I just got this message when trying to shutdown my PC… When I went to Computer Management, I found one error with EVENT ID: 7000 described as OMSCAN SERVICE FAILED. The message in the event viewer was:
The OMSCAN service failed to start due to the following error:
The system cannot find the file specified.
Among the other things it mentions antivirus software, so I though if it’s maybe something connected to avast! it may be interested for Alwil guys for some further checking…
A general note about this event - potentially any service may cause this to be recorded so there could be 1000s of variants. Missing or corrupted files, insufficient rights, missing registry entries, [b]antivirus software[/b], faulty hardware, software bugs and probably many other reasons may cause a service to fail in the starting process.
This is the screen I’ve got on shutdown (it happened just once):
Is it possible that no one has anything to say about this ? I even found some German page where people are mentioning similar problem, and many of them are pointing to some antivirus leftovers or something like that. This is freshly installed system with avast! Pro and ZoneAlarm, no additional security programs. No other antivirus was previously installed ever…
EDIT: Actually, event from event viewer (OMSCAN service failed to start) happens on each login to Windows. It doesn’t give any error message, but when I take a look in Event Viewer, I see that error appears after entering Windows.
Well, it’s hard to say anything about it… might have many reasons.
If the service cannot start because it expects a file to be somewhere it is not (which the error message would imply, but it doesn’t really have to be this), you may try to run File Monitor, then start the service (manually) and check the File Monitor output for failures. There’s a slight chance you may find something…
Thanks Igor for your respond… the problem is it doesn’t say which service gives that error and there is no way to find out, except using the method you just mentioned…
Btw, which File MOnitor are you refering to ? Is there any special little program that can be downloaded from the net or something else ?
EDIT: Also, I mean, is this error common thing, or should I be worried about it… I’m asking because there is absolutely nothing wrong I can see, except when I go to event viewer and check those events… it’s just I hate when I have something like that and I don’t even know what’s that all about…
OK, thanks Igor, I’ll give it a shot… I’ll post back if I find something interesting… btw, I know service is called OMSCAN (whatever it is), but when I checked on internet, thay said, that problem could be caused by million other things… that’s why I was completely confused. It doesn’t say what file is missing or where from… ???
I just set File Monitor auto loads on startup, but the problem is… when he starts to scan, error is already gone, so it misses to check that process… it started to scan at 10:15:38, and when I take a look under event viewer, it shows me that error occured at 10:15:30 (8 seconds earlier that File Monitor even started to scan)… see screenshot…
Yes, I completely understand what you are saying Igor, but what service to start ? What is OMSCAN service really, and where could it be found. What to start really ? I’ve never heard of that service before, I’m not ashamed to say that, especially, 'cause many haven’t heard of that service untill now…
The ImagePath looks quite strange (\Sys) - I guess that’s what cannot be found.
Personally, I would simply delete the OMSCAN keys; you may export them to a .reg file for backup first.
It sure helped… no more error messages in event viewer, but I’m still little concerned, what is that service really doing and how come out of nowhere, error in registry…
