Schedule boot scan and pc hibernation

[imazz]

Hi,

it looks like the boot time scan is not completing, would you agree?

since then she has run and completed a standard (in windows) scan - i'll try and get the log for that.

Ian

[igor]

Well, if this is the whole aswBoot.txt file - it looks like a virus has been detected, the boot-time scanner printed the message on the screen and waited for the user to select the action to perform.
So, it seems like it's waiting for user input...

You can also post the file <avast4>\Data\Log\aswBoot.log - it contains some other info.

[imazz]

Hi Igor,

There was no <avast4>\Data\Log\aswBoot.log according to my friend.

I didn't know the boot time scanner asked for user input.

I think I will get her to check again.

Thanks

Ian

[imazz]

aswboot.log

CmdLine - quick
aswBoot.exe /A:"*" /L:"English" /archives /KBD:2
CmdLine end
SafeBoot: 0
CreateKbThread
new CKbBuffer
CKbBuffer::Init
CKbBuffer::Init end
NtCreateEvent(g_hStopEvent)
dep_osBeginThread - KbThread
CreateKbThread end
NtInitializeRegistry
KbThread start
ReadRegistry
DATA=C:\Program Files\Alwil Software\Avast4\DATA
PROG=C:\Program Files\Alwil Software\Avast4
BUILD=1201
Microsoft Windows XP Service Pack 2
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
ReadRegistry end
CreateTemp
CreateTemp end
cmnbInit
SetFolders
SetFolders end
aswEnginDllMain(DLL_PROCESS_ATTACH)
InitLog
InitLog end
CmdLine - full
aswBoot.exe /A:"*" /L:"English" /archives /KBD:2
CmdLine end
Unschedule
61,00,75,00,74,00,6F,00,63,00,68,00,65,00,63,00,
6B,00,20,00,61,00,75,00,74,00,6F,00,63,00,68,00,
6B,00,20,00,2A,00,00,00,6C,00,73,00,64,00,65,00,
6C,00,65,00,74,00,65,00,00,00,61,00,73,00,77,00,
42,00,6F,00,6F,00,74,00,2E,00,65,00,78,00,65,00,
20,00,2F,00,41,00,3A,00,22,00,2A,00,22,00,20,00,
2F,00,4C,00,3A,00,22,00,45,00,6E,00,67,00,6C,00,
69,00,73,00,68,00,22,00,20,00,2F,00,61,00,72,00,
63,00,68,00,69,00,76,00,65,00,73,00,20,00,2F,00,
4B,00,42,00,44,00,3A,00,32,00,00,00,00,00,
Unschedule end
LoadResources
LoadResources end
InitReport
InitReport end
NtSetEvent(g_hInitEvent) - 1
FreeMemory: 423333888
avworkInitialize
InitKeyboard
g_dwKbdNum: 2
s_dwKbdClassCnt: 2
InitKeyboard end
NtSetEvent(g_hInitEvent) - 2
GetKey
FreeMemory: 381095936
CKbBuffer::Wait
CKbBuffer::Get
CKbBuffer::Get end
CKbBuffer::Wait end
ProcessArea
avfilesScanAdd *MBR0
avfilesScanAdd *RAW:C:\  [Fs: 000500ff, NTFS; Dev: 07, 00000020]
avfilesScanAdd *RAW:D:\  [Fs: 00000006, FAT32; Dev: 07, 00000020]
avfilesScanRealMulti begin
CKbBuffer::Get
0, 68, 0, 0, 0
GetKey end
CKbBuffer::Put
CKbBuffer::Put end
GetKey
CKbBuffer::Get end
CKbBuffer::Get
0, 68, 1, 0, 0