Last week I updated to version 8 and then the trouble started. Upon completion of installation, Avast is activated and all shields are up. After next boot Avast is deactivated and when I attempt to start it, the machine locks up. I’ve un-installed and re-installed several times and tried the “clean” installation technique described elsewhere on this forum but all have the same result - Avast is deactivated after a boot-up. Some other curiosities: upon installation, the Avast splash page says I have 30 days to register but after a reboot the numbers of days is 0. Sometimes when I attempt to start Avast after it has been deactivated, I get a “Service Shutdown” error message that goes on to say that a program is attempting to shut it down and do I want to allow that to happen (“no” results in a computer lock-up). When I attempt to individually activate the shields, I get a message “Unable to start shield; shield unreachable.” Another thing I noticed is that when I attempt to register, I get the error “AAVM subsystem detected a RPC error.” The last thing I’ll mention is that I ran Malwarebytes and aswMBR and saved the logs to my desktop but now that I try to find them after a reboot, they are not visible unless in safe mode even though the hidden file attribute is clear.
After struggling with this for 4 days and after running Malwarebytes, Superantispyware, Advanced System Optimizer System Protector (all in safe mode) and an Avast bootscan (before a deactivating reboot), I figure I need some professional help. Logs attached. Suggestions appreciated.
try avast removal tool again in safemode for v7 and v8 & reboot and instal 8 again. Did you have any other antivirus on before avast? on the original install of Win XP?. Now reading your log files.
I see traces of norton in the logs.
Nortons symantecs have removal tools run these before using avast software
Thanks for the suggestions. Norton had once been loaded on the machine but had been removed through a removal tool about 3 years ago when I switched to Avast. No other AV is loaded. I tried Avast removal in safe mode and then another re-insallation with the same result of Avast deactivation. Previous versions of Avast have performed admirably.
:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3 - HKU\S-1-5-21-2090760695-1161300292-829235722-21029\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
@Alternate Data Stream - 85 bytes -> C:\Documents and Settings\All Users\Desktop:$ES_DESCRIPTOR_XVPUV9PK0VFJFPL9PL1U69NHT5PR4DXTAFLPF5V1PJCEBYHGS9LJVVVVVVVVVVVVV
@Alternate Data Stream - 85 bytes -> C:\Documents and Settings\All Users\Application Data\Spectrum LLC:$ES_DESCRIPTOR_XVPUV9PK0VFJFPL9PL1U69NHT5PR4DXTAFLPF5V1PJCEBYHGS9LJVVVVVVVVVVVVV
:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
:OTL
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\EMBASSY Trust Suite Secure Update.lnk = C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe (Wave Systems Corp.)
O20 - AppInit_DLLs: (wxvault.dll) - C:\WINDOWS\System32\wxvault.dll ()
[2006/10/08 21:33:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Wave Systems Corp
:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Ran 2nd fix & got an error msg upon reboot: docmgr.exe failed to start, could not find wxvault.dll. BUT - Avast V8 is up & running! OTL logs attached.
So, it was an interference problem caused by Embassy Trust Suite. That stuff came pre-packaged on my Dell and I’ve been wanted to remove it for years but removal seemed to cause problems on other folk’s machines so I endured it.
Do I need to fix anything with the docmgr.exe program?
I’m relieved to know that my problem was software incompatibility rather than malware interference! A thousand thanks for your help!
One last thing: I seem to be unable to uninstall the Embassy stuff - I get an error when I try to remove it through the control panel process. Attached is the error screenshot.
Is my understanding correct in that your fix disabled the Embassy software? Is so, can I just delete the files & folders outside of a un-install process?