Error in Observateur Evenement

Avast Free Antivirus / Premium Security
1

Hello!
Excuse me but I speak english very very badly!
At each start windows XP SP2 this error
Error in aswChestS: chestAddSystemFiles Error 3.
in “journal” Antivirus
Why ?

Congratulations
Georges

2

Welcome to the forums, PapyNet ! :slight_smile:

No problem with what you wrote above.
I can not help you but someone will in a short time, I think ! :slight_smile:

3

That seems to mean that avast could not ‘backup’ some (in fact three) system files into Chest.
Did that come in a pop-up window? Or you saw that into ‘Windows Events’ (or even into avast Log viewer)?

4

Hello!
Windows Events

and to each boot or reboot

Congratulations
Georges

5

In log :
15/09/2004 21:34:52 1095276892 AUTORITE NT\SYSTEM 1160 Error in aswChestS: chestOpenListLoc Error 3.
15/09/2004 21:34:53 1095276893 AUTORITE NT\SYSTEM 1160 Error in aswChestS: chestAddSystemFiles Error 3.
15/09/2004 22:41:28 1095280888 AUTORITE NT\SYSTEM 1068 Error in aswChestS: chestOpenListLoc Error 3.
15/09/2004 22:41:28 1095280888 AUTORITE NT\SYSTEM 1068 Error in aswChestS: chestAddSystemFiles Error 3.
15/09/2004 22:50:16 1095281416 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestOpenListLoc Error 3.
15/09/2004 22:50:16 1095281416 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestAddSystemFiles Error 3.
16/09/2004 06:41:49 1095309709 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestOpenListLoc Error 3.
16/09/2004 06:41:49 1095309709 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestAddSystemFiles Error 3.
17/09/2004 08:11:29 1095401489 AUTORITE NT\SYSTEM 1076 Error in aswChestS: chestOpenListLoc Error 3.
17/09/2004 08:11:29 1095401489 AUTORITE NT\SYSTEM 1076 Error in aswChestS: chestAddSystemFiles Error 3.
17/09/2004 10:14:51 1095408891 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestOpenListLoc Error 3.
17/09/2004 10:14:51 1095408891 AUTORITE NT\SYSTEM 1072 Error in aswChestS: chestAddSystemFiles Error 3.
17/09/2004 13:00:18 1095418818 AUTORITE NT\SYSTEM 1096 Error in aswChestS: chestOpenListLoc Error 3.
17/09/2004 13:00:18 1095418818 AUTORITE NT\SYSTEM 1096 Error in aswChestS: chestAddSystemFiles Error 3.

6

Dans area “quarantaine” :
Kernel32 Winsock wsock32 .dll

Georges

7

Does the file C:\Program Files\ALWIL Software\Avast4\DATA\chest\index.xml exist ?
And the folder %TEMP%_avast4_ ? (%TEMP% is an environment variable, you can see its value in Control Panel->System->Advanced->Environment variables)

8

Hello!
xlm exist to data\chest :

<?xml version="1.0" encoding="UTF-8" ?>
  • 00000001 0

All Temp are deleted at boot in windows open

What program or service “post” this event ?

Bien cordialement
Georges

9

This is generated during start of “avast! Antivirus” service.
You use some utility that deletes the temporary folder contents ?

10

hello!
in .bat with :
rd /S /Q k:\Windows\Temp
md k:\Windows\Temp\

rd /S /Q k:"Documents and Settings"\Georges.ATHOME"Local settings"\Temp
md k:"Documents and Settings"\Georges.ATHOME"Local settings"\Temp

I have tested without rd : same

It’s possible to start avast in menu start ?
Yes? like ?

Merci d’avance
Bien cordialement
Georges

11

Hello!

I re-installed Avast and the problem it’s the same

Idea ?

Congratulations
Georges

12

Did you remove Avast with the uninstall utillity before reinstalling?
If not, give it a try.
http://www.avast.com/eng/download/programs/avast_uninstall_util.html

  • Remove Avast with that util.

  • Reboot

  • Install Avast
    If you have XP Pro make sure you are logged in as ADMINISTRATOR
    (not as user with admin rights, but as true administrator)
    If you have XP Home, make sure you are logged in as user of the admin group.

  • Reboot

  • Again login as ADMINISTRATOR

  • Check if Avast is working.

  • Let us know if this is of any help.

13

Hello!

XP Pro SP2!
always this 2 messages to each boot :

24/09/2004 07:23:28 AUTORITE NT\SYSTEM 1084 Error in aswChestS: chestOpenListLoc Error 3.
24/09/2004 07:23:28 AUTORITE NT\SYSTEM 1084 Error in aswChestS: chestAddSystemFiles Error 3.

xlm :

<?xml version="1.0" encoding="UTF-8"?> 00000005 1105200 00000001 1091573670 kernel32.dll K:\WINDOWS\system32 System 1095744052 1048576 00000002 1051210800 winsock.dll K:\WINDOWS\system32 System 1095744053 2864 00000003 1091573688 wsock32.dll K:\WINDOWS\system32 System 1095744053 25088 00000004 1061204110 pspv.exe K:\DOCUME~1\GEORGE~1.ATH\LOCALS~1\Temp\AAWTMP\C43268096 Win32:Trojan-gen. {UPX!} Vir yes 1095962428 28672

Bien cordialement
Georges

14

PapyNet,

I used to have this same problem. For my case, on top of that problem that you’ve described, the auto-update function also failed, although manual update works perfectly.

I found out, through pure luck, that the cause of my problem is because my “system environment variables” for ‘TEMP’ & ‘TMP’ are pointing to an invalid directory.

I used to have a RAMDISK pointing to Z:, and thus, I defined the following “system variables”:

TEMP = Z:
TMP = Z:\

And with that, I installed Avast, and Avast was working fine for a long time, until I decided to remove my RAMDISK, and forget to re-define these 2 variables to point to a new temp-directory. As a result, Avast started to exhibit those behaviours that I described above. After I re-defined the 2 variables to point to a proper and valid directory (e.g. C:\temp), and rebooted my PC, Avast immediately reverted back to it’s normal mode and did everything correctly. I’m a happy man now. :slight_smile:

Here’s how you can check whether your environment variables are correctly defined:

  1. Do a mouse-right-click on ‘My Computer’ icon, and select ‘Properties’.
  2. A ‘System Properties’ window will pop-up.
  3. Click on ‘Advanced’ tab.
  4. At the bottom of the window, click on ‘Environment Variables’ button.
  5. Another window will pop-up, displaying 2 sections – User vs System
  6. Check both sections for the variables 'TEMP and ‘TMP’.
  7. Change them to point to a valid directory.
  8. Reboot PC.
  9. See if Avast is working fine now.

Hope this helps.

Cheers,
Phi.

15

Hello!
In French :
J’ai placé le service “avast! Antivirus” sur Manuel.
Dans Démarrer Programmes Démarrage j’ai mis un raccourci vers une .bat qui fait Net Start “avast! Antivirus”
et les erreurs ne sont plus dans le journal des événéments

In English with traduction :
I placed the service “avast! Antivirus” on Manual. In To Start up Program Start I put a short cut towards .bat that does :
Net Start “avast! Antivirus”
and the errors are not anymore in the newspaper of the événéments