Avast stopped after update

[Tarq57]

What was the AV used, over a year ago?
With some of them it's necessary to run an uninstall tool after uninstalling. Norton, for example, which seems to have caused the most conflicts of this type.

[Styx]

It was AVG and it was totally unistalled.

[Tarq57]

I believe you. But perhaps you'd run the removal tool http://www.avg.com/download-tools just to be sure.
Might make a difference, won't take long, worth a crack.

[Styx]

I believe you. But perhaps you'd run the removal tool http://www.avg.com/download-tools just to be sure.
Might make a difference, won't take long, worth a crack.

Just did that, even re-installed and then uninstalled and ran the tool to be sure.

No change. Hard to believe Avast could run 16 months with no issues and after
a program update that this issue is not Avast's problem. There are NO spyware
or anti-virus pieces running on my system.

Any other ideas?

[Tarq57]

Any other ideas?

Nothing particularly inspired or un-random, I'm afraid.
Maybe just check to see if the AdAware service is disabled. IIRC it's aaw.exe in services.

[Styx]

Yes Adaware Service and all other spyware except Windows Defender are Disabled.

Folks I am extremely familiar with these programs down to their nuts and bolts levels. The
issue I have is something in Avast. If I leave ANY of the Shields active except Standard
by itself the error will occur in 10 minutes or less.

[alanrf]

Styx,

I suspect that your configuration may have uncovered an issue with avast.  That being said, it is not showing up - so far - on any of the systems of Vista users I support. 

Were it a generic issue I am sure it would have been caught in beta and, further, this site would be lit up like the proverbial Christmas tree.  It is not and I suspect we may have to defer to the avast team to guide you on next steps for problem resolution of your configuration.

[Styx]

I have already sent in a support ticket however have not heard anything from Alwil yet.

[nikolas]

Hi,

Sorry for my poor english.

I have a " similar" problem than Styx with the new version 4.8.1282. I had to desactivate the Network Shield to boot my computer. Elsewhere, I had a boot in safe mode with the last version 4.8.1229. I sent a mail to Ondrej Vlcek (lead program manager, ALWIL Software) so I let you read his different answers :

Nikolas : " I used for many years your program Avast! Free Home Edition without problem. But with this new update, the computer can't reboot and return on the version 4.8.1229. My computer is a PC Vista SP1 with Intel Core2 and Nvidia 8600 GT. I have the same problem than Gary7 on your forum (http://forum.avast.com/index.php?topic=40018.0). I send you the minidump file.
Best regards"

Ondrej Vlcek : "Hi, sorry to hear about the problems.
I'm afraid you'll have to disable Network Shield in order to make it work.
Boot into Safe Mode, go to Add/Remove Programs, avast Antivirus - Change/Remove -> Change. Now untick the box next to "Network Shield", and follow the on-screen instructions.
Thanks"

Nikolas : "Thanks very much for your answer. It works now. Is this problem considered as a new bug ? Because, I'm surprised that only few persons have it on the forum."

Ondrej Vlcek : "It is strange. It is somewhat "bug", but it only happens if the TCP driver cannot be initialized during the startup of aswTdi.sys. Which should never happen, really"

[Styx]

Added to my support ticket yet still no response. Uninstall with Clean utility and
re-install does not solve the issue. Strange since Avast ran on this system for
16 months with no issues.

[y2jeff]

Added to my support ticket yet still no response. Uninstall with Clean utility and
re-install does not solve the issue. Strange since Avast ran on this system for
16 months with no issues.

Hi Styx, sounds like im having a very similar problem to you. I'm a bit of a tech myself so I dont usually have these problems, but just over the last few days I believe ive been infected with a virus, or a recent Avast! update has caused a file access shitstorm somehow.

For the mods, I have *never* used an AV program apart from avast on this installation of xp professional. Ive uninstalled/reinstalled this program many times, using aswclear.exe and no luck.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:30:32 PM, on 11/18/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Appz\defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
E:\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
E:\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Appz\DAEMON Tools Lite\daemon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\NETGEAR\WN121T\wn121t.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Appz\defender\MSASCui.exe
C:\Appz\hijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Appz\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [avast!] E:\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Appz\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Appz\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: NETGEAR WN121T Smart Wizard.lnk = C:\Program Files\NETGEAR\WN121T\wn121t.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Appz\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1200892964078
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1200958859031
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Appz\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6959 bytes

[vaclav41]

Hi all,

I have similar problem as described in this thread. After update to Avast Pro 4.8.1282, resident shields sometimes stop. I have XP Pro, SP3, no other AV, standard Windows firewall.

When problem occurs, I use this advice mentioned in FAQs and everything is OK - for some time ....

Looking forward to some stable solution

Vaclav

[Lisandro]

no other AV

Even in the past? Or preinstalled (OEM)?

Please, post the last 300-350 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log

[Styx]

New 1290 solved my issues!