Avast scans forever.. or rather, it doesnt

Avast Free Antivirus / Premium Security
1

Hi there.

Specs:

Win7 64bit
Avast InternetSecurity
Version: 8.0.1489
DB: 130804-0
No other anti-virus software used
Quick scan works fine

Problem:
I start a full scan… it starts normally, scanning some files, and then it stops at C:\Windows\System32\SearchIndexer.exe
I will just scan that file forever. It doenst freeze, it doesnt use any CPU%, I can pause and unpause, Time is running, Speed is shrinking, everything else stays the same.

So… I thought… exclude that file, oh doesnt work… I can only exclude folders (thats really crappy, how can I exclude a single file?), so I excluded C:\Windows\System32

Startet the full scan… and now it stops right at the start at c:\Windows\System32\lsm.exe
Didnt I exclude that folder? Very strange. Well, now… timer keeps counting up, speed is 0.0B/second, scanned files/folders is at 10/1, scanned files is at 0,0B and infected files is at 0.

Nothing more happening. It doenst freeze, it doesnt use any CPU%, I can pause and unpause.

Whats wrong? What can I do?

2

Take a look at a new post of mine. I do a Custom scan, and, recently, Avast has been going on for over 40 min. doing nothing!

3

Your problem seems to be completely unrelated… aside from the same symptom :stuck_out_tongue:

I’d like some suggestions from the avast staff… been waiting some days now. FYI avast staff: My IS license is due for renewal in 12 days. You helping me might influence my decision to buy 1 or 2 more years :wink:

4

What happens if you remove the exclusions you made then go to Control Panel/Indexing Options click on the advanced tab then click delete and rebuild index, now retry the scan and report back if you could please.

5

Thanks for your answer.

Sadly I cant find a “control panel”. I only have a lot of “settings”, but I couldnt find any indexing options/tab.

6

From the start menu ( Windows orb ) in the right hand column click on Control Panel, if you only see categories then up in the top right click the view by tab and select large icons, now you should be able to see indexing options

7

Oh… in Windows >.< Searched within avast…

Okay… indexing was completely turned off. I looked for the service, turned it on and indexing is now beeing build…

I will test in aprox 9 hours, after work :stuck_out_tongue:

8

Ok keep us informed, my indexing is also turned off but that is only because I have an SSD.

9

yeah… now it stops at SVC: WUDFRd > C:\Windows\system32\DRIVERS\WUDFRd.sys -.-

additonally I noticed this: After I start a full scan with avast, that stops for ever at a file, and I stop the scan because… no point in running it forever… I cant shut down my pc afterwards. It stops for ever, too… at “shutting down”.

10

Strange :-\ you might want to run the first four tools listed in the sticky at the top of the Viruses and Worms section http://forum.avast.com/index.php?topic=53253.0 and attach the logs created back here for one of the Malware guys to look over and see if there is something not right.

11

and so i did…

AdwCleaner[S2] because the first one crashed, didnt write anything…

12

I’ve reported it to essexboy so hopefully he might get a chance to look at the logs soon.

13

Thanks… find it quite… strange that so many people download these logs in that short time…

14

Hi, there are two suspect dll’s running but I cannot see the trigger so I will need to run a second programme after the initial fix

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

:Files
C:\Users\Nurph\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Nurph\AppData\Local\Temp\sfareca00001.dll

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

15

And so I did…

I can see no change in running my pc, aside from my firefox personas gone.
Should I try the avast full scan again yet?

EDIT: :-/ Startet a full scan, new file, same problem! hangs at: SVC: ws2iffsl > C:\Windows\system32\drivers\ws2ifsl.sys

16

Be patient Nurph, essexboy should be back on in several hours.

17

What are the sensitivity scans set at for the full scan

18

I tried with High and Normal.
“Use code emulation” is checked, nothing else.

19

This sounds like a glitch within the Avast programme. First thing would be to try a repair of Avast

Go to Control Panel > Programmes and Features
Select Avast
On the left will be the option Repair Avast
Select that and reboot on completion
Then retry the scan

20

now it holds at SVC: wudfsvc > C:\Windows\system32\svchost.exe

edit: oh yeah… I did repair avast before ofc… I do as I am told