Hi everybody,
I’ve been using AVAST HOME Edition for a long time and it’s the first time I have problem with it. Since 2 weeks, every time it updates the VIRUS DEFINITION files, it ask me to reboot the system. I have XP Pro SP2, and I use Firewall Kerio Personal v4.2.2, Avast being “accepted” in Kerio. The other problem is that my notebook do not shut down entirely. It close open programs, display that Windows ends, but keeps on displaying a blue (and normal) screen without completely shutting down. Then, I shut down manually (push the shutdown button).
I am not “newbie”. I have searched in task manager, msconfig, registry (using jv16 Power Tools), scanned with Ad-Aware, Spybot, and a-squared.
I read some answers about this problem in this forum, but could not resolve the problem. The answer about the dll files for example : I don"t have those dll files on my system. And the other answer telling to delete the “reboot.txt” file could not resolve anything.
Can someone help please ?
Can you see if into
Control Panel > Adminstrative Tools > Events
you can see any strange event being recorded? Specially errors into System and Application area?
Does avast report any error?
Are your Windows fully updated?
Any other security program installed?
If deleting reboot.txt doesn’t stop the requests for reboot check this:
Check this registry entry (right after computer restart):
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, if it contains “PendingFileRenameOpertaions”.
Check its contents and if there’s only “reboot.txt” from avast4\setup folder, delete PendingFileRenameOperations, don’t delete any other key.
Back-up (export) the registry key before you edit/delete, just in case.
Not sure what the problem with your shutdown might be (does this happen every time?), there could be something running that isn’t ending correctly. Hopefully something may be in the windows event logs as Tech suggest checking.
If something is still working, avast may also be monitoring its actions, etc. Try checking what programs/services are running in Task Manager just before you shut down. You could also try a Stop On-Access protection (right click avast icon) before you shutdown and see if that has any effect.
If so it may be worth trying, uninstall, reboot, install, reboot.
It would probably be best to download the latest version of avast and save it to your HDD, somewhere you can find it again. Use that when you reinstall.
Hi,
You say that there should be only the file “reboot.txt” in Setup folder. Or, that’s what I understood… There are other files, ones with .vpu extensions, other with .ovr extensions, etc. and a log file. “reboot.txt” is empty. I send you the end of that file. Sorry, but it is a little bit long :
17:56:53 min/gen Started: 15.12.2005, 17:56:53
17:56:53 min/gen Running setup_av_pro-2e3 (739)
17:56:53 nrm/sys Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
17:56:53 vrb/sys Computer WinName: MYCOMPUTER
17:56:53 min/sys Windows Net User: AUTORITE NT\SYSTEM
17:56:53 min/gen Cmdline: /refresh /noreboot /updatevps /verysilent
17:56:53 vrb/gen Operation set to INST_OP_UPDATE_INSTALL_PACKAGES
17:56:53 min/gen Old version: 2e3 (739)
17:56:53 nrm/gen SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
17:56:53 nrm/int SYNCER: Type: use IE settings
17:56:53 nrm/int SYNCER: Auth: another authentication, use WinInet
17:56:53 vrb/pkg Part prg_av_pro-2e3 is installed
17:56:53 vrb/pkg Part vps-55003 is installed
17:56:53 vrb/pkg Part news-44 is installed
17:56:53 vrb/pkg Part setup_av_pro-2e3 is installed
17:56:53 min/gen Old version: 2e3 (739)
17:56:55 vrb/fil SetExistingFilesBitmap: 757->138->84
17:56:55 min/gen GUID: 3599b5ef-c641-4669-a511-7b832eceb268
17:56:55 vrb/gen Entering:UpdateInstallPackages
17:56:55 min/pkg Load C:\Program Files\Alwil Software\Avast4\Setup\prod-av_pro.vpu
17:56:55 vrb/pkg LatestPartInfo: news = news-44
17:56:55 vrb/pkg LatestPartInfo: program = prg_av_pro-2e3
17:56:55 vrb/pkg LatestPartInfo: setup = setup_av_pro-2e3
17:56:55 vrb/pkg LatestPartInfo: vps = vps-55003
17:56:55 vrb/pkg ArePartsInstallable: 1
17:56:57 min/pkg vps: updated [055003]
17:56:57 nrm/pkg Transferred files: 0
17:56:57 nrm/pkg Transferred bytes: 0
17:56:57 nrm/pkg Transfer time: 0 ms
17:56:57 vrb/fil NeedReboot=false
17:56:57 min/gen Return code: 0x20000000 [Something done]
17:56:57 min/gen Stopped: 15.12.2005, 17:56:57
12:14:01 min/gen Started: 16.12.2005, 12:14:01
12:14:01 min/gen Running setup_av_pro-2e3 (739)
12:14:01 nrm/sys Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
12:14:01 vrb/sys Computer WinName: MYCOMPUTER
12:14:01 min/sys Windows Net User: AUTORITE NT\SYSTEM
12:14:01 min/gen Cmdline: /downloadpkgs /noreboot /updatevps /verysilent
12:14:01 vrb/gen DldSrc set to inet
12:14:01 vrb/gen Operation set to INST_OP_UPDATE_GET_PACKAGES
12:14:01 min/gen Old version: 2e3 (739)
12:14:01 nrm/gen SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
12:14:01 vrb/sys Computer DnsName: MYCOMPUTER
12:14:01 vrb/sys Computer Ip Addr: 192.168.1.103
12:14:01 nrm/int SYNCER: Type: use IE settings
12:14:01 nrm/int SYNCER: Auth: another authentication, use WinInet
12:14:02 vrb/pkg Part prg_av_pro-2e3 is installed
12:14:02 vrb/pkg Part vps-55003 is installed
12:14:02 vrb/pkg Part news-46 is installed
12:14:02 vrb/pkg Part setup_av_pro-2e3 is installed
12:14:02 min/gen Old version: 2e3 (739)
12:14:04 vrb/fil SetExistingFilesBitmap: 757->138->84
12:14:04 min/gen GUID: 3599b5ef-c641-4669-a511-7b832eceb268
12:14:04 nrm/gen Server definition(s) loaded for ‘main’: 46 (maintenance:0)
12:14:04 nrm/gen SelectCurrent: selected server ‘Download21 AVAST server’ from ‘main’
12:14:04 min/pkg GetPackages - set proxy for inet
12:14:04 nrm/int SYNCER: Type: use IE settings
12:14:04 nrm/int SYNCER: Auth: another authentication, use WinInet
12:14:29 min/pkg ERROR:HttpGetWininet, catch returned 0x00002EE2
12:14:43 nrm/gen Server definition(s) loaded for ‘main’: 46 (maintenance:0)
12:14:43 nrm/gen SelectCurrent: selected server ‘Download11 AVAST server’ from ‘main’
12:14:43 min/pkg GetPackages - set proxy for inet
12:14:43 nrm/int SYNCER: Type: use IE settings
12:14:43 nrm/int SYNCER: Auth: another authentication, use WinInet
12:14:44 min/pkg Load C:\Program Files\Alwil Software\Avast4\Setup\prod-av_pro.vpu
12:14:44 vrb/pkg LatestPartInfo: news = news-46
12:14:44 vrb/pkg LatestPartInfo: program = prg_av_pro-2e3
12:14:44 vrb/pkg LatestPartInfo: setup = setup_av_pro-2e3
12:14:44 vrb/pkg LatestPartInfo: vps = vps-55004
12:14:44 vrb/pkg Part vps-55004 was set to be installed
12:14:44 vrb/pkg Removed obsolete file part-vps-55003.vpu
12:14:46 vrb/pkg IsFullOkay: vpsm-55004.vpu - not okay
12:14:46 vrb/pkg IsFullOkay: vpsm-55004.vpu - not okay
12:14:46 vrb/pkg IsFullOkay: vpsm-55004.vpu - not okay
12:14:46 vrb/pkg IsFullOkay: vpsm-55004.vpu - not okay
12:14:46 nrm/pkg DldPackage: C:\Program Files\Alwil Software\Avast4\Setup\vpsm-55004.vpu, returned 0x00000000
12:14:46 vrb/pkg Removed obsolete file vpsm-55003.vpu
12:14:49 min/pkg vps: needs to be updated [055004]
12:14:49 vrb/pkg FilterOutExistingFiles: 138 & 84 = 54
12:14:49 nrm/pkg Transferred files: 5
12:14:49 nrm/pkg Transferred bytes: 12441
12:14:49 nrm/pkg Transfer time: 38688 ms
12:14:50 vrb/int Sending stats ‘http://download11.avast.com/cgi-bin/iavs4stats.cgi’: 00000000 204
12:14:50 vrb/fil NeedReboot=false
12:14:50 min/gen Return code: 0x20000000 [Something done]
12:14:50 min/gen Stopped: 16.12.2005, 12:14:50
12:14:51 min/gen Started: 16.12.2005, 12:14:51
12:14:51 min/gen Running setup_av_pro-2e3 (739)
12:14:51 nrm/sys Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2]
12:14:51 vrb/sys Computer WinName: MYCOMPUTER
12:14:51 min/sys Windows Net User: AUTORITE NT\SYSTEM
12:14:51 min/gen Cmdline: /refresh /noreboot /updatevps /verysilent
12:14:51 vrb/gen Operation set to INST_OP_UPDATE_INSTALL_PACKAGES
12:14:51 min/gen Old version: 2e3 (739)
12:14:51 nrm/gen SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 1
12:14:51 nrm/int SYNCER: Type: use IE settings
12:14:51 nrm/int SYNCER: Auth: another authentication, use WinInet
12:14:51 vrb/pkg Part prg_av_pro-2e3 is installed
12:14:51 vrb/pkg Part vps-55004 is installed
12:14:51 vrb/pkg Part news-46 is installed
12:14:51 vrb/pkg Part setup_av_pro-2e3 is installed
12:14:52 min/gen Old version: 2e3 (739)
12:14:53 vrb/fil SetExistingFilesBitmap: 757->138->84
12:14:53 min/gen GUID: 3599b5ef-c641-4669-a511-7b832eceb268
12:14:53 vrb/gen Entering:UpdateInstallPackages
12:14:53 min/pkg Load C:\Program Files\Alwil Software\Avast4\Setup\prod-av_pro.vpu
12:14:53 vrb/pkg LatestPartInfo: news = news-46
12:14:53 vrb/pkg LatestPartInfo: program = prg_av_pro-2e3
12:14:53 vrb/pkg LatestPartInfo: setup = setup_av_pro-2e3
12:14:53 vrb/pkg LatestPartInfo: vps = vps-55004
12:14:53 vrb/pkg ArePartsInstallable: 1
12:14:56 min/pkg vps: updated [055004]
12:14:56 nrm/pkg Transferred files: 0
12:14:56 nrm/pkg Transferred bytes: 0
12:14:56 nrm/pkg Transfer time: 0 ms
12:14:56 vrb/fil NeedReboot=false
12:14:56 min/gen Return code: 0x20000000 [Something done]
12:14:56 min/gen Stopped: 16.12.2005, 12:14:56
I hope it will give you an idea of the problem. So, for the moment, I did not delete the key “PendingFilerenameOperations”.
It seems that a program, Avast or another one, did not go to the end of it install or uninstall. Remark that I did not install any software since a long time. So, maybe it is caused by an automatic online update.
Events log in control panel : I saw that a software caused problems (Paint Shop Pro). I unistalled it, but the problem is still the same.
I also uninstalled and reinstalled Java software that I know was recently updated.
Here is also the “setup.ini” present in the Setup folder :
[DownloadSettings]
Speed=33600
[Groups]
Group1=av_pro_core
Group2=av_pro_coreskins
Group3=av_pro_corewnt
Group4=av_pro_dll_fre
Group5=av_pro_hlp_fre
Group6=av_pro_rdr
Group7=av_pro_res_mai
Group8=av_pro_res_mes
Group9=av_pro_res_ns
Group10=av_pro_res_out
Group11=av_pro_res_p2p
Group12=av_pro_res_std
Group13=av_pro_res_ws
Group14=av_pro_skins
Group15=av_pro_sysx
Group16=av_res_bat
Group17=avscan
Group18=winsys
Group19=winsysgui
Group20=
[Parts]
part.program=prg_av_pro-2e3
part.vps=vps-55004
part.news=news-46
part.setup=setup_av_pro-2e3
[PartsLatest]
part.program=prg_av_pro-2e3
part.vps=vps-55004
part.news=news-46
part.setup=setup_av_pro-2e3
[Common]
NetAcc=1
NetIP=
NetPort=0
NetUser=
NetPwd=
GUID=3599b5ef-c641-4669-a511-7b832eceb268
Tooltip=b?MTExNDEyNTMwMQ==
ZeroFootprint=0
[Info]
LastCheckTime=1134781934
LastUpdateTime=1134781935
[PartsLatestTimes]
part.program=1133604666
part.vps=1134732088
part.news=1134683532
part.setup=1133604672
[UpdateSummary]
UpdateStartTime=118796
SetupOld=739
PrgOld=739
VPSOld=348164
PartsWanted=0F000000
Server=download40.avast.com
IP=70.87.106.114
DldFiles=3
DldBytes=30
DldTime=1609
LastError=536870913
Thanks in advance for informations about the log file and the setup file. Best regards.
No I didn’t say that, we are only concerned with reboot.txt nothing else.
There shouldn’t be a reboot.txt unless you have just done a program update and after reboot, this file should be automatically removed. If it is anywhere it would be in that location and if so should be deleted. We are only looking for the existance of reboot.txt and if found deleted, ignore any other files, which are required.
Regardless of the contents of reboot.txt (empty or not), it shouldn’t be there and should be deleted.
Hi,
What I’ve done :
- disconnect from Internet
- Backup personal data
- deleting reboot.txt
- Removing Windows Restore system
- Shut down, and push button (because it continues refusing shutting down completely)
- Start computer
It appears now that I don’t have this message asking for Avast to reboot again. But, for the moment, I didn’t receive any update.
As my computer still refuse to shut down, I have searched google, and noted some solutions, telling to disable services. For example, I disabled nVidia Helper service. But, very strangely, This service return to “automatic and started” when I start my computer again. Seems to be something like a virus, trojan, etc. ? What do you think ? I’ve tried to disable other services, but they return started and automatic. I am sure that Windows system restore is disabled ! How can this be possible ? I also have now my DVD driver unrecognizable by Windows. I had uninstalled Pinnacle software, renamed a Pinnacle file used by the DVD driver. Uninstalled the driver. Installed it again. When I restart the computer, the DVD driver is one more time disabled, and I have a message from Pinnacle (this software being removed) asking me if I want to resolve DVD driver problem ??? Now, I can not install or remove completely any software. I suppose because my computer refuse to shut down properly. To remove a software, I have to uninstall it with its own program, then delete its folder, and finally use a registry cleaner. Thanks in advance for your help, if it seems to be caused by a virus. What I suppose because of these very strange symptoms.
Do you mean that it shuts down but the power does not turn off?
Do you see a Windows message that is safe to power off now?
Did you have in the past any other antivirus in this computer?
Did you manual delete any Legacy keys of Windows Registry?
It shuts down but the power does not turn off : YES
No Windows message indicates that it is safe to power off now, but I never had this message. I have a Windows box telling that it is saving parameters (or data), then a second Windows box telling Windows is closing. This box closes and after I just have a blank blue screen, and the HDD led do not show any light. I can wait 30 minutes like this but it still des not turn off.
I had Norton Systemworks before, but I use Avast since more than 1 year. From Norton I only have Goback software.
I did not manually delete any registry keys before that problem. Since this problem, I have used registry cleaner functions of “jv16 Power Tools”, “cCleaner” and “TonyArts EasyCleaner” to finish uninstalling Nero, Pinnacle Studio 9, and other softwares (like VSO utility) because my DVD recorder is not recognized and I had messages from theses softwares. My laptop (Acer 1705SMI) comes originally with NTI software which normally recognize the DVD recorder (Matsushita DVD-RAM UJ-811).
A computer of a friend of mine has this trouble… I did whatever you can imagine without success… 
Yes, this happens here too… but it’s the worst case. Generally, the first one happens.
Me too, no problems. In the affected computer he doesn’t have GoBack or Systemworks.
Nero, in fact, could bring problems with DVD but, did you install InCD? This could be the guilty here…
As you can see, I did not succeed solving the problem of my friend. I check BIOS, Windows updates, etc.
I’m following this thread to see if I have any light…
Thank you for the answer.
I did not have InCd installed…
The problem that remains is that any changes in the Windows services, i.e. disabling a service, is not taken in account when restarting the computer.
This time I have something new. I have done a full scan with a-squared and let it scan all the morning while I was going to work. The report of a-squared is that my PC is infected by Trojan-Dropper.Win32.Agent.acq in the FileZilla ftp client file setup I downloaded from the manufacturer web site ! BUT winlogon.exe is also said infected :
C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : Trojan.Win32.Agent.ha
C:\WINDOWS\system32\winlogon.exe : Trojan.Win32.Agent.ha
For the moment, I did not do anything because if I delete winlogon.exe maybe I will be unabled to boot Windows ???
So, why AVAST did not find it ? Is it new trojan that AVAST do not know about ?
Las update informations about AVAST :
Avast Home Edition :
Version : Dec2005 (4.6.739)
Xtreme Toolkit version 1.9.4.0
ActiveSkin version 4.2.7.3 en service
VPS File :
Compilation date : 12/19/2005
File Version : 0551-0
What can I do to repair this Trojan ?
Regards
To continue my question :
If I erase winlogon.exe and copy a new one from a sage computer, would it work ?
Me again, sorry :
Searching ofr winlogon.exe on my computer, I also found WINLOGON.EXE-32C57D49.pf in C:\Windows\Prefetch directory. .pf file extension is said (searching Google) from Aladdin Systems Private Files Encrypted File. Notice that I have a material key connected to my parallel port.
Sounds like it is time for some antispyware experts to get
involved and since you have Ad-Aware, I recommend the
forums at www.landzdown.com ; it is staffed by all the
volunteer experts you used to advise on the now-defunct
Lavasoft Ad-Aware Support forums .
You may want to consider, if possible, using Ewido since
it has a more powerful scanner than A-squared.
I have heard of 2 "winlogon.exe"s being on one’s machine
at the same time, one legitimate and one false; best to
let the experts sort out the 2.
Prefetch folder and files there belongs to Windows XP. It’s a way to accelerate programs lauching.
If you search Microsoft Knowledge Base you’re find more about this issue.
After going to www.landzdown.com and another forum, I found that other people who encountered the same problem ALL say that Trojans found in winlogon.exe by a-squared are false positive.
Suggested by another person, I have downloaded the trial ersion of TrojanHunter. I have scanned the whole hard disk and it found two Trojans that Avast did not find when I made a full scan including the archives. Notice that at the same moment that TrojanHunter scanned these files, AVAST alerted and I deleted the 2 Trojans. Details :
First Trojan : J1S7u8O.exe (Celine.100)
Second Trojan : Vzd.exe (HKP.100)
Another error was found : Error while unpacking C:\WINDOWS\system32\VB5FR.DLL: Access violation at address 03DADE62 in module ‘UnUpx.dll’. Read of address B486E008
Finally, what maybe the “most interesting thing” for this forum, TrojanHunter reported all these lines concerning AVAST :
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\Compatibilit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\EmailSauveFichierAttach.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\iHautBasPageImbriqu.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\InternetConnect.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\RegistreCr.eCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\RegistrePremi.reSousCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\RegistreSupprimeCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\SysIconis.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\TelAppelEstOccup.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\TelAppelEstTermin.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\TelCapacit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\TelNum.roAppel.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp100671477\ThreadPriorit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp103608047\Champ_indic.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp103608047\Champ_Libell.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp103608047\Etat_Imbriqu.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\Compatibilit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\EmailSauveFichierAttach.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\iHautBasPageImbriqu.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\InternetConnect.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\RegistreCr.eCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\RegistrePremi.reSousCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\RegistreSupprimeCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\SysIconis.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\TelAppelEstOccup.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\TelAppelEstTermin.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\TelCapacit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\TelNum.roAppel.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp111669403\ThreadPriorit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\ExeLanc.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\fTailleD.compact.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\grD.grad.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\grLibell.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HChangeCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HConstruitValCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HCr.eR.plicaAbonn.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HD.critCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HerreurInt.grit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HG.reInt.grit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HInitAbonn.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HListeCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\HS.curit.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\MemTrouv.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\MemValCl.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp118210287\MenuLibell.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp119738919\Barr.
Error: Directory not found: C:\Documents and Settings\Robert\Local Settings\Temp_avast4_\unp119738919\Cardinalit.
Etc, etc. All the lines are not showed here because it exceeds the maximum allowed length.
Well, I always considered Avast like the best antivirus software, and the most easy to use. I still think it ! But I would like to know more about this, if possible. Because as the subject of my first message, Avast began again since yesterday to ask me to reboot when it updates definitions files.
Maybe I have to try install it again…
Thanks.
There is an ocasional problem with rebooting, this is caused when the reboot text file is not properly deleted. About the found trojan it may be in an archive file and will not be detected until it tries to run or is unpacked by another (anti-trojan) programme
-
Whilst running another AV scan it is best to pause the standard shield or you can get what you did as trojan hunter opens a file to check it avast does the same and can cause a conflict. The unp files being reported in the avast4 folder is where avast unpacks files that it is being scanned, so now the trojan hunter will try to scan these files and you can now imagine the loop process that can occur.
-
Then do what was suggested before to clear the reboot issue and don’t forget there has been a program update very recently 4.6.744 so it may well be a legitimate request to reboot.
What is the about avast showing as your version number now?
Avast version was 4.6.739.
I just updated it manually a few minutes ago. Shut down when Avast asked and… turned the computer off after waiting a few minutes.
Version is now 4.6.744. VPS file version is 0551-2.
The file “reboot.txt” is still there. I deleted it manually.
And so? Are you ok now or the file reappears after booting?