Bug found in v4.6.763

We are many persons to face the same pb with the latest version of Avast: an error permanently occur when launching some programs, forcing the user to terminate the program.
The error occurs on Windows XP-SP2 French version (at least, but may affect other languages).

The error message is:

“Le processeur NTVDM a rencontre une instruction non autorisée
CS:0000 IP:000b OP:f08b0170000
choisissez Fermer pour mettre fin à l’application”

which can be translated as: “The NTVDM processor has found an unauthorized instruction xxxx clic on Close to terminate the program”.

On my PC, this bug prevents the installation of several programs, such as the Epson driver for the Stylus Photo 890 printer, or the i-Timtel Flash communication software.

As soon as Avast is unsinstalled, the installation become possible.

The problem had already been reported with an older version of Avast in this topic:
http://www.infos-du-net.com/forum/39353-6-bug-processeur-ntvdm

I am going to try to install an older version of Avast using an uptodate license key.

We are waiting a patch from Avast: it is the 1st pb I face along many years of use…

ntvdm.exe is process that belongs to the Windows 16-bit Virtual Machine. It provides an environment for a 16-bit process to execute on a 32-bit platform.

As a workaround you can disable scanning of 16 bit applications in config.nt

Just add the word REM before the line that refers to avast in this file (C:\WINDOWS\system32\config.nt).

But, can you post the contents of these Windows Registry keys?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\VirtualDeviceDrivers\VDD

About aswMonVd.dll and s32evnt1.dll in registry keys, see this very old thread about me:
How to NOT solve the problem: http://forum.avast.com/index.php?topic=259.msg3478#msg3478
How to SOLVE it: http://forum.avast.com/index.php?topic=738.msg3628#msg3628

I was introducing my 1st post here in avast! forums with the same problem:
http://forum.avast.com/index.php?topic=707.msg3417#msg3417

ntvdm.exe is process that belongs to the Windows 16-bit Virtual Machine. It provides an environment for a 16-bit process to execute on a 32-bit platform.

As a workaround you can disable scanning of 16 bit applications in config.nt

I confirm that the pb occurs only with 16bits based applications : the other programs can be started normally.

Just add the word REM before the line that refers to avast in this file (C:\WINDOWS\system32\config.nt).

OK, I note the tip, but as I have reinstalled an older version…

But, can you post the contents of these Windows Registry keys?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\VirtualDeviceDrivers\VDD
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Control\VirtualDeviceDrivers\VDD

As I said, I have uninstalled the last version and reinstalled an older one, so I believe that the contents of this registry keys are not relevant for the pb ? please if you need them anyway.

I cannot re-install the latest version right now, but I will try this weekend (if I am not too busy) and I will test your tips to let you know if they solve the pb.
Usually I can participate to this kind of tests very easily, but I have many things to do on my PC at the time.

The good news, is that you seem to be perfectly aware of this issue : but as the previous versions did not face it, why the latest one causes this pb ?

Thanks to all !

That keys are directly related to 16bits applications scanning, so… if I don’t know what’s there, I can’t help.
Besides this, I think going back to the older version won’t be the best solution, just a workaround…

I’m not sure only the last version brought problems… Maybe you’ve changed anything meanwhile in your computer…

So the problems appears also with an older Avast version (4.1)… Consequently, I have reinstalled the latest version and here are the Registry Keys you asked for:

http://elodiephoto.free.fr/public/avast_registry.jpg

there is no key with “controlset002” or “controlset004”, and there is NO file: c:\windows\system32\config.nt is it the good name ?

The current version is trying to update to a newer version through the web, but does to manage to download the “servers.def” file:

Err:Cannot connect to download44.avast.com (unknown:80) so I will try tomorrow.

Let me know if you need any other information.
Tks

No trouble.

It should have, this could be the problem!!!

The contents are a lot of lines of comments starting by the word REM and then

REM dos=high, umb device=%SystemRoot%\system32\himem.sys files=40 device=C:\Util\ANTIVI~1\Avast\aswmonds.sys

It should be there…

OK, after a reboot, the “config.nt” file has been located, and I have added “REM” before the line referring to Avast.

I am now going to test if this solves the pb on the program that refused to be launched a few hours ago.

I keep you informed.

Tks

Magic : since “REM” has been added to the line referring to Avast in the “config;nt” file, there is NO more pb .

The 16-bits based programs can been launched normally.

Thank you very for the tip,

Nounours


Welcome to the forums, Nounours18200. :slight_smile:

I am sure everyone is happy that your problem is solved.

Please come back often, learn more, and maybe help others. :slight_smile:


No, sorry, I did this mistake four years ago… this is how I discovered avast forums :wink:

Removing REM is [b]how to NOT solve the problem: http://forum.avast.com/index.php?topic=259.msg3478#msg3478[/b]

How to SOLVE it: http://forum.avast.com/index.php?topic=738.msg3628#msg3628

I was introducing my 1st post here in avast! forums with the same problem:
http://forum.avast.com/index.php?topic=707.msg3417#msg3417