Given the time you have spent/wasted re/uninstalling SP3 back and forth to no avail, you could have a sane fresh new XP install and working Avast. Seriously, reformat the drive.
- ??? I’ve never heard of something similar…!!! You won’t need WFW to use any browser…!!!
- Please stop deinstalling/reinstalling SP3 over and over again, best you can achieve is messing up your system completely…!

- So problem is back, after all.
Maybe it really would be best to follow doktornotor’s solution. If you have not too much data to loose…?? - If you don’t like the idea of a newly clean installed system, we could try something else. Tell us which way you want to go…
asyn
1. ??? I've never heard of something similar..!!! You won't need WFW to use any browser...!!! 2. Please stop deinstalling/reinstalling SP3 over and over again, best you can achieve is messing up your system completely..! ;) 3. So problem is back, after all. :( Maybe it really would be best to follow doktornotor's solution. If you have not too much data to loose..?? 4. If you don't like the idea of a newly clean installed system, we could try something else. Tell us which way you want to go... asyn
Well, I’m certainly not keen on reinstalling windows, that’s its own special pain. I am also interested in discovering the root cause of problems and understanding exactly what happened. If someone has something that they could suggest or that they would like me to try on the system as it exists, I am willing to make the effort. If everyone is tired of the problem and has better things to do with their lives, then the simple solution is to clear the slate and start over.
I am open to suggestions and comments, thanks for the help so far.
Just a wild guess, but maybe it has something to do with the fact that the HD was partitioned and formatted by Ubuntu?
Just a wild guess, but maybe it has something to do with the fact that the HD was partitioned and formatted by Ubuntu?
I thought about that early on but I eventually gave up on that idea.
- If it would have been a ubuntu problem, I think it would have shown up immediately rather than waiting for many weeks.
- The disk has passed all of the diagnostics I could think of including windows scandisk and chdsk.
- there are no other software problems I can detect, everything else works just fine.
- if it were to involve a specific portion of the disk, my multiple uninstall/reinstalls would have touched different parts of the disk
- I’ve done this many times in the past, although never with XP.
I had a minor quirk with resized partitions & the Avast tray service. Selecting repair from the install/remove CP worked for me, but a full uninstall/reinstall should have resolved the issues for you. Your problem sounds peculiar & indicative of malware, but MBAM & SAS should pick up most of these. It’s unlikely, but try memtest for any obscure RAM issues.
Hi reallyold
I cannot find any reference to Epox KT7a raid. Are you sure that is yr mainboard? Doesn’t matter too much, I know the period hardware, which was designed for AMD processors, and there was problems with shift into XP Athlons, meant tweaking the bios, etc…I’m not sure whether these issues resolved as quite a time ago, however with older mainboards such as these, problems will crop up from time to time.
perhaps you could run a HijackThis scan just to better put us in the picture
HijackThis Click here – (will take direct to download)
http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/
Download and run.
Then do scan and save a log file.
Post the log file to this thread. If it is too large you may have to post in two parts.
Or OTL - see http://forum.avast.com/index.php?topic=53253.msg451454#msg451454
You could also go to Startup manager in ccleaner
Let us know what programs are set to start with the boot up of yr system
ccleaner – open Tools in menu column on left-hand side
select Startup – what programs are enabled to start when you boot?
- provide screenshot or simply outine in yr reply post
here is hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:29:29 PM, on 5/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\userinit.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
D:\WINDOWS\system32\RunDll32.exe
C:\Program files\EPoX\USDM\USDM.EXE
D:\Program Files\D4\D4.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [nwiz] nwiz.exe /install
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] “D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM..\Run: [EPoXUSDM] “C:\Program files\EPoX\USDM\USDM.EXE” “5000”
O4 - HKLM..\Run: [Dimension4] D:\Program Files\D4\D4.exe
O4 - HKLM..\Run: [SunJavaUpdateSched] “D:\Program Files\Common Files\Java\Java Update\jusched.exe”
O4 - HKLM..\Run: [avast5] D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip..{137553B9-7B8A-4D90-A5FF-259E92951B97}: NameServer = 65.32.1.70,65.32.1.65
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - D:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe
Here is the startup from ccleaner:
Yes HKCU:Run NvMediaCenter RUNDLL32.EXE D:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
Yes HKCU:Run ctfmon.exe D:\WINDOWS\system32\ctfmon.exe
Yes HKLM:Run NvCplDaemon RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
Yes HKLM:Run nwiz nwiz.exe /install
Yes HKLM:Run Adobe Reader Speed Launcher “D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”
Yes HKLM:Run Cmaudio RunDll32 cmicnfg.cpl,CMICtrlWnd
Yes HKLM:Run EPoXUSDM “C:\Program files\EPoX\USDM\USDM.EXE” “5000”
Yes HKLM:Run Dimension4 D:\Program Files\D4\D4.exe
Yes HKLM:Run SunJavaUpdateSched “D:\Program Files\Common Files\Java\Java Update\jusched.exe”
Yes HKLM:Run avast5 D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
Yes Startup Common Microsoft Office.lnk D:\Program Files\Microsoft Office\Office\OSA9.EXE
I really hate when threads get cluttered with Hijackthis info. That should be sent through messages.
No they shouldn’t be sent through messages as, a) that is only seen by one person and b) most people seeking help haven’t got 20 posts as in the case of reallyold with only 14, so can’t use the PM function.
There is nothing wrong in attaching the log file to the post though.
Yes you’re right, an attachment would be better since then everyone who wanted to see it could and those who didn’t wouldn’t have to scroll through it.
well the HjT is an easy read as it is, and besides reallyold did start the thread
@really old
I’m in the middle of something, but quick glance tells me nothing real bad shows up in HjT.
use Start Manager in ccleaner to stop following program/app from starting automatically with Windows -
NvMediaCenter
nwiz
Adobe Reader Speed Launcher
Cmaudio
Dimension4
Microsoft Office.lnk
to overdo things a bit, I guess, but unless you have overriding reason for having one of them start at boot up
but these programs will autorun anyway, when you start by opening the program
you can edit in yr preferences later once you smooth running
I’ve got a feeling may be nvidia controls - NvMediaCenter and nwiz
but see how we go
I have had similar or maybe same problem as reallyold. First I had avast 4.8 home and it turned off my Win Firewall. After unsuccesfull tries to turn it on i gave up. Now for few weeks i had Avast 5.0545 free and the same problem.
I didnt care about it untill i was trying to forward some ports to play games online.
Digging on the net about problems with port forwarding I found that Broken Win Firewall make port forwarding unavailable.
Now after reading this posts I uninstalled Avast 5 (normally not in Safe mode) succesfully but Win Firewall still cant be run.
It throws a message “Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service” .
I even tried to repair Win firewall with Shane’s Tool from PcWinTech.com : http://www.pcwintech.com/files/shanes_toolbox/Repair_WMI_&_Windows_Firewall.zip .
I installed SP3 again and still no result .
Windows Installation was correct . Win Firewall worked before installing avast.
Last thing i have in mind is to try to uninstall avast in safe mode and maybe clearing registry.
So reallyold is not alone with his problem - its not unusuall problem. Just people give up with it untill it starts to be disturbing.
I have never heard of an AV program, Avast! or any other, turning off the Windows Firewall. Security suites that include their own Firewall, yes, but never a standalone AV.
+1 ![]()
asyn
avast and even AIS (the suite, with a firewall) do NOT change the Windows firewall status.
AIS could be run side by side with Windows firewall.
I dont understand , whats the point of your theoretical statements ? Fact is fact. On some computers it does disable Win Firewall and theres nothing to deny. Focus on solution instead of pointless contentions.
I don’t think there can be a solution since it seems that you are the only one this has ever happened to. As I said, AV applications never mess with Windows Firewall. There has to be something specific to your system that is causing this.
The only thing I can offer is this. When I had disabled the ICS service on this computer, Windows Firewall could not start because of that and I got the very same message you did but I also got a message asking me if I wanted to enable the necessary services. When I clicked on yes, the Firewall worked perfectly. Do some searches on how to enable ICS on your system.
Read my first post again carefully.
Hi lybra
have you checked if yr firewall is turned off in Services?
Start → right-click (My) Computer and select Manage _> click through Services and Applications to bring up Services
click Windows Firewall/Internet Connection Sharing (ICS) service and set to Start and Automatic
The Restart computer
It is possible there these is some kind of glitch and have to keep trying different things, such as above where I list a few things for reallyold to try out - these may work and may not work, but hard to say without actual being there.