auto update hangs

[mebius1]

try this....open avast, and disable webshield

try to update, if it updates, keep webshield off untill they fix it

mebius!!!!

[SafeSurf]

tried to install and avast installer wanted to remove yet again
did so and rebooted
tried to install and avast said there was already an installation running- exit

Something is not right if you got a prompt while installing the software wanted you to remove it.

Are you sure Comodo FW does not have the AV portion installed in it?  Was there ever another AV on this machine, even a trial version?  Do you have ANY other kind of security software that you can think of on this machine?  The reason I ask is because other security software or remnants of them left behind may cause conflicts and prevent AV's from being installed or working properly.

In the meantime, please check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
·   Download free http://www.malwarebytes.org/ for an on-demand scanner.
·   Double Click mbam-setup.exe to install the application.
·   After install, click update so you have latest database before scanning.
·   Under Settings:
o   General: Automatically Save File After Scan Completes is checked off
o   Scanner Settings:  Check all boxes
o   Updater: Download and install update if available is checked off
·   Once the program has loaded, select "Perform FULL Scan", then click Scan.
·   The scan may take some time to finish, so please be patient.
·   When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
·   Click the “remove selected” button to quarantine anything found.  You will find the infection details under the Quarantine tab.
·   The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
·   Copy & Paste the entire report in your next reply.

[nyf5545691]

1. Make sure your firewall is not blocking Avast from anything (updates included).

2. Try to Repair your installation:
- Go to Control Panel > Add/Remove programs > Avast Antivirus.
- Scroll down and choose Repair function in the pop-up window.
- Reboot.

3. If the Repair does not work, check your settings:
Open Avast GUI > Settings > Updates >

A. Engine and Virus Definitions: should be set at Automatic (default).

B. Update Parameters: all boxes unchecked (default)
   - If you use DSL, you may want to set #2 above to "My computer is permanently connected to the Internet."
   - If you use dial-up, you will want to use #2 above to "I only connect to the Internet using dial-up modem."

C. Proxy Settings: Auto Detect using IE Settings (default)
   - Some people have found that using "Direct connection / No Proxy" have worked for them.
   - Use "Specify Proxy Server" if you use a proxy and complete the information below it for the proxy server > click "OK."

thanks a lot. my update problem is get right from you passage.

[SafeSurf]

@ nyf5545691,  You're welcome.  Glad I could help. 

[wyrmrider]

safesurf
"Something is not right if you got a prompt while installing the software wanted you to remove it."
exactly- especially after running the removal tool after add/remove programs

Avast says current version 101011 however I just manually installed the latest version and after install popup indicated that todays  version was successfully installed
Evident auto update is still broken.

Will try with Comodo disabled and manually check program files for any other folders like Norton or Mcafee or etc
funy thing is that update worked fine for months
MBAM SCAN is clean as is SAS and SBS&D  HJT shows nothing
I'll run MBAM again tonight and copy and paste
thanks
hmmm check hosts

[SafeSurf]

@ wyrmrider,

If you still have a problem after doing the things you posted, you have some options:

1. Run a mini dump file to send to Avast:
- Here is additional information on how to invoke a memory dump file:  http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71.
- Please, zip and upload the C:\Windows\Memory.dmp file to this anonymous ftp server and name it uniquely: ftp.avast.com/incoming.  Avast will analyze it and respond to you in this thread or to your email.

2. Run an OTL log to check deeper for malware and have our Certified Malware Expert review it -> see here in the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0.  Follow the directions for obtaining the OTL logs.  Post the two (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post). 
- I will then refer you to Essexboy after your logs are posted. 

I would suggest that you run the dump file and then do the OTL logs just to make sure we are not missing anything.  Thank you.

[wyrmrider]

safesurf 
working on this a little every day as manual update has been semi automated
a look through program files for orphan folders (old av's)found none
MBAM found a 0 byte .exe file which I scanned with Spybot and avast with negative results

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5076

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

11/9/2010 7:57:01 AM
mbam-log-2010-11-09 (07-57-01).txt

Scan type: Full scan (C:\|)
Objects scanned: 240567
Time elapsed: 1 hour(s), 56 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Guest\Local Settings\Temp\325625754.exe (Trojan.FakeAlert.Gen) -> Quarantined and deleted successfully.

will continue working through the list

[wyrmrider]

Definitely a firewall or Defense + problem
will determine which

[SafeSurf]

Based on your MBAM scan, I'm now thinking malware issue.  As long as your FW has the AV disabled and you have no remnants of other AV's on your machine and everything was working fine before, I highly recommend running an Avast boot-time scan and OTL log as I suggested in my earlier post to see if you have some deeper malware issues going on.

Run an OTL log to check deeper for malware and have our Certified Malware Expert review it -> see here in the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0.  Follow the directions for obtaining the OTL logs.  Post the two (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post). 
- I will then refer you to Essexboy after your logs are posted.

[wyrmrider]

Hi safe surf
Avast is not disabled and is being manually updated every day
turning off the Comodo "defense+" feature allows Avast update to function normally

So over to Comodo

I'll do a rootkit scan, boot time scan, and run hjt again but do not expect to find anything
maybe not till this wekend
thanks
wyrmrnder

[SafeSurf]

I'll do a rootkit scan, boot time scan, and run hjt again but do not expect to find anything

Instead of Hjt scan, do OTL, as I am going to refer you to Essexboy for his input and he does not use Hjt; OTL gives more information.  It probably will not show anything, but we have to rule it out, and he knows his stuff. 

[osants911]

Avast is not disabled and is being manually updated every day
turning off the Comodo "defense+" feature allows Avast update to function normally

So over to Comodo

@wyrmrider

Hi

Comodo firewall and Defense + works fine on my computer.

[SafeSurf]

turning off the Comodo "defense+" feature allows Avast update to function normally

He is not having a problem with the FW and Avast.  Something else is going on that we are trying to trouble-shoot.  Thanks. 

[wyrmrider]

Thanks safe suf and others

autoupdate worked fine on the XP-SP3 machine also
QTL   Superantispyware removes QTL Fake Alert- perhaps the 0 byte file that mbam found was a remnant
I'll run SAS again

Safe- what program were you suggesting I run instead of HJT?

boot time avast scan scheduled next time the machine fires up

[wyrmrider]

safesurf

boot time scan- no vrus found
SAS log shows nothing but cookies
what program did you want me to scan with?

SAS did it's usual machine hog routine
I must have scan on startup checked somewhere
al I wanted to do is check the log
It ran a scan or something then updated and went of and ran for another 10 min
go figure