit: December 07, 2004, 12:34:38 AM by schar07 »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11664
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Startup delay
« Reply #10 on: December 07, 2004, 02:24:18 AM »
Hi, let me ask a question: do you have Outlook (I don't mean Outlook Express, I mean the regular Outlook) installed? :)
If at first you don't succeed, then skydiving's not for you.

Offline chips

  • Jr. Member
  • **
  • Posts: 25
  • I'm a llama!
Re:Startup delay
« Reply #11 on: December 07, 2004, 01:11:53 PM »
Hello I have Windows XP with Service pack 2.

I have the same problem. Startup with version  4.5.549 is taking alot more time. Avast stucks for a minute(avast icon is there, but protection is disabled) and all other processes don't load either at the same time. I don't have Kerio and I have installed Outlook, but I don't configured that one and it's not my standard client.
« Last Edit: December 07, 2004, 01:18:15 PM by chips »

Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Re:Startup delay
« Reply #12 on: December 07, 2004, 02:58:28 PM »
Hi, let me ask a question: do you have Outlook (I don't mean Outlook Express, I mean the regular Outlook) installed? :)

Yes Vlk,

Outlook 2003, installed and default client. And if it matters ....
C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MAPIR.DLL
is version 11.0.6355.0.

I attached the WinDbg debugger to ashserv.exe for Avast 4.5.523 and 4.5.549: i attach the debugs one by one, you can find where it stops loading looking for my comments, between "!!!!!".

Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Re:Startup delay
« Reply #13 on: December 07, 2004, 02:59:25 PM »
----- 4.5.523 -----
Symbol search path is: c:\temp

Microsoft (R) Windows Debugger  Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: "C:\Network\Avast\ashServ.exe"
Symbol search path is: c:\temp
Executable search path is:
ModLoad: 00400000 00416000   ashServ.exe
ModLoad: 77f80000 77ffd000   ntdll.dll
ModLoad: 77d30000 77da1000   C:\WINNT\system32\RPCRT4.dll
ModLoad: 7c570000 7c623000   C:\WINNT\system32\KERNEL32.DLL
ModLoad: 7c2d0000 7c332000   C:\WINNT\system32\ADVAPI32.DLL
ModLoad: 64580000 6458c000   C:\Network\Avast\aswAux.dll
ModLoad: 12000000 12103000   C:\Network\Avast\xerces.dll
ModLoad: 77e10000 77e75000   C:\WINNT\system32\USER32.dll
ModLoad: 77f40000 77f7b000   C:\WINNT\system32\GDI32.DLL
ModLoad: 7c340000 7c396000   C:\WINNT\system32\MSVCR71.dll
ModLoad: 7c3a0000 7c41b000   C:\WINNT\system32\MSVCP71.dll
ModLoad: 64080000 640a2000   C:\Network\Avast\aswCmnB.dll
ModLoad: 64000000 6400f000   C:\Network\Avast\aswCmnOS.dll
ModLoad: 75050000 75058000   C:\WINNT\system32\WSOCK32.dll
ModLoad: 75030000 75044000   C:\WINNT\system32\WS2_32.DLL
ModLoad: 78000000 78045000   C:\WINNT\system32\MSVCRT.DLL
ModLoad: 75020000 75028000   C:\WINNT\system32\WS2HELP.DLL
ModLoad: 64280000 64362000   C:\Network\Avast\aswEngin.dll
ModLoad: 782f0000 78535000   C:\WINNT\system32\SHELL32.dll
ModLoad: 63180000 631e9000   C:\WINNT\system32\SHLWAPI.dll
ModLoad: 71710000 71794000   C:\WINNT\system32\COMCTL32.dll
ModLoad: 77a50000 77b3f000   C:\WINNT\system32\ole32.dll
ModLoad: 64200000 64214000   C:\Network\Avast\aswScan.dll
ModLoad: 64100000 64126000   C:\Network\Avast\aswCmnS.dll
ModLoad: 779b0000 77a4b000   C:\WINNT\system32\OLEAUT32.dll
ModLoad: 64500000 64538000   C:\Network\Avast\ashBase.dll
ModLoad: 77820000 77827000   C:\WINNT\system32\VERSION.dll
ModLoad: 759b0000 759b6000   C:\WINNT\system32\LZ32.DLL
ModLoad: 77570000 775a0000   C:\WINNT\system32\WINMM.dll
ModLoad: 64800000 64818000   C:\Network\Avast\ashTask.dll
ModLoad: 64400000 64409000   C:\Network\Avast\aswInteg.dll
ModLoad: 64a00000 64a07000   C:\Network\Avast\aswIdle.dll
ModLoad: 65000000 65029000   C:\Network\Avast\Aavm4h.dll
ModLoad: 65100000 65108000   C:\Network\Avast\AavmRpch.dll
(22c.228): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00131f04 ecx=00000009 edx=00000000 esi=7ffdf000 edi=00131f70
eip=77f813b1 esp=0012f984 ebp=0012fc98 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll -
ntdll!DbgBreakPoint:
77f813b1 cc               int     3
0:000> g
ModLoad: 75e60000 75e7a000   C:\WINNT\system32\IMM32.DLL
ModLoad: 10000000 1001b000   C:\WINNT\system32\apitrap.dll
ModLoad: 690a0000 690ab000   C:\WINNT\system32\psapi.dll
ModLoad: 759c0000 759c7000   C:\WINNT\system32\mmdrv.dll
ModLoad: 75170000 751bf000   C:\WINNT\system32\NetApi32.dll
ModLoad: 00cb0000 00cbf000   C:\WINNT\system32\Secur32.dll
ModLoad: 77bf0000 77c01000   C:\WINNT\system32\NTDSAPI.dll
ModLoad: 77980000 779a4000   C:\WINNT\system32\DNSAPI.DLL
ModLoad: 77950000 7797a000   C:\WINNT\system32\WLDAP32.DLL
ModLoad: 751c0000 751c6000   C:\WINNT\system32\NETRAP.dll
ModLoad: 75150000 7515f000   C:\WINNT\system32\SAMLIB.dll
(22c.228): Unknown exception - code 000006b5 (first chance)
(22c.228): Unknown exception - code 000006b5 (first chance)
ModLoad: 66080000 6608e000   C:\Network\Avast\English\Base.dll
ModLoad: 66100000 66351000   C:\Network\Avast\English\Lang.dll
ModLoad: 7c140000 7c243000   C:\WINNT\system32\MFC71.DLL
ModLoad: 5d360000 5d36e000   C:\WINNT\system32\MFC71ENU.DLL
ModLoad: 6c920000 6c941000   C:\WINNT\system32\mapi32.dll
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 35f70000 360be000   C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSMAPI32.DLL
ModLoad: 03390000 03594000   C:\WINNT\system32\msi.dll
ModLoad: 35e80000 35f40000   C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MAPIR.DLL
(22c.334): Unknown exception - code 000006b5 (first chance)
(22c.334): Unknown exception - code 000006b5 (first chance)


!!!!!It stops 1 min 37 sec here!!!!!


ModLoad: 03c50000 03cb1000   C:\WINNT\system32\userenv.dll
ModLoad: 03c50000 03c9b000   C:\Network\Avast\UNACEV2.DLL
ModLoad: 75170000 751bf000   C:\WINNT\system32\NetApi32.dll
ModLoad: 364c0000 364cf000   C:\WINNT\system32\Secur32.dll
ModLoad: 77bf0000 77c01000   C:\WINNT\system32\NTDSAPI.dll
ModLoad: 77980000 779a4000   C:\WINNT\system32\DNSAPI.DLL
ModLoad: 77950000 7797a000   C:\WINNT\system32\WLDAP32.DLL
ModLoad: 751c0000 751c6000   C:\WINNT\system32\NETRAP.dll
ModLoad: 75150000 7515f000   C:\WINNT\system32\SAMLIB.dll
ModLoad: 65980000 6598b000   C:\Network\Avast\AhResNS.dll
ModLoad: 65280000 65289000   C:\Network\Avast\AhResOut.dll
ModLoad: 658c0000 658c9000   C:\Network\Avast\ahResP2P.dll
ModLoad: 65180000 6518c000   C:\Network\Avast\AhResStd.dll
ModLoad: 64880000 6488d000   C:\Network\Avast\ashSODBC.dll
ModLoad: 1f7c0000 1f7f4000   C:\WINNT\system32\ODBC32.dll
ModLoad: 76b30000 76b6e000   C:\WINNT\system32\comdlg32.dll
ModLoad: 1f900000 1f916000   C:\WINNT\system32\odbcint.dll
ModLoad: 1f920000 1f93a000   C:\WINNT\system32\ODBCCP32.dll
ModLoad: 1f940000 1f982000   C:\WINNT\System32\odbcjt32.dll
ModLoad: 1b000000 1b170000   C:\WINNT\System32\msjet40.dll
ModLoad: 1b5d0000 1b665000   C:\WINNT\System32\mswstr10.dll
ModLoad: 013b0000 013be000   C:\WINNT\System32\odbcji32.dll
ModLoad: 013c0000 013cd000   C:\WINNT\System32\msjter40.dll
ModLoad: 013d0000 013f6000   C:\WINNT\System32\MSJINT40.DLL
(22c.334): C++ EH exception - code e06d7363 (first chance)
(22c.334): C++ EH exception - code e06d7363 (first chance)
ModLoad: 775a0000 77630000   C:\WINNT\system32\CLBCATQ.DLL
ModLoad: 1b810000 1b84a000   C:\WINNT\System32\msjtes40.dll
ModLoad: 0f9a0000 0f9ab000   C:\WINNT\system32\VBAJET32.DLL
ModLoad: 0f9c0000 0fa22000   C:\WINNT\system32\expsrv.dll
(22c.334): C++ EH exception - code e06d7363 (first chance)
(22c.334): C++ EH exception - code e06d7363 (first chance)
(22c.334): C++ EH exception - code e06d7363 (first chance)
(22c.334): C++ EH exception - code e06d7363 (first chance)
(22c.56c): C++ EH exception - code e06d7363 (first chance)
ModLoad: 774e0000 77513000   C:\WINNT\system32\Rasapi32.dll
ModLoad: 774c0000 774d1000   C:\WINNT\system32\RASMAN.DLL
ModLoad: 77530000 77552000   C:\WINNT\system32\TAPI32.DLL
ModLoad: 77830000 7783e000   C:\WINNT\system32\RTUTILS.DLL
ModLoad: 77520000 77525000   C:\WINNT\system32\ICMP.DLL
ModLoad: 782c0000 782cc000   C:\WINNT\System32\rnr20.dll
ModLoad: 77340000 77353000   C:\WINNT\system32\iphlpapi.dll
ModLoad: 77320000 77337000   C:\WINNT\system32\MPRAPI.DLL
ModLoad: 773b0000 773df000   C:\WINNT\system32\ACTIVEDS.DLL
ModLoad: 77380000 773a3000   C:\WINNT\system32\ADSLDPC.DLL
ModLoad: 77880000 7790e000   C:\WINNT\system32\SETUPAPI.DLL
ModLoad: 09770000 097d1000   C:\WINNT\system32\USERENV.DLL
ModLoad: 77360000 77379000   C:\WINNT\system32\DHCPCSVC.DLL
ModLoad: 777e0000 777e8000   C:\WINNT\System32\winrnr.dll
ModLoad: 777f0000 777f5000   C:\WINNT\system32\rasadhlp.dll
ModLoad: 09800000 09817000   C:\Network\Avast\Setup\SetIFace.dll
ModLoad: 09930000 09947000   C:\Network\Avast\Setup\SetIFace.dll
ModLoad: 09930000 09947000   C:\Network\Avast\Setup\SetIFace.dll

Offline schar07

  • Jr. Member
  • **
  • Posts: 24
Re:Startup delay
« Reply #14 on: December 07, 2004, 03:00:17 PM »
----- 4.5.549 -----
Symbol search path is: c:\temp

Microsoft (R) Windows Debugger  Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.

CommandLine: "C:\Network\Avast\ashServ.exe"
Symbol search path is: c:\temp
Executable search path is:
ModLoad: 00400000 00416000   ashServ.exe
ModLoad: 77f80000 77ffd000   ntdll.dll
ModLoad: 77d30000 77da1000   C:\WINNT\system32\RPCRT4.dll
ModLoad: 7c570000 7c623000   C:\WINNT\system32\KERNEL32.DLL
ModLoad: 7c2d0000 7c332000   C:\WINNT\system32\ADVAPI32.DLL
ModLoad: 64580000 6458c000   C:\Network\Avast\aswAux.dll
ModLoad: 12000000 12103000   C:\Network\Avast\xerces.dll
ModLoad: 77e10000 77e75000   C:\WINNT\system32\USER32.dll
ModLoad: 77f40000 77f7b000   C:\WINNT\system32\GDI32.DLL
ModLoad: 7c340000 7c396000   C:\WINNT\system32\MSVCR71.dll
ModLoad: 7c3a0000 7c41b000   C:\WINNT\system32\MSVCP71.dll
ModLoad: 64080000 640a2000   C:\Network\Avast\aswCmnB.dll
ModLoad: 64000000 6400f000   C:\Network\Avast\aswCmnOS.dll
ModLoad: 75050000 75058000   C:\WINNT\system32\WSOCK32.dll
ModLoad: 75030000 75044000   C:\WINNT\system32\WS2_32.DLL
ModLoad: 78000000 78045000   C:\WINNT\system32\MSVCRT.DLL
ModLoad: 75020000 75028000   C:\WINNT\system32\WS2HELP.DLL
ModLoad: 64280000 64362000   C:\Network\Avast\aswEngin.dll
ModLoad: 782f0000 78535000   C:\WINNT\system32\SHELL32.dll
ModLoad: 63180000 631e9000   C:\WINNT\system32\SHLWAPI.dll
ModLoad: 71710000 71794000   C:\WINNT\system32\COMCTL32.dll
ModLoad: 77a50000 77b3f000   C:\WINNT\system32\ole32.dll
ModLoad: 64200000 64214000   C:\Network\Avast\aswScan.dll
ModLoad: 64100000 64126000   C:\Network\Avast\aswCmnS.dll
ModLoad: 779b0000 77a4b000   C:\WINNT\system32\OLEAUT32.dll
ModLoad: 64500000 64538000   C:\Network\Avast\ashBase.dll
ModLoad: 77820000 77827000   C:\WINNT\system32\VERSION.dll
ModLoad: 759b0000 759b6000   C:\WINNT\system32\LZ32.DLL
ModLoad: 77570000 775a0000   C:\WINNT\system32\WINMM.dll
ModLoad: 64800000 64818000   C:\Network\Avast\ashTask.dll
ModLoad: 64400000 64409000   C:\Network\Avast\aswInteg.dll
ModLoad: 64a00000 64a07000   C:\Network\Avast\aswIdle.dll
ModLoad: 65000000 6502a000   C:\Network\Avast\Aavm4h.dll
ModLoad: 65100000 65108000   C:\Network\Avast\AavmRpch.dll
(22c.228): Break instruction exception - code 80000003 (first chance)
eax=00000000 ebx=00131f04 ecx=00000009 edx=00000000 esi=7ffdf000 edi=00131f70
eip=77f813b1 esp=0012f984 ebp=0012fc98 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000202
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll -
ntdll!DbgBreakPoint:
77f813b1 cc               int     3
0:000> g
ModLoad: 75e60000 75e7a000   C:\WINNT\system32\IMM32.DLL
ModLoad: 10000000 1001b000   C:\WINNT\system32\apitrap.dll
ModLoad: 690a0000 690ab000   C:\WINNT\system32\psapi.dll
ModLoad: 759c0000 759c7000   C:\WINNT\system32\mmdrv.dll
ModLoad: 75170000 751bf000   C:\WINNT\system32\NetApi32.dll
ModLoad: 00cb0000 00cbf000   C:\WINNT\system32\Secur32.dll
ModLoad: 77bf0000 77c01000   C:\WINNT\system32\NTDSAPI.dll
ModLoad: 77980000 779a4000   C:\WINNT\system32\DNSAPI.DLL
ModLoad: 77950000 7797a000   C:\WINNT\system32\WLDAP32.DLL
ModLoad: 751c0000 751c6000   C:\WINNT\system32\NETRAP.dll
ModLoad: 75150000 7515f000   C:\WINNT\system32\SAMLIB.dll
(22c.228): Unknown exception - code 000006b5 (first chance)
(22c.228): Unknown exception - code 000006b5 (first chance)
ModLoad: 66080000 6608e000   C:\Network\Avast\English\Base.dll
ModLoad: 66100000 66351000   C:\Network\Avast\English\Lang.dll
ModLoad: 7c140000 7c243000   C:\WINNT\system32\MFC71.DLL
ModLoad: 5d360000 5d36e000   C:\WINNT\system32\MFC71ENU.DLL
ModLoad: 6c920000 6c941000   C:\WINNT\system32\mapi32.dll
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 03350000 03554000   C:\WINNT\system32\MSI.DLL
ModLoad: 35f70000 360be000   C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MSMAPI32.DLL
ModLoad: 03390000 03594000   C:\WINNT\system32\msi.dll
ModLoad: 35e80000 35f40000   C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MAPIR.DLL
(22c.2f4): Unknown exception - code 000006b5 (first chance)
(22c.2f4): Unknown exception - code 000006b5 (first chance)


!!!!!It stops 4 min 34 sec here!!!!!


ModLoad: 03c50000 03cb1000   C:\WINNT\system32\userenv.dll
ModLoad: 03c50000 03c9b000   C:\Network\Avast\UNACEV2.DLL
ModLoad: 75170000 751bf000   C:\WINNT\system32\NetApi32.dll
ModLoad: 364c0000 364cf000   C:\WINNT\system32\Secur32.dll
ModLoad: 77bf0000 77c01000   C:\WINNT\system32\NTDSAPI.dll
ModLoad: 77980000 779a4000   C:\WINNT\system32\DNSAPI.DLL
ModLoad: 77950000 7797a000   C:\WINNT\system32\WLDAP32.DLL
ModLoad: 751c0000 751c6000   C:\WINNT\system32\NETRAP.dll
ModLoad: 75150000 7515f000   C:\WINNT\system32\SAMLIB.dll
ModLoad: 65980000 6598b000   C:\Network\Avast\AhResNS.dll
ModLoad: 65280000 65289000   C:\Network\Avast\AhResOut.dll
ModLoad: 658c0000 658c9000   C:\Network\Avast\ahResP2P.dll
ModLoad: 65180000 6518c000   C:\Network\Avast\AhResStd.dll
ModLoad: 64880000 6488d000   C:\Network\Avast\ashSODBC.dll
ModLoad: 1f7c0000 1f7f4000   C:\WINNT\system32\ODBC32.dll
ModLoad: 76b30000 76b6e000   C:\WINNT\system32\comdlg32.dll
ModLoad: 1f900000 1f916000   C:\WINNT\system32\odbcint.dll
ModLoad: 1f920000 1f93a000   C:\WINNT\system32\ODBCCP32.dll
ModLoad: 1f940000 1f982000   C:\WINNT\System32\odbcjt32.dll
ModLoad: 1b000000 1b170000   C:\WINNT\System32\msjet40.dll
ModLoad: 1b5d0000 1b665000   C:\WINNT\System32\mswstr10.dll
ModLoad: 013b0000 013be000   C:\WINNT\System32\odbcji32.dll
ModLoad: 013c0000 013cd000   C:\WINNT\System32\msjter40.dll
ModLoad: 013d0000 013f6000   C:\WINNT\System32\MSJINT40.DLL
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
ModLoad: 775a0000 77630000   C:\WINNT\system32\CLBCATQ.DLL
ModLoad: 1b810000 1b84a000   C:\WINNT\System32\msjtes40.dll
ModLoad: 0f9a0000 0f9ab000   C:\WINNT\system32\VBAJET32.DLL
ModLoad: 0f9c0000 0fa22000   C:\WINNT\system32\expsrv.dll
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.2f4): C++ EH exception - code e06d7363 (first chance)
(22c.588): C++ EH exception - code e06d7363 (first chance)
ModLoad: 774e0000 77513000   C:\WINNT\system32\Rasapi32.dll
ModLoad: 774c0000 774d1000   C:\WINNT\system32\RASMAN.DLL
ModLoad: 77530000 77552000   C:\WINNT\system32\TAPI32.DLL
ModLoad: 77830000 7783e000   C:\WINNT\system32\RTUTILS.DLL
ModLoad: 77520000 77525000   C:\WINNT\system32\ICMP.DLL
ModLoad: 782c0000 782cc000   C:\WINNT\System32\rnr20.dll
ModLoad: 77340000 77353000   C:\WINNT\system32\iphlpapi.dll
ModLoad: 77320000 77337000   C:\WINNT\system32\MPRAPI.DLL
ModLoad: 773b0000 773df000   C:\WINNT\system32\ACTIVEDS.DLL
ModLoad: 77380000 773a3000   C:\WINNT\system32\ADSLDPC.DLL
ModLoad: 77880000 7790e000   C:\WINNT\system32\SETUPAPI.DLL
ModLoad: 09770000 097d1000   C:\WINNT\system32\USERENV.DLL
ModLoad: 77360000 77379000   C:\WINNT\system32\DHCPCSVC.DLL
ModLoad: 777e0000 777e8000   C:\WINNT\System32\winrnr.dll
ModLoad: 777f0000 777f5000   C:\WINNT\system32\rasadhlp.dll
ModLoad: 09800000 09817000   C:\Network\Avast\Setup\SetIFace.dll
ModLoad: 09930000 09947000   C:\Network\Avast\Setup\SetIFace.dll
ModLoad: 09930000 09947000   C:\Network\Avast\Setup\SetIFace.dll