Avast Virus Chest False Positive/RPC Server Error.

Earlier this morning I moved all the false positives to the virus chest before I knew that they were not really viruses. When I start Windows normally, a blue screen flashes after reaching the desktop(it flashes too quickly to read), and the computer restarts over and over again. However, I am able to start it in all versions of safe mode without a problem. Since I started in safe mode, I have been trying to access the virus chest to restore the false positives, but every time I do I get the message “Program cannot use Chest client: (null)
—>Description: Virus chest server is not running. RPC communication failed.”

If there is anything that anyone can do to let me know how to fix this problem so that I can access the virus chest in order to get my computer running smoothly that would be great.

I am running a computer with Windows XP Home SP3.

Thanks to all who can help.

I just looked in the event viewer, and I’m having problems with the following drivers Aavmker4, aswSP, Fips, and intelppm. Once again, any help that anyone can offer would be amazing.

A blue screen… Hmm. Can you please send me the the latest file from the \windows\minidump folder? It should contain more info about the crash. (click the envelope icon below my picture to send it to me).

Unfortunately, it’s not possible to access the Chest from Safe Mode so we may try to make the normal mode accessible instead.

Thanks
Vlk

I had 6 files labeled with the false positive. I followed your (VLK’s) directions to scan and restore all 6 files. 4 were successfully restored.

The remaining 2 files are
C:\WINDOWS\system32\kernel32.dll (Original filename: kernel32.dll)

and

C:\WINDOWS\system32\wsock32.dll (Original filename: wsock32.dll)

These 2 files could not be restored. This is what happened when I tried:

The Resume messages after trying restoration on the 2 files are:

“Restoring of selected files Action was completed with errors!”

The Errors Reports messages after trying restoration on the 2 files are:

“FileID: 0000000001 Program cannot copy the following file: C:\WINDOWS\system32\kernel32.dll (Original filename: kernel32.dll ) —>Description: The process cannot access the file because it is being used by another process”

and

“FileID: 0000000003 Program cannot copy the following file: C:\WINDOWS\system32\wsock32.dll (Original filename: wsock32.dll )
—>Description: The process cannot access the file because it is being used by another process”

The Detailed information messages after trying restoration on the 2 files are:

“Restoring of selected files
Program will try to restore 1 selected file(s) from the Chest
Action was completed with errors!”

I then rescanned these 2 files and tried extracting them per your directions.

I browsed for the original location of the files and clicked when I found it (for both it is C:\Windows\system32). I get the message:

“You are trying to restore a file from the Chest. The file already exists. Should the program overwrite the existing file?” I clicked “Overwrite” and the same messages appear for Resume, Errors report and Detailed information as appeared when I attempted to restore the files.

I really do not know what to do at this point. Please advise and thanks for your help.

No need to restore these files.

You only need to care that are stored in the INFECTED category of the Virus chest.

The other categories serve other purposes (see the avast help file for details).

So, if the INFECTED category only contained 4 files, and you managed to restore all of them, I suppose you should be fine now. Can you confirm?

Thanks much
Vlk

Thanks for your prompt reply. All 6 files were “infected” in the Chest. As I said in my message, I can neither restore nor extract the last 2 files. Perhaps my message belonged in the thread “Can’t ‘restore’ or ‘extract’ these two new false positives from Chest”?

Thanks,
ravast

I’m not sure if this is clear, so I will expand:
I really do wish Alwil would get rid of this All Chest Files collation of the three sections:

  • The only area you should be interested in is the Infected Files section, this is where the files detected by avast and selected by you to move to the chest are placed.- The User Files section is where the user can add files they suspect of being malware but not detected by avast.- The System Files section is where avast keeps back-up copies of important system files in case the original becomes infected (leave them alone).- The All Chest Files is a collation of the three sections.

If you try to restore files from the System Files section of the chest then windows will stop you trying to replace running system files.

i was lucky, only had 28 infected files…all went to chest, only 4 were system files which went back with no problem, the rest, i just reinstalled the programs…all seems ok so far!!

Dear VLK,

 I am looking forward to a response from you, please.  Thanks!

ravast

I honestly don’t know what response you expect from Vlk, as my post said these are system files and windows is blocking your replacement of in use system files.

If these files were in the Infected Files section and not the System Files section, which I doubt and why I posted what is in the contents of the different sections.

I have checked your previous post and the File Id values of FileID: 0000000001 and FileID: 0000000003, tell me that these were in fact in the System Files section of the virus chest (as they match the File Id values of files in that section in my chest).

When avast is first installed it takes a copy of three important system files and these are the first files in the chest and would have File IDs of 1 - 3 as the first files in the whole chest.

David R.,

 I am sorry, I did not realize and could not understand from reading it, that your first post about the system files and infected nonsystem files was addressed to me.  Hence, the label "newbie".  I have read and reread your posts and those of VLK, and now understand this:  I scanned the system files, you are correct, they are not infected.  Therefore, leave them alone, they belong in the "Chest".  The other files were successfully restored, so everything is fine, oui?  Please confirm and thank you very, very much.

ravast

No problem, yes everything is now fine, glad I could help.

A belated welcome to the forums.

Dear David R.,

Yes, thanks for the welcome.  I have to say that on the whole, I have been very, very pleased with Avast.  As a "newbie", with little in depth understanding of computers, software, etc.,  I have used Avast for several years and have been able to receive real warnings about trojans, etc., which effectively kept my system clean.  Thank you and case closed!

ravast