Ashserv.exe - application error {fixed}

Avast Free Antivirus / Premium Security
1

I uninstalled an older version of Avast and installed the new version of Avast and now I get a ashserv.exe application error when I get my windows xp log in screen.

Here’s how I uninstalled avast:

  1. used add/remove to uninstall it
  2. rebooted
  3. used avast uninstall tool
  4. rebooted
  5. removed all the left over folders and files from avast
  6. removed left over registry strings from avast.
  7. rebooted.

Here’s my set up. No Av now, Outpost Firewall Pro ver. 4.0.1024.7809 (700) and proxomitron. No other security tools running. Any ideas on how to fix this?

2

I believe this may well be an outpost issue.
What is the full text of the application error that you got ?

I am using Outpost Firewall Pro ver. 4.0.1025.7828 (700) which is a slightly later version. Now when I downloaded the latest version, I exported my configuration and uninstalled the old version before installing the latest OP pro version. During that installation it recognised avast and said that this could be conflicting application and did I want to exclude or avoid conflict (or words to that effect) I answered Yes.

Now in the C:\Program Files\Agnitum\Outpost Firewall (assumes you installed in the default folder) there is a file called wl_hook_data.cfg (this is just a text file), if you have this file add the following line to it:
C:\Program Files\Alwil Software\Avast4\ashserv.exe

If you don’t have the file create it using notepad or any text editor and add the same line C:\Program Files\Alwil Software\Avast4\ashserv.exe (assuming you have installed avast in the default location). Save the file in the Outpost Firewall folder, the wl_hook.dll file should be in that folder so you should be able to see your new file is in the correct location.

Install avast, Reboot and hopefully you should be in business.

3

David, what a mess from Outpost… what’s happening?

4

I have that same file and the ashserv.exe was already in the file. It was the only thing in there.

The full error is: "Ashserv.exe - application error
The instruction at “0x7c90efc0” referenced memory at “0x3e12d830”. The memory could not be “read”.

here’s what it says in my event veiwer.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 9/14/2007
Time: 3:02:35 PM
User:
Computer:
Description:
The avast! iAVS4 Control Service service terminated unexpectedly. It has done this 1 time(s).

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7022
Date: 9/14/2007
Time: 3:02:26 PM
User:
Computer:
Description:
The avast! Antivirus service hung on starting.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

I don’t know if that will help.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

5

It is just a compatibility check in much the same way as web shield checks ZA pro, I have no issues with it but I thought about this compatibility check to see if it was there.

From the windows event log entry it looks like a problem with ashserv.exe and not OP pro as it is a memory error as opposed to a clash.

@ Nogard
Did this happen at every boot ?
How much RAM do you have and how many sticks of RAM ?

@ Tech
I wonder if it would be a worthwhile exercise to get ashserv.exe complete a crash dump or f that is possible at this early stage ?

6

Yes it happens at every boot. I have about 640 RAM.

7

Well 640MB would indicate two sticks 512 and 128. Mixing RAM shouldn’t be a problem but you may have a faulty stick of RAM.

Ideally you should have the 512MB stick in the first slot (slot 0) - you could try switching them over and test or take one out to see if one is causing a problem.

Edit: Something I just thought of, that light bulb moment. If you can get in and open the Program Settings, Troubleshooting, check the ‘Delay loading of avast services after other system services’ and see if that has any effect.

8

OK, I’ll try that and see if it works. The 512 is in the first slot and the 128 is in the second slot.

9

Looks like both sticks are working. I get no errors about them not working when I place 1 in at a time. I still get the ashserv.exe application error no matter which stick is in. I also tried to reboot my computer 2 times and get the same error.

10

Do you get the same message when you run (or restart) the avast service manually? (Control Panel → Administrative Tools → Services).

Thanks
Vlk

11

Somewhere I’ve read that you should do the contrary, using the first slot with the smaller stick.

12

Yes I do.

OK I can try to put the smaller stick in the first slot.

13

I did it the other way around. The smaller one first but I still get the error.

14

Please, answer Vlk’s question:

It’s difficult to guess where the problem could be… maybe troubleshooting route must include disabling providers (one by one) and see if it works… Isn’t anything related into Windows Events or anything more in avast logs?

15

Nothing in my log or anything. I might have to uninstall avast and install avg or something. Thanks

16

It’s a pity… but I can’t guess what’s wrong…
Please, post the last 100-150 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log

17

14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\avast! Mail Scanner\Description=Implements mail scanning for avast! antivirus.
14:48:23 vrb/sys Service avast! Mail Scanner updated
14:48:23 vrb/sys Reboot set by changed resident C:\WINDOWS\system32\drivers\aswTdi.sys
14:48:23 vrb/sys Driver file copied: C:\WINDOWS\system32\drivers\aswTdi.sys
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\DisplayName=avast! Network Shield Support
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\ErrorControl=1
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Type=1
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Group=PNP_TDI
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswTdi\Start=1
14:48:23 nrm/sys Service ‘aswTdi’ load order set id=268435456 in group ‘PNP_TDI’
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\avast! Web Scanner\Description=Implements web (HTTP) scanning for avast! antivirus.
14:48:23 vrb/sys Service avast! Web Scanner installed
14:48:23 vrb/sys Service avast! Web Scanner dependency avast! Antivirus
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\avast! Web Scanner\Description=Implements web (HTTP) scanning for avast! antivirus.
14:48:23 vrb/sys Service avast! Web Scanner updated
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\DisplayName=aswRdr
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\ErrorControl=1
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Type=1
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Start=3
14:48:23 vrb/reg Set registry: SYSTEM\CurrentControlSet\Services\aswRdr\Group=PNP_TDI
14:48:23 vrb/fil Shortcut for ashAvast.exe installed in C:\Documents and Settings\All Users\Start Menu\Programs\avast! Antivirus
14:48:23 vrb/fil Shortcut for help.chm installed in C:\Documents and Settings\All Users\Start Menu\Programs\avast! Antivirus
14:48:24 vrb/fil Shortcut for ashAvast.exe installed in C:\Documents and Settings\All Users\Desktop
14:48:24 vrb/reg Set registry: \shellex\ContextMenuHandlers\avast(null)={472083B0-C522-11CF-8763-00608CC02F24}
14:48:24 vrb/reg Set registry: avast\ShellEx\ContextMenuHandlers(null)={472083B0-C522-11CF-8763-00608CC02F24}
14:48:24 vrb/reg Set registry: Folder\shellex\ContextMenuHandlers\avast(null)={472083B0-C522-11CF-8763-00608CC02F24}
14:48:24 vrb/reg Set registry: CLSID{472083B0-C522-11CF-8763-00608CC02F24}(null)=avast
14:48:24 vrb/reg Set registry: CLSID{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32(null)=C:\Program Files\Alwil Software\Avast4\ashShell.dll
14:48:24 vrb/reg Set registry: CLSID{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ReleaseName=C:\Program Files\Alwil Software\Avast4\ashShell.dll
14:48:24 vrb/reg Set registry: CLSID{472083B0-C522-11CF-8763-00608CC02F24}\InProcServer32\ThreadingModel=Apartment
14:48:24 vrb/reg Set registry: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved{472083B0-C522-11CF-8763-00608CC02F24}=avast
14:48:24 vrb/reg Set registry: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved{472083B0-C522-11CF-8763-00608CC02F24}=avast
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Run\avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
14:48:24 vrb/fil Fix security on: C:\Program Files\Alwil Software\Avast4*.
14:48:24 vrb/fil Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH*.*
14:48:24 vrb/fil Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH\HELP*.*
14:48:24 vrb/fil Fix security on: C:\Program Files\Alwil Software\Avast4\ENGLISH\HtmlData*.*
14:48:24 vrb/fil Fix security on: C:\Program Files\Alwil Software\Avast4\images*.*
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayName=avast! Antivirus
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayVersion=4.7
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\HelpLink=http://www.avast.com
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\HelpTelephone=
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UrlInfoAbout=http://www.avast.com
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UrlUpdateInfo=http://www.avast.com
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\InstallLocation=C:\PROGRA~1\ALWILS~1\Avast4
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\InstallSource=C:\DOWNLO~1
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\Publisher=Alwil Software
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\VersionMajor=4
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\VersionMinor=7
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\DisplayIcon=C:\Program Files\Alwil Software\Avast4\ashAvast.exe
14:48:24 vrb/reg Set registry: Software\Microsoft\Windows\CurrentVersion\Uninstall\avast!\UninstallString=rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup
14:48:25 vrb/gen License key generated Demo
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\Label=Sep2007
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\Avast4DataFolder=C:\Program Files\Alwil Software\Avast4\DATA
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\Avast4SkinFolder=C:\Program Files\Alwil Software\Avast4\DATA\Skin
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\Version=4.7
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\VersionShort=4.7
14:56:48 vrb/reg Set registry: Software\Alwil Software\Avast\4.0\SetupVersion=1043
14:56:49 nrm/pkg Transferred files: 11
14:56:49 nrm/pkg Transferred bytes: 16070319
14:56:49 nrm/pkg Transfer time: 140 ms
14:56:49 vrb/fil NeedReboot=true
14:56:49 vrb/sys Reboot set by filRenameOnReboot(C:\Program Files\Alwil Software\Avast4\Setup\reboot.txt,)
14:56:49 vrb/fil MoveFileEx(C:\PROGRA~1\ALWILS~1\Avast4\Setup\reboot.txt, NULL)
14:56:49 min/gen Return code: 0x20000000 [Something done]
14:56:49 min/gen Stopped: 14.09.2007, 14:56:49

18

How many times did you install the Trial version?
How long are you using it?

19

I uninstalled Avast a few times and reinstalled it. I never put in my Registration yet.

I never used the demo version that long. Before I update to the latest version, I didn’t even use the demo when I installed it a 4 weeks ago. I registered it and had no problem. I get message through Avast update that there was a new version out. I tried to update through the updating tool but it wouldn’t let me for some reason. So I down loaded a new version, uninstalled the old version, reboot, cleaned up what was left, reboot and re-installed the new version I started to get the error message.

20

It does not matter if you use (on-demand scanning) but the installation itself is considered as an use (on-access). If you install / uninstall / install again, you will have only 6 days of trial period.
Can you add your Home registration key and see if you can update?