Every Full scan freezes at 99%

Avast Free Antivirus / Premium Security
1

Hello,

Avast free antivirus has been my pc’s protection software for the last three years and since then I have been very contented. Congratulations for Avast’s hard work!

However, after the last program’s update (February 2,2016) as shown on screenshot ‘P1’, a problem arose:
Every time my pc runs a full scan (whole computer scan), the scan never finishes. The procedure goes on up to 99% and this is the very spot where it freezes forever. Furthermore, some full scans have already run and each of them froze on a different file. Each time I had to stop manually the procedure of scanning. I wonder: Is this my system’s problem or Avast’s bug? I think it is Avast’s , because:

  1. I have clicked on “scan history” (screenshot P2)
  2. I have found in the list the full scans that never ended and I have clicked on a specific scan (screenshot P3).
  3. I have seen the information and it says that the full scan has been completed properly and took only 2:05:32 (screenshot P3).
    However, on this specific scan I have kept the time manually and I am reporting the followings:
    a. The procedure froze on 99% after having gone on for 2:05:32.
    b. It reached 99%, and then I kept on waiting for at least 50 min in case of finishing properly.
    c. I have counted the whole time of scan running (till my manually stopping) and it was 2:55:00 approximately.

Therefore, I decided to send you the report above.

MY CREDITS:
my pc’ specs: OS: windows 7 home premium fully Microsoft updated.

2

follow instructions here https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total

see below the box you write in … Attachments and other options

a log/malware expert will then assist you when online

3

Thank you for your reply.

I will follow the instructions and i will reply as soon as possible.

4

I need to second this issue. In my case the full scan always stops at 10%. Not always the same file or even folder. But always at 10%. And always on the C: drive at this early stage.

This is version 11.1.2253 with virus version 160221-1. This is on Windows XP latest service pack. I have run Malware bytes and it scans completely. I have also run chkdsk /f /r on all of my disks without problem.

I am not sure how long this has been happening because I generally run scans in the evening and the machine is set to reboot at midnight (even if the scan isn’t complete) using a scheduled task. I only noted it today as I was running the scan during the day for a change.

I should also point out that the scans were run immediately after reboot with no other programs started - save firewall, etc. I tried to run the scan in safe mode (as I often do with MalwareBytes) but found Avast simply does not work there.

5

@whitedavidp2

I tried to run the scan in safe mode (as I often do with MalwareBytes) but found Avast simply does not work there.
Malwarebytes should not be run in SafeMode, it will run but is not designet for it as all drivers are not loaded Avast have boot scan so no need for it to run in SafeMode

Running is safe mode/bootscan is something you only do if you have problems removing a infection

If you need help, start your own topic

6

Thank you very much Pondus for your instruction - advice. Malwarebytes cleaned my pc and then, avast’s full scan ended properly!

7

I send you the requested files.

I have to tell you that:

1)Farbar tool created two files. I send them both.
2)Executing the aswMBR.exe in normal mode, it ended in blue screen, so I executed it properly in safe mode. Is that bad?
3)When aswMBR finished scanning, the button FixMBR enabled. Should I press it? (I didn’ t).

Thanks a lot.

8
2)Executing the aswMBR.exe in normal mode, it ended in blue screen, so I executed it properly in safe mode. Is that bad?
I did not ask for aswMBR log ;)
3)When aswMBR finished scanning, the button FixMBR enabled. Should I press it? (I didn' t).
[b]NO[/b] a log expert have to analyse the logs first

you seem to have a big PUP collection …

9

Let me know of any outstanding problems after this

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File BHO-x32: No Name -> {6c97a91e-4524-4019-86af-2aa2d567bf5c} -> No File Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File S1 BdfNdisf; \??\c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [X] S1 bdftdif; \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdftdif.sys [X] Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

10

I send you the requested files.

I would like to mention one thing. After pressing FRST64’s “fix”, the only thing that does not work as it worked before, is the “recent files”. Pressing right click on it, appears a list that does not include “delete recent files” as it did at past (screenshot1). It is not a problem, but i mention it in case it is something bad.

Thank you for the help!

11

Does Avast complete a scan now ?

12

Yes, Avast completes the full scan now. Everything works fine.

Thank all of you a lot for your help.

Certainly, Avast 's team is the best and Avast Antivirus is probably the most efficient antivirus!

:slight_smile:

13

Subject to no further problems :slight_smile:

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean :thumbsup:

A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:

Remove tools

Download and run Delfix
Select the options as shown

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article

I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)

If you do need to keep Java then download JavaRa
Run the programme and select Remove Java Runtime. Uninstall all versions of Java present
Once done then run it again and select Update Java runtime > Download and install Latest version

https://dl.dropboxusercontent.com/u/73555776/javara.JPG

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent install this programme to lock down and prevent crypto ransome ware

https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG

Malwarebytes

Update and run weekly to keep your system clean

Unchecky

Click on the link above to be taken to Unchecky.com
click the very large Download button.
click Save
Click Open folder
Right click on the Unchecky_setup and choose to Run as Administrator
Once open click the Install button.
Then click on Finish
Unchecky is now installed and will help you keep unwanted check boxes unchecked, this is a fire and forget programme :wink:

It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe :wave:

14

Very useful tools and suggestions, indeed…

Sorry for the delayed reply.

Thank you again for your help!

15

My pleasure :slight_smile: