AAVM subsystem detected a RPC error

[Wensha]

Yes, another person who has this problem. I'm on Windows xp service pack 2, avast build 4.7.1001. I'm using outpost firewall, but I haven't installed any new software, and avast was fine with everything up to now. My avast home was initially ok, but I was having the continuous request to restart, so I uninstalled everything through the control panel add/remove, and tried installing it again. That's when I got my first RPC error.

I then tried the removal tool, and re-install, but same problem again. I uninstalled everything and tried the Avast Pro version. That worked perfectly.

I got back the continuous request for restart after a few days, and even with my previous experience with how bad it turned out, I still uninstalled the pro version and re-installed. RPC problem again.

I've looked through the search here for the problem, and done the following:
Opened Services in Asministrative tools, and only iAVS4 control service is started. Acast! Antivirus is "starting", but when I manually started it, I got error 1067: the process terminated unexpectedly. The Mail Scanner and Web Scanner are both on manual, but manually starting them makes them terminate, and putting then to autmomatic and restarting has no change.

I've also gone into safe mode, uninstall via control panel, reboot, uninstall with removal tool, reboot and install once more, but that didn't work either.

From event viewer, I get those errors:
From application
Faulting application ashServ.exe, version 4.7.997.0, faulting module unknown, version 0.0.0.0, fault address 0x00dfeb0c.

From system
The avast! Antivirus service hung on starting.
The avast! Antivirus service terminated unexpectedly.  It has done this 1 time(s).

Oh, also tried the "repair" function in the unistallation, but no difference.

Anyone can help me before I opt for another antivirus?

[Lisandro]

Strange indeed...
Any other antivirus was installed before in this machine?
Where (path) are you trying to install?

[Wensha]

Before I had Norton Antivirus, but as I've said, I find it weird since it worked well on first install, but started getting the rpc error when i installed it the second time. Oh, I should probably mention that it didn't allow me to install it the second time at first because I had a previous antivirus according to the setup, which was avast itself that hadn't uninstalled properly. I used the removal tool for that then.

I've installed it in C:/program files... the usual I'd say

[Lisandro]

Before I had Norton Antivirus

Norton is very difficult to get rid...
1) Remove NAV through Add/Remove programs from Control Panel. Boot.
2) Use Symantec removal tool following the three steps defined in the SymNRT tool info or here.
3) Boot.
4) Install avast! Boot.
5) See what you get.

Full SymNRT info:
1. Download and save these three files to the Windows desktop:
   a) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/MSIFIX.bat
   b) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SymNRT.exe
   c) ftp://ftp.symantec.com/public/english_us_canada/linked_files/tsgen/SYMMSICLEANUP.reg

2. Run the three files that you just downloaded
   a) On the Windows desktop, double-click the MSIFIX icon.
      Click Run.
      A black window may appear very briefly.
   b) On the Windows desktop, double-click the SymNRT icon.
      Click Run.
      Click Next.
      Click I accept the License Agreement, and click Next.
      Type the letters and numbers that you see in the white box, and then click Next.
      Click Yes or OK at each prompt.
      You may need to click more than once. Your computer may be restarted for you more than once.
      You may be asked to repeat some steps after the computer restarts.
   c) On the Windows desktop, double-click the SYMMSICLEANUP icon.
      Click Run, and then click Yes.
      Click OK.

3. Boot.

[Wensha]

Ok, will try this and let you know the result

[Lisandro]

Ok, will try this and let you know the result

We'll be here... I, myself, only tomorrow... oops, today we have passed the midnight...

[Wensha]

Thanks for your help Really appreciate it

Ok, went through what you said, uninstalled avast again, used those programs to get rid of whatever Norton could have left, and finally just installed avast home yet again, but still getting the rpc error, and I'm still getting error 1067 when trying to manually start avast! antivirus in "services"

[Lisandro]

Please, post the last 100-150 files of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log

[Wensha]

I hope they're the ones you're requesting. If you need, I can attatch the whole file too.

25.05.2007   04:30:44.000   1180063844   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswMon2\DisplayName=avast! Standard Shield Support
25.05.2007   04:30:44.000   1180063844   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswMon2\ErrorControl=1
25.05.2007   04:30:44.000   1180063844   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswMon2\Type=2
25.05.2007   04:30:44.000   1180063844   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswMon2\Start=2
25.05.2007   04:30:44.000   1180063844   registry   Set registry: SOFTWARE\Microsoft\Exchange\Client\Extensions\avast! 4=4.0;C:\Program Files\Alwil Software\Avast4\ashOutXt.dll;1;10000111111000
25.05.2007   04:30:44.000   1180063844   registry   Set registry: SYSTEM\CurrentControlSet\Services\avast! Mail Scanner\Description=Implements mail scanning for avast! antivirus.
25.05.2007   04:30:44.000   1180063844   system   Service avast! Mail Scanner installed
25.05.2007   04:30:44.000   1180063844   system   Service avast! Mail Scanner dependency avast! Antivirus
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\avast! Mail Scanner\Description=Implements mail scanning for avast! antivirus.
25.05.2007   04:30:45.000   1180063845   system   Service avast! Mail Scanner updated
25.05.2007   04:30:45.000   1180063845   system   Reboot set by changed resident C:\WINDOWS\system32\drivers\aswTdi.sys
25.05.2007   04:30:45.000   1180063845   system   Driver file copied: C:\WINDOWS\system32\drivers\aswTdi.sys
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\DisplayName=avast! Network Shield Support
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\ErrorControl=1
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Type=1
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Group=PNP_TDI
25.05.2007   04:30:45.000   1180063845   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Start=1
25.05.2007   04:30:45.000   1180063845   system   Service 'aswTdi' load order set id=268435456 in group 'PNP_TDI'
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\avast! Web Scanner\Description=Implements web (HTTP) scanning for avast! antivirus.
25.05.2007   04:30:46.000   1180063846   system   Service avast! Web Scanner installed
25.05.2007   04:30:46.000   1180063846   system   Service avast! Web Scanner dependency avast! Antivirus
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\avast! Web Scanner\Description=Implements web (HTTP) scanning for avast! antivirus.
25.05.2007   04:30:46.000   1180063846   system   Service avast! Web Scanner updated
25.05.2007   04:30:46.000   1180063846   system   Driver file copied: C:\WINDOWS\system32\drivers\aswRdr.sys
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\DisplayName=aswRdr
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\ErrorControl=1
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Type=1
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Start=3
25.05.2007   04:30:46.000   1180063846   registry   Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Group=PNP_TDI
25.05.2007   04:30:47.000   1180063847   file   Shortcut for ashAvast.exe installed in C:\Documents and Settings\All Users\Start Menu\Programs\avast! Antivirus
25.05.2007   04:30:47.000   1180063847   file   Shortcut for help.chm installed in C:\Documents and Settings\All Users\Start Menu\Programs\avast! Antivirus
25.05.2007   04:30:47.000   1180063847   file   Shortcut for ashAvast.exe installed in C:\Documents and Settings\All Users\Desktop
25.05.2007   04:30:47.000   1180063847   registry   Set registry: *\shellex\ContextMenuHandlers\avast\(null)={472083B0-C522-11CF-8763-00608CC02F24}
25.05.2007   04:30:47.000   1180063847   registry   Set registry: avast\ShellEx\ContextMenuHandlers\(null)={472083B0-C522-11CF-8763-00608CC02F24}
25.05.2007   04:30:47.000   1180063847   registry   Set registry: Folder\shellex\ContextMenuHandlers\avast\(null)={472083B0-C522-11CF-8763-00608CC02F24}
25.05.2007   04:30:47.000   1180063847   registry   Set registry: CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\(null)=avast
25.05.2007   04:30:47.000   1180063847   registry   Set registry: CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\(null)=C:\Program Files\Alwil Software\Avast4\ashShell.dll
25.05.2007   04:30:47.000   1180063847   registry   Set registry: CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName=C:\Program Files\Alwil Software\Avast4\ashShell.dll
25.05.2007   04:30:47.000   1180063847   registry   Set registry: CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel=Apartment
25.05.2007   04:30:47.000   1180063847   registry   Set registry: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{472083B0-C522-11CF-8763-00608CC02F24}=avast
25.05.2007   04:30:47.000   1180063847   registry   Set registry: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{472083B0-C522-11CF-8763-00608CC02F24}=avast
25.05.2007   04:30:47.000   1180063847   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Run\avast!="C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
25.05.2007   04:30:47.000   1180063847   file   Fix security on: C:\Program Files\Alwil Software\Avast4\*.*
25.05.2007   04:30:48.000   1180063848   file   Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH\*.*
25.05.2007   04:30:48.000   1180063848   file   Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH\HELP\*.*
25.05.2007   04:30:48.000   1180063848   file   Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH\HtmlData\*.*
25.05.2007   04:30:48.000   1180063848   file   Fix security on: C:\Program Files\Alwil Software\Avast4\images\*.*
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayName=avast! Antivirus
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayVersion=4.7
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\HelpLink=http://www.avast.com
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\HelpTelephone=
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UrlInfoAbout=http://www.avast.com
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UrlUpdateInfo=http://www.avast.com
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\InstallLocation="C:\Program Files\Alwil Software\Avast4"
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\InstallSource="C:\Documents and Settings\Wendy\Desktop\temp3"
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\Publisher=Alwil Software
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\VersionMajor=4
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\VersionMinor=7
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayIcon=C:\Program Files\Alwil Software\Avast4\ashAvast.exe
25.05.2007   04:30:48.000   1180063848   registry   Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UninstallString=rundll32 "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
25.05.2007   04:30:49.000   1180063849   general   License key generated Demo
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\Label=May2007
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\Avast4DataFolder=C:\Program Files\Alwil Software\Avast4\DATA
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\Avast4SkinFolder=C:\Program Files\Alwil Software\Avast4\DATA\Skin
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\Version=4.7
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\VersionShort=4.7
25.05.2007   04:30:53.000   1180063853   registry   Set registry: Software\Alwil Software\Avast\4.0\SetupVersion=1001
25.05.2007   04:30:53.000   1180063853   package   Transferred files: 11
25.05.2007   04:30:53.000   1180063853   package   Transferred bytes: 14255616
25.05.2007   04:30:53.000   1180063853   package   Transfer time: 250 ms
25.05.2007   04:30:53.000   1180063853   file   NeedReboot=true
25.05.2007   04:30:53.000   1180063853   system   Reboot set by filRenameOnReboot(C:\Program Files\Alwil Software\Avast4\Setup\reboot.txt,)
25.05.2007   04:30:53.000   1180063853   file   MoveFileEx("C:\Program Files\Alwil Software\Avast4\Setup\reboot.txt", NULL)
25.05.2007   04:30:53.000   1180063853   general   Return code: 0x20000000 [Something done]
25.05.2007   04:30:53.000   1180063853   general   Stopped: 25.05.2007, 04:30:53

[Lisandro]

Alwil team needs to help me helping you.
I've analyzed line by line of your log and I see no problems with it...
There shouldn't be a RPC problem here...
Sorry, can't help further...

[Wensha]

Thanks though. I guess I'll wait to see if anyone else can help, or I'll have to look for another anti virus.

[FliNt]

Having the same exact problem here.. 

[Lisandro]

Having the same exact problem here.. 

And what have you already done?

Can you try to repair your installation?
Go to Control Panel > Add/Remove programs > avast! antivirus > Remove. Then choose Repair function in the popup window (Repair). You must be connected to the internet while repairing.

If this does not help, can you uninstall / boot / install / boot again?

Do you have any other antivirus installed in your computer?
Did you have in the past? Which one?
Do you use a firewall? Which one?

Also, take a look into Administrative Tools > Services
and see how the four avast services are set to start (automatically or manual).

[FliNt]

And what have you already done?

I've done all that.
As a matter of fact, that was the first thing i did. The procedure mentioned in the FAQ, i mean.
I've only used Avast since the last format.
It was working fine this morning. Had to uninstall it(using the windows Add/Remove Programs), reinstalled it this afternoon, and it was a no go.
I did as recomended in one of the posts in another thread:
uninstalled Avast -> rebooted -> ran the uninstall utillty from Avast -> rebooted -> reinstalled Avast -> rebooted.
No matter what i do, the antivirus service simply won't start. Even if i do it manually, i keep getting that "1067 error" Wensha mentioned above.

[Lisandro]

FliNt, please, post the last 100-150 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log