2nd Harddrive problem

system · 2007-11-16T18:40:34.000Z

The choice was either ‘none’, ‘small memory dump (64KB)’ or ‘kernel memory dump’

I’m using a USB keyboard (no PS/2 sockets on PC)

DavidR · 2007-11-16T18:46:34.000Z

Mine gives ‘Complete memory dump’ after the Kernel option in the drop down list.

system · 2007-11-16T18:56:14.000Z

Definitely not on mine.

I ran Avast again until it froze and tried the ctrl/scroll lock thing again. When scroll lock is pressed for the first time Avast pops up with “running test, do you really want to close this window”. The second scroll lock click removes this pop-up. As I said before, simply clicking on ‘stop’ to halt the scan doesn’t work, I just get an ‘egg-timer’.

igor0 · 2007-11-16T18:58:16.000Z

I guess it’s caused by the size of the swap file. The full dump is huge (as big as you RAM size), and it’s written in place of the swap file - so the swap must be at least that big for this option to be available.

Anyway, I’m afraid the manual bluescreen shortcut works only with PS/2 keyboard. The Microsoft Knowledgebase article has some instructions for USB keyboard as well (a different registry key):
http://support.microsoft.com/kb/244139

but it requires installation of an updated USB keyboard driver - and it speaks only about Windows 2003, so I’m really not sure if this would work on XP (and I don’t know if it’s a good idea to try…) :-\

system · 2007-11-16T19:13:35.000Z

To make sure that the feature is enabled on a computer that uses a USB keyboard, follow these steps: 1. Start Registry Editor.
2. Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kbdhid\Parameters
3. Make sure that the following registry entry is enabled:
Name: CrashOnCtrlScroll
Data Type: REG_DWORD
Value: 1
4. Exit Registry Editor.

So just doing this by itself would be no good or could cause problems?

I’m not questioning you at all (although I’m about to ask a question, so I suppose I am really! ;D ) but if this started when the 2nd harddrive was put in, and I can temporarily stop the problem by disabling it, isn’t the problem for Avast being caused by something I’ve done with the HDD? Please accept my apologies in advance if you’re all now holding your heads in disbelief at the stupidity of this question! ;D

Vlk · 2007-11-16T20:39:42.000Z

So now I’m not quite sure if you have already followed the steps you yourself quoted in your previous post. And if you have, if you’re now able to invoke the blue screen by using the Ctrl + 2x ScrollLock key trick (make sure to reboot the system after making the registry change).

I'm not questioning you at all (although I'm about to ask a question, so I suppose I am really! ) but if this started when the 2nd harddrive was put in, and I can temporarily stop the problem by disabling it, isn't the problem for Avast being caused by something I've done with the HDD? Please accept my apologies in advance if you're all now holding your heads in disbelief at the stupidity of this question!

With all respect, I’m reluctant to make any conclusions until I actually see the dump.

Cheers
Vlk

system · 2007-11-16T21:49:33.000Z

No, I haven’t done it yet, I was asking if it was worth the risk or if you felt it was a waste of time even trying. I’m afraid I’ll be away from the PC for a couple of hours now, but I will do it as soon as I get back.

I’ll upload the dump if it works and let you know on here that I’ve succeeded. If you don’t hear from me for a long time, you’ll know I’m doing a reformat/fresh install!

system · 2007-11-17T00:18:03.000Z

I made the registry change, and I’m afraid it didn’t work.

system · 2007-11-17T02:12:16.000Z

;D ;D

I’ve got it to work (Avast scanning, that is)!! :o

I deleted the new HDD partition and reformatted it as a Dynamic Disk Simple Volume (rather than a Basic Volume).

I’ve now run a standard scan (no archive), just in order to do it quickly, and it went all the way through, with no freezing!!

I’ll try a thorough scan with achive tomorrow, but it’s looking good. I’m also able to context menu-scan the new HDD with no problem.

I just hope I don’t come back tomorrow with my tail between my legs…

system · 2007-11-17T10:56:27.000Z

Sorry if I’ve been a long time, but it’s taken a while to dry the tears and to make an attempt to remove the article that’s wedged itself between my legs…

As I said earlier, I deleted the new harddrive volume and reformatted it, this time as a Dynamic Simple Volume. I then rebooted and used the context menu to scan the new drive. It scanned it in about 2 seconds, as one would expect with nothing in it.

I ran a standard scan which completed with no problems. I then ran 2 thorough scans, one with archive scanning enabled, and both completed fine.

I then shut down the PC.

This morning all the old problems are back (both context menu and standard scan freeze).

Any thoughts?

igor0 · 2007-11-17T11:47:07.000Z

Thinking about it, there might be a simple workaround: go to avast! settings and enter the following path into the list of exclusions:
C:\System Volume Information\tracking.log

It won’t tell us where the problem is, so it’s hard to say whether the same problem appears with another file… but it might solve this particular problem (I hope?)

system · 2007-11-17T13:27:39.000Z

Thanks for your continued help, Igor.

I entered the path into the exclusion list and it stuck somewhere else this time (image 1). I shut down, restarted and ran 2 more scans, with it freezing both times I’m afraid (images 2 & 3).

system · 2007-11-17T18:56:39.000Z

Having got a bit fed up, I’ve now completely wiped the 2nd drive using Killdisk. It doesn’t show up in My Computer, and shows up in Disk Management as ‘not allocated’ and ‘not initialized’. When I open Disk management, the ‘Initialize and Convert Wizard’ opens.

With it in this state, Avast works perfectly.

Since my last post, I have also found that AdAware SE also freezes during scanning - it shows up in Task Manager as ‘not responding’ and then starts again, freezes again, and finally gets through the scan. I ran Kaspersky online scan, and this also froze! All other scanners work, I’ve run them all, and I’ve tried pretty-well every other program on the PC and nothing else seems affected.

Since wiping the drive has solved all the problems, I can only think that I’m doing something wrong when installing the HDD.

Any help anyone can give would be very much appreciated. I know this isn’t a general knowledge Forum, but I would very much like the 2nd drive, and certainly don’t want to be without Avast!

Thanks,

Graham.

system · 2007-11-18T07:08:05.000Z

Hello again and sorry for the delay.

IRQ and DMAs are commonly referred as “interruptions” and they’re the ‘bridge’ used by the operating system and software to directly ‘speak’ to hardware components installed in your PC.

For example, you may have a super fast DVD unit or Hard Drive, but if DMA is not activated -by these days that’s activated by default- you’ll never get the maximum performance from those devices because instead ‘talking’ directly to them, OS must use a walkaround thus making the whole process really slow. DMA stands for Direct Memory Address.

I tell you a little story to graphic this:
Some days ago I finally setted up my sister computer and until I finally managed to activate DMA support for the DVD recorder, uploading data to its HD was a painfull process. Every DVD took about 30 minutes or more (damn!!) to dump it’s data -pictures, music, videos- to the hard disk. When I finally managed to activate DMA support it took no more than 10 -often less- minutes to copy all the files. As you see, having a well tweaked PC really makes the difference.

For more info just check http://en.wikipedia.org/wiki/Direct_memory_access and http://en.wikipedia.org/wiki/IRQ

Best!

system · 2007-11-18T14:15:33.000Z

Hi martosurf,

Thanks for replying.

I did try to read up on DMA’s and IRQ’s after your last posting, but it was a bit beyond me I’m afraid. In the link you posted about IRQ’s it says that this is no longer a common problem, so I guess out of the two, a DMA issue is more likely. How do you activate DMA support?

system · 2007-11-20T17:26:03.000Z

By way of an update to this thread, Igor and Vlk have been helping me with this problem through ‘My Messages’.

They enabled me to crash the PC and create a full dump, which once analysed, pointed to a conflict being caused by

C:\WINDOWS\System32\Drivers\Klif

which is a Kaspersky driver.

I’ve never installed Kaspersky (just run the online scan which apparently uses ActiveX, not drivers). Further investigation by Igor and Vlk revealed that this entry, and others relating to Klif come from ZoneAlarm, which it would seem, use the Kaspersky drivers.

I’ve started a new thread http://forum.avast.com/index.php?topic=31607.0 asking if anyone using ZA could possibly check their system to see if they have similar entries.

Why these drivers caused Avast (as well as AdAware and Counterspy in the end) to freeze during scans if I had the 2nd HDD installed, but caused no problem if I disabled it first, I do not know!

I would however like to take this opportunity to thank everyone on here who has helped with this, but in particular Igor and Vlk, who have put in an incredible amount of work in order to rectify this problem. I’m still a bit lost for words every time I think about it. I’ve been helped a lot on these Forums before, but this time it’s just been amazing. I really can’t believe the level of commitment…I’m serious, what do I say?

Thank you.

Lisandro · 2007-11-20T17:30:59.000Z

GrahamE post:39:

I’ve never installed Kaspersky (just run the online scan which apparently uses ActiveX, not drivers).

The on-line scanning uses files here:
C:\WINDOWS\System32\Kaspersky Lab\Kaspersky Online Scanner

system · 2007-11-20T17:37:07.000Z

Hi (again!) Tech,

Yeah, originally it was thought that the ‘Klif’ had been installed by Kaspersky itself, that is, left behind from a previous install of the full AV, but I’d never done that. I’d uninstalled the online scanner, and removed the file you mention. It took a while before ZoneAlarm was found to be a possible suspect!

Lisandro · 2007-11-20T17:39:00.000Z

GrahamE post:41:

It took a while before ZoneAlarm was found to be a possible suspect!

Well, by the path of the files I will say that ZA IS guilty here, not only suspect

system · 2007-11-20T17:45:43.000Z

;D Yes, it’s obvious now they’ve all been found! The analysis of the memory dump revealed that the problem was with C:\WINDOWS..Klif, and so ZA wasn’t immediately apparent. Because it was a Kaspersky driver, there was a more obvious suspect! Having deleted this entry, and run a search for “Klif”, the others came to light, and ZA was in the frame!

Announcements