Mouse lost and computer freeze after latest update 4.6.731

Hello, ::slight_smile:

I am really struggling here. After the last update 4.6.731 I am having real big problems. I do hope you can help. ???

I run Windows 98 SE
Zone Alarm
248RAM
8768MB free disk space

I have not had any problems with AVAST HOME EDITION 4.6 until this latest update 4.6.731. I first installed Avast in January 2005

When I click on program update all goes OK, download window, installation window until the summary window comes up and my mouse with egg timer disappear and my computer freezes. I tried a repair of Avast. This didn’t work. I have un-installed and re-installed Avast home edition and the problem still exists. What it means is that I cannot update my antivirus without losing mouse and the computer freezing. I have to turn the computer off from the tower. Ctrl/ Alt delete does not work.

I have not installed anything else on my computer for months. I have been running Zone Alarm free edition for 5 years.

If there is any other info you need so that I can be helped with this problem please let me know.

Awaiting your help

Thanks

Surfseek

I suggest you download the avast program again (not the update program function) and also the Avast Uninstall Utility, find it here.

Uninstall avast! (current version) using windows add remove, boot, run the avast uninstall utility, boot. Your system should be ok now assuming it was avast related (which I think may be a coincidence), install the latest download and boot.

Let us know how you get on.

:-[

Hi David R,

Thanks for your reply. I have done everything you suggested. :cry:

Unfortunately the problem with the mouse disappearing at exactly the same point (summary window) and 'puter freezing has not been resolved with the completely new installation.

I am pretty sure it is linked to the 4.6.731 update/version of Avast home Edition.

Where do I go, or what do I try from here please? ???

Thank You

Surfseek

Will it be possible to test uninstalling ZoneAlarm, booting, repairing avast! installation, install ZoneAlarm again and boot?
If you look at the providers settings, which is the last scanned file by Standard Shield?

If you look at the providers settings, which is the last scanned file by Standard Shield?

Hi there,

I will try un-ininstalling Zone Alarm.

Prior to this:

The last file scanned file in Standard Shield before logging in to this forum and before uninstallation of Zone Alarm was: C:Windows.…spool32.exe.

After logging in C:Windows.…script (1).js

I will uninstall ZA now and repair Avast per your instructions.

Thanks for keeping up to the mark with me regarding this situ!!

Back in a while

Surfseek

Hi there,

So far I have un-installed Zone Alarm (free),. Checked Avast at this point and it worked fine.

I then repaired Avast and was preparing to re-install Zone Alarm.

Prior to this I thought I would run their spyware scanner first as per their instructions!

These were the results:

CasinoOnNet - Adware

RegistryKey - HKEY_CURRENT_USER\Software\casinoonnet\

RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Casino On Net\

VX2.BetterInternet - Browser Plugin, Adware

File Name - C:\WINDOWS\bi.ini

Tribalfusion - 3rd Party Cookie

URL - Cookie:alison kelly@tribalfusion.com/

Win32.Mydoom.I-Worm - Worm

RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE

As you can imagine I went into a panic when I saw My Doom. Avast didn’t pick it up, so I am at the moment running Panda Active Scan to double check!!!

I am rigorous about protecting my computer so I would be surprised if it is there but we shall see when Panda scan finished. I totally trust Avast but I want to be sure.

If this is an underhand way of Zone Alarm trying to get us to purchase the Firewall then I am not too happy as you can imagine.

Whilst this waiting is going on, and in the most likely event that Zone alarm is conflicting with version 4.6.731 what other free personal firewall is good and compatible with Avast. if we cannot resolve it.

Panda’s scan has now finished, and like Avast says I am clean!!.

I will try re-installing Zone Alarm now and be back soon with results

Surfseek

You could delete (remove) them.

The Registry Key is very strange. You won’t have ANYTHING installed if you remove the tree. Are you sure?

Well, if you did not have avast! pretty installed… it should fail. Besides, firewall is as necessary as the antivirus.

There is not a conflic… They’re running perfectly in XP SP2+

Win32.Mydoom.I-Worm - Worm
RegistryKey -
[/color]
The Registry Key is very strange. You won’t have ANYTHING installed if you remove the tree. Are you sure?

I copied and pasted the results into my post and the above is what came up.

I will delete what I can re the other entries but this one is very strange. As you say I cannot delete the whole HKEY_LOCAL_MACHINE\SOFTWARE.

the last scanned file with Resident scanner this time is C:\Windows.…spellcheck(1)j.s

The bad news though is that I have double checked updating Avast before re-installing Zone Alarm and exactly the same problem happens. This is without Zone Alarm installed!

When this happens I cannot access anything as computer freezes, mouse disappears which means I also cannot access info on files in Standard Shield!!

I have rebooted again after freeze and tested again. Just before another freeze(prior to summary window) I checked the last scanned file by Standard Shield and it was C:Program Files.…Avast.setup\

HELP

Surfseek

 Here is what I would do.   Install ZA Free, Check Settings, Check Prog Control. Check Logs for New Entries. Install the Last Working Version of AVAST.  Also Install Ad-Aware. Spy Bot S&D, Ewido & see what You Find.  Good Luck

Don’t delete anything manually or you won’t be able to use any software in your computer… you can’t even boot in some cases!
You should Google for specific cleaners of MyDoom.

You shoul get cleaned before trying to do anything else. Does avast! scanning detect anything? Can you run avast! at boot time (schedule it)?

avast.setup is the update of avast. It’s ok but has nothing to do with the computer freeze.

Hi Bill,

I have checked and double checked for any viruses and apart from the zone alarm spyware scanner(info above) none of the antivirus solutions I have used have picked My Doom Up. I even used the Avast detection tool for My Doom but it says I haven’t got it. So I must be clean. Panda says I’m clean too. Avast Antivirus picked up W32: CTX after the panda scan but I know this is one of Panda Software files that Avast picks up.

I have Adaware installed and also SpyBot.

What is EWIDO?

Please forgive me, but I don’t quite understand the instructions you gave me re program settings etc in Zone Alarm.

Don't delete anything manually or you won't be able to use any software in your computer... you can't even boot in some cases! You should Google for specific cleaners of MyDoom.

I have used two cleaners for My Doom. Panda Tool and Avast Tool. Both say I haven’t got it!!!

avast.setup is the update of avast. It’s ok but has nothing to do with the computer freeze.

Well that is good news about avast, however my problem still remains!!! Mouse loss and freeze.

:cry: :-\ Is there anything else I can try?

Thanking you again in anticipation

Surfseek

http://www.ewido.net/
A very good trojan detector and cleaner (free).

Hi, :cry:

I checked this out but doesn’t seem to be available for W98SE. Only for W2000 or XP.

I do know of another tool which I haven’t run yet. http://www.windowsecurity.com/trojanscan/

I will do that now.

Trojan Scan came up clean.

I did a further Zone Alarm Spyware scan and it was more detailed this time. Turns out the My Doom reference was for Panda quick Remove. I have successfully removed all the logs except:

VX2.BetterInternet - Browser Plugin, Adware

File Name - C:\WINDOWS\bi.ini

I removed the bi.ini file from find files or folders but it is still registering.

Anyhow, this is not really your problem but I am just trying to eliminate other problems.

Would still welcome any further possible solutions to the problem of mouse loss and freeze. Especially if I am clear of dirty stuff! :frowning:

Thanks

Surfseek

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR HiJackThis Log file - On-line Analysis 2

OR - Post your hijackthis-Log contents here.

Have you tried reinstalling your mouse driver just to confirm that is fine.

;D

Hello there :smiley:

I think I may have possibly found the solution to my problem of mouse disappearing and computer freezing when updating Avast, since version 4.6.731.

I think it is to do with Zone Alarm. I would like to mention however that my Zone alarm settings have not caused any conflict until this latest Avast update.

Having checked my computer endlessly for viruses,Trojans etc and all being clear I thought I would try changing settings in Zone Alarm. I disabled Basic Mail Safe setting and un-ticked Protect Zone Lab Client. I read somewhere in other posts,certainly about Mailsafe and thought I would at least give it a try. Well, something seems to be working for the moment as all seems to be up and running WELL. As I speak I am going to try again…Dum De Dum De Dum :-\

…De Dum. WHOOPEE ;D. I think all is now well.

I am a bit confused though because I got this freezing etc. when I un-installed Zone Alarm. Maybe it might be to do with getting rid of some of the entries that came up in spyware checker from Zone Alarm. All except

VX2.BetterInternet - Browser Plugin, Adware
File Name - C:\WINDOWS\bi.ini

I can’t seem to get rid of this one.

I will keep you posted because it is still being a bit erratic.

Hey there David, just got your last post. I will keep this very valuable info in reserve if it plays up again. I have to be honest I have tried to use HJT in the past and got very confused.Bit nervous about that. Also, How do I reinstall my mouse driver on Windows 98. I have a logitech mouse.

surfseek

Schedule a boot-time scanning: Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives. Boot.

Other way is scanning in SafeMode (repeatedly press F8 while booting): http://support.microsoft.com/default.aspx?scid=kb;en-us;315222

Other good thing is disable System Restore, boot, enable it again. If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k.

[b]''Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR HiJackThis Log file - On-line Analysis 2

OR - Post your hijackthis-Log contents here…

Have you tried reinstalling your mouse driver just to confirm that is fine.[/b]

Well here goes.Bit the bullet and did the HJT. Winzip does confuse me because I never know where to find the file which has been unzipped!! ::slight_smile:

Logfile of HijackThis v1.99.1
Scan saved at 23:46:40, on 14/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\MOUSE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\HIJACKTHIS_199[1]\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c99&lc=0809&s=search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c99&lc=0809&s=search
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.presario.net/scripts/redirectors/presario/srchredir.dll?c=2c99&s=search&query=%s&i=enu
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:12080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM..\Run: [SystemTray] systray.exe
O4 - HKLM..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
O4 - HKLM..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
O4 - HKLM..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM..\Run: [EM_EXEC] C:\MOUSE\SYSTEM\EM_EXEC.EXE
O4 - HKLM..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
O4 - HKLM..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.wanadoo.co.uk/
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab30149.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {17D72920-7A15-11D4-921E-0080C8DA7A5E} (AimSp32 Class) - http://makeover.ivillage.co.uk/save/makeover.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37390.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab

.Haven’t done the mouse bit yet.

Thanks as ever. Any views on above?

surfseek

Hi there,

Thanks again for info.

I am running Windows 98. I don’t have a system restore facility. I tried to schedule a boot scan as you suggested but it is greyed out and that option is not available to me. I will do a scan in safe mode and see what that does.

In the meantime, any suggestions as to how I reinstall mouse driver?

Thanks

Surfseek

Yeah, it’s only available in Windows Xp or 2000.

It will be good.

Can’t you download from the manufacturer website?