boot scan problem with vista

[avast user]

I use vista 32 and avast pro. Boot scan always results in the monitor going blank and windows telling me there is a problem it will try to repair - it always fails and then the computer starts up as normal.  The next start up is fine.  It only happens on a boot scan.  Any ideas anyone.  Otherwise all ok.  Cheers.

[igor]

Can you post the file <avast4>\Log\aswBoot.log (if any)?

[avast user]

Thanks for your help.

Below is the log file from avast 4 Data Log awsboot -

I ran another boot scan and the moinitor went black and said it was going to sleep whilst the computer kept running - no input to monitor.  I had to turn the computer off and restart.  Start up repair started and could not fix the problem - I went into advanced settings and clicked start up repair and it said all was fine - it is only on an Avast Boot Scan.  Hope this helps.

Again thanks.

CmdLine - quick
aswBoot.exe /A:"*" /L:"English" /RA:chest /archives /KBD:2
CmdLine end
CreateKbThread
new CKbBuffer
CKbBuffer::Init
CKbBuffer::Init end
NtCreateEvent(g_hStopEvent)
NtAllocateVirtualMemory - stack
NtGetContextThread - NtCurrentThread
NtCreateThread - KbThread
CreateKbThread end
NtInitializeRegistry
KbThread start
ReadRegistry
DATA=C:\Program Files\Alwil Software\Avast4\DATA
PROG=C:\Program Files\Alwil Software\Avast4
BUILD=1098
Windows Vista (TM) Home Premium
SystemRoot=C:\Windows
TEMP=C:\Windows\TEMP
TMP=C:\Windows\TEMP
ReadRegistry end
CreateTemp
CreateTemp end
cmnbInit
SetFolders
SetFolders end
aswEnginDllMain(DLL_PROCESS_ATTACH)
InitLog
InitLog end
CmdLine - full
aswBoot.exe /A:"*" /L:"English" /RA:chest /archives /KBD:2
CmdLine end
Unschedule
61,00,75,00,74,00,6F,00,63,00,68,00,65,00,63,00,
6B,00,20,00,61,00,75,00,74,00,6F,00,63,00,68,00,
6B,00,20,00,2A,00,00,00,61,00,73,00,77,00,42,00,
6F,00,6F,00,74,00,2E,00,65,00,78,00,65,00,20,00,
2F,00,41,00,3A,00,22,00,2A,00,22,00,20,00,2F,00,
4C,00,3A,00,22,00,45,00,6E,00,67,00,6C,00,69,00,
73,00,68,00,22,00,20,00,2F,00,52,00,41,00,3A,00,
63,00,68,00,65,00,73,00,74,00,20,00,2F,00,61,00,
72,00,63,00,68,00,69,00,76,00,65,00,73,00,20,00,
2F,00,4B,00,42,00,44,00,3A,00,32,00,00,00,00,00,

Unschedule end
LoadResources
LoadResources end
InitReport
InitReport end
NtSetEvent(g_hInitEvent) - 1
FreeMemory: 1444913152
aswintegInitialize
InitKeyboard
g_dwKbdNum: 2
s_dwKbdClassCnt: 2
InitKeyboard end
NtSetEvent(g_hInitEvent) - 2
GetKey
avworkInitialize
FreeMemory: 1408901120
CKbBuffer::Wait
CKbBuffer::Get
CKbBuffer::Get end
CKbBuffer::Wait end
ProcessArea
avfilesScanReal(MBR0)
avfilesScanReal C:\

[igor]

Can you run a disk check?
(I mean something like chkdsk c:)

[avast user]

Done chkdsk to automatically fix errors - it ran at start up - nothing to report - I then ran it to not fix anything and it reported all is well; so, then I ran a boot scan with Avast and same problem - monitor blank - computer shut down.  Start up started on boot and said there were unfixable errors - system configuration changes - maybe it said - so ran start up repair again and it said all was well. this only happens with an Avast Boot Scan - I have no other security on the computer except Windows Defender and Firewall.

So - I either have a monster in the machine, a problem with Avast or a problem with Vista.  Over to you - cheers - Ben

[vojtech]

So the avast boot scan is invisible from beginning or it goes black after some time ? And the Windows checkdisk is normally visible at boot time, right ?

[avast user]

The boot scan is visible.  It scans as normal and then after some time the screen goes black ( Before boot scan has finished ) - the monitor goes to sleep and shuts down - saying no input signal - and then the computer shuts down.  Check Disk runs as normal when I ask it to and reports nothing - but I only do that after I have restarted the computer and start up repair goes through its thing telling me there are problems it can't fix and then tells me, once I have clicked advaced diagnostics and run it again, there is nothing wrong - the computer can then be restarted from scratch without issue.

It is only when Avast does a boot scan that this issue occurs.   I don't know what else to tell you.  Avast found a win32 trojan generator thing a while ago on a regular scan in windows explorer and removed it - that was all and it presented no problems.

So..............what next?

[avast user]

....and the checkdsk is visible at boot time when I ask it to to a check with autofix - that all seems to be fine - it is only an avast boot scan issue as far as I can see....

[Lisandro]

the monitor goes to sleep and shuts down

Sorry if the question is stupid - I'm not a hardware expert - but is the monitor working well? Can you test another one?

Avast found a win32 trojan generator thing a while ago on a regular scan in windows explorer and removed it - that was all and it presented no problems.

Send to Chest is always safer than directly deleting it.

[avast user]

The monitor works well.  I have plugged a digital projector in and booted up with normal start up - the screen is the same as with the monitor but projected onto a wall.  So guess that is ok.

Avast Boot scan did work fine - then one day it had / has the issues as stated above.  I don't really want to restore my computer to an earlier time or start it from scratch as it is used for real time work with FTP and it would restict me greatly with all the enourmous amounts of software reinstallation and updates.

Below is a normal Avast scan log from this morning: it may tell you something - to me it is just file paths with no real meaning as far as Avast is concerned.  Thanks for your troubles - if you feel I need to restore etc please tell me.............

avast! Virus Cleaner Tool - version 1.0.211 Ansi

Creating log file: C:\Program Files\Alwil Software\Avast4\DATA\log\cleaner.log

1/9/2008, 9:15:02 AM
Memory scanning started...
No virus body found in memory.
Memory scanning finished (14.0s).
----------
Files scanning started...
C:\Boot\BCD... file could not be scanned!
C:\Boot\BCD.LOG... file could not be scanned!
C:\hp\HPQWare\DTSHORTCUTS\KO_KR\??.lnk... file could not be scanned!
C:\hp\HPQWare\DTSHORTCUTS\ZH_HK\??eBay!.lnk... file could not be scanned!
C:\hp\HPQWare\Favs\KO_KR\HP\??.url... file could not be scanned!
C:\hp\HPQWare\Favs\ZH_HK\HP\??eBay!.url... file could not be scanned!
C:\hp\HPQWare\StartMenuLink\KO_KR\??.lnk... file could not be scanned!
C:\hp\HPQWare\StartMenuLink\ZH_HK\??eBay!.lnk... file could not be scanned!
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log... file could not be scanned!
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb... file could not be scanned!
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb... file could not be scanned!
C:\System Volume Information\{181423df-baf7-11dc-acfd-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{181437a6-baf7-11dc-acfd-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{181437cd-baf7-11dc-acfd-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{24d4e897-badc-11dc-80cf-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{557a48a6-baff-11dc-a4dc-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{557a48ce-baff-11dc-a4dc-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{56004b79-bad5-11dc-94fc-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{59f83d64-bba3-11dc-88fe-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{59f83d85-bba3-11dc-88fe-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{5d2858d0-bad7-11dc-9a39-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{5d2858d6-bad7-11dc-9a39-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{5d2858dc-bad7-11dc-9a39-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{5d2858e2-bad7-11dc-9a39-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{7182e7d2-bb09-11dc-8983-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{9e576f0c-bc77-11dc-a654-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{ad578753-bae4-11dc-8783-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{ad579095-bae4-11dc-8783-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{ad579420-bae4-11dc-8783-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{b486d9cc-bdf1-11dc-b3f8-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{b7742531-bd38-11dc-a4ef-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{b7742544-bd38-11dc-a4ef-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\System Volume Information\{b774254f-bd38-11dc-a4ef-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
C:\Users\inge\ntuser.dat.LOG1... file could not be scanned!
C:\Users\inge\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1... file could not be scanned!
C:\Users\inge\AppData\Local\Microsoft\Windows Defender\FileTracker\{36A5EB06-9771-4B37-9B83-FC694DE12E4A}... file could not be scanned!
C:\WINDOWS\ServiceProfiles\LocalService\ntuser.dat.LOG1... file could not be scanned!
C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat... file could not be scanned!
C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat... file could not be scanned!
C:\WINDOWS\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat.LOG1... file could not be scanned!
C:\WINDOWS\ServiceProfiles\NetworkService\ntuser.dat.LOG1... file could not be scanned!
C:\WINDOWS\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0... file could not be scanned!
C:\WINDOWS\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0... file could not be scanned!
C:\WINDOWS\System32\catroot2\edb.log... file could not be scanned!
C:\WINDOWS\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb... file could not be scanned!
C:\WINDOWS\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb... file could not be scanned!
C:\WINDOWS\System32\config\COMPONENTS.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\DEFAULT.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\SAM.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\SECURITY.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\SOFTWARE.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\SYSTEM.LOG1... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\COMPONENTS... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\DEFAULT... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\SAM... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\SECURITY... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\SOFTWARE... file could not be scanned!
C:\WINDOWS\System32\config\RegBack\SYSTEM... file could not be scanned!
C:\WINDOWS\Temp\TMP0000005782BB7C3279278496... file could not be scanned!
D:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
D:\System Volume Information\{b7742550-bd38-11dc-a4ef-0019213f7877}{3808876b-c176-4e48-b7ae-04046e6cc752}... file could not be scanned!
No virus body found.
Files scanning finished  (96387 files, 0 infected, 643.9s).
Drives scanned: C: D:
----------

[Lisandro]

No virus body found.

Although you've run avast Cleaner tool, you need to run a full avast scanning. The Cleaner has limited features.

Files that can't be scanned are just that, not an indication they are suspicious/infected, just unable to be scanned.

[avast user]

All seems well with the scan - so I'll just accept it doesn't complete a boot scan on my computer.  Cheers anyway.

[Lisandro]

I'll just accept it doesn't complete a boot scan on my computer.

I hate unsolved and mystery problems... but I can't help further. It's with Alwil team for now on...

[avast user]

Thanks - I watched the scan - rather tedius - and the monitor shut down during  - C:\Windows...............near the end I suppose.

[avast user]

attached is a ComboFix log.  I have aready done one with before with : autorun.inf.vir - jusched.exe.vir - jusched.exe.vir

in the Quarantine  Windows  System 32 folder.  Does this help you with my Avast Boot Scan failure?

Cheers- Ben