I thought that everything was working fine with Avast 5, until I tried to do a ‘Full system scan’.
I had performed a ‘quick scan’ without any problems, but when I came to do a full scan Avast froze after about 1 minute, having checked only 77,500 files and 12.06GB of data. The icon in the system tray had a red x on it and I could not do anything with the program. The only way out was to manually shut down my computer.
I tried a full system scan again and it stopped at exactly the same place again and once again I had to manually shut down my computer.
By a process of elimination, by using the ‘create custom scan’ feature and scanning each individual area of a Full system scan (All harddisks, Rootkits, Autostart programs and memory) I have found out that Avast 5 will not (or cannot) scan the memory on my computer. When I set a custom scan to scan memory only, the timer starts ticking away, zero files are being scanned and then Avast freezes and a red x is seen in the system tray icon. I am able to do a ‘full scan’ without scanning memory by using custom scan and everything works ok.
I realise that this is a trivial problem compared to what other users are having to put up with, but can anyone offer an explanation as to what is wrong?
I installed Avast 5 by first uninstalling Avast 4.8 with ‘Add or remove programs’ in Safe Mode and also used the Avast uninstall utility before performing a clean install of Avast 5. I have also tried doing a ‘repair’ but to no avail. I am running Windows 7 64-bit, if that helps.
Did you have any other antivirus on the computer before putting on Avast 5?
Only Avast 4.8, and I did a clean uninstall of that version before installing Avast 5.
Having oceans of trouble with avast 5. Reverting back to Avast 4.8 as i am writing this message. As this was a good antivirus and gave me no trouble!
Apart from the problem of not scanning memory, I am having no other problems with Avast 5 so far (touch wood). So, I think I will persevere with this version for now and see how it goes 
What area exactly did you put into the custom scan? “Memory” or “Auto-start programs”?
Actually, the Full system scan uses a slightly different internal area - you can get it if you type QuickStartupMem into the “Areas to scan” box.
So, I assume the avast! service crashes when you start such a scan - i.e. the AvastSvc.exe process disappears. Do you have any unpXXXXXX files in
C:\ProgramData\ALWIL Software\Avast5\Log
folder? They could tell us what happened (if the corresponding dump was created during the crash).
Thanks.
Both (individually). It was able to scan ‘Auto-start programs’ but would not scan ‘Memory’ without crashing.
Yes, I have 2…
unp78770045.tmp.mdmp
unp157615041.tmp.mdmp
Can you please upload them to
ftp://ftp.avast.com/incoming
Thanks.
How do I do that, exactly ???
All I see, when I enter the link into my browser address bar is a website with a box with the address in it and the words “Name, size, date modified” inside it. That’s all, nothing else. How do I upload the files to this page??
Hi taffy44,
As far as I’m aware, you simply have to open the link, and drop the file in the window of the browser (it may have to be Internet Explorer IIRC)
I think you(we) have write only access, so you wont be able to see that the file is there, you will probably need confirmation that it is there…
On a side note, this could do with updating to show how to do it : http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=18
-Scott-
I’m afraid those 2 dumps correspond to crashes of avast! UI, not avast! service (which means the dumps were probably not created when the service crashed).
If there anything related in Windows Event Log?
It’s probably doesn’t matter - but how much RAM do you have in your machine?
All I could find in the Windows Event log is the following…
Under the heading ‘System’ it says…
“The Avast! Antivirus service terminated unexpectedly.”
Under the heading ‘Application’ it says…
Application error :-
Faulting application name: AvastUI.exe, version:5.0.377.0, time stamp: 0x4b559ce0
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdb3b
Exception code: 0xc0000005
Fault offset: 0x000843b7
Faulting process id: 0x978
Faulting application start time: 0x01ca9e780745fda0
Faulting application path: C:\Program Files\Alwil Software\Avast5\AvastUI.exe
Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report Id: 2382cb40-0a72-11df-8cbe-001731f64e90
3GB of RAM. (OS is Windows 7 64-bit, processor is AMD Athlon 64 X2 5,200+)
P.S I tried typing ‘QuickStartupMem’ into the “Areas to scan” box of a custom scan and when I hit the ‘start’ button Avast crashed (red x on system tray icon).
Thanks for continuing to help me with this problem, it is much appreciated
OK, please do the following:
- open the Task Manager
- watch the processes AvastUi.exe and AvastSvc.exe
- start the scan (e.g. with the ‘QuickStartupMem’ area)
Am I right that AvastSvc.exe disappears?
Yes, you are right. AvastSvc.exe immediately disappears
But no record about that disappearance (i.e. crash) in Windows Event log?
I’d need to see a dump - to find out why it crashes. I’m not sure if it will work, but if possible, could you please try the following?
- Disable avast! self defense (avast! settings / troubleshooting)
- Download ProcDump from here: http://technet.microsoft.com/cs-cz/sysinternals/dd996900(en-us).aspx
- Extract it somewhere, and run the following command from the command line:
procdump .exe -e -ma AvastSvc.exe - Now run the scan that will crash the process
Hopefully, the dump (called AvastSvc.dmp) will be created… if yes, please compress it and upload it to
ftp://ftp.avast.com/incoming
Sorry for taking so long to reply, I have been working all day.
I disabled avast! self defense, downloaded Procdump and extracted it to my desktop. The only problem now though is that it won’t open up for me. I press ‘run’ and the command line box opens up for a split second and then closes. Am I doing something wrong ???
It’s a command-line tool - so if you simply start it, it probably just complains that you didn’t supply any command-line arguments and exits (which closes the console).
I’d suggest to extract procdump somewhere else (C:\Procdump folder, for example - you can delete it later)
Then press Win+R and enter (or copy&paste): c:\Procdump\procdump .exe -e -ma AvastSvc.exe
Or, another possibility - you can rightclick on the procdump you have on desktop and select “Create shortcut”. Another shortcut to that tool appears; rightclick on it, choose Properties and append the command line switches to the “Target”. This shortcut should then work as expected.
Okay, I followed your last instructions to the letter then attempted a scan which crashed the process. Am I expected to see this AvastSvc.dmp in the same place as the mini dumps i.e…“C:\ProgramData\ALWIL Software\Avast5\Log”? If so, then it is not there.
No, not there.
I’d guess in the same folder as ProcDump.exe. If not, I’d look into the folder where AvastSvc.exe is located (i.e. avast! installation folder).