Offline Files in XP pro crashes, sys freeze with Avast Pro 4.x

Avast Free Antivirus / Premium Security
21

Deady, do you have an idea what the file \windows\system32\drivers\acedrv05.sys belongs to??

22

Hi!

It was kind of problematic, but i was able to find out that the file is connected to the Firm Protect Software GmbH (http://www.protectcd.de/With_FL/html/index_de.html) and i think i had installed it with Sacred, since i have the File on 3 Computers and all 3 have Sacred installed at that time.

One of the other PC’s has Windows XP (normal 32bit) and avast is running all right. (The acedrv05.sys is also on that machine).

thx, for triing to find the reason!

bests, dready

23

Hello,

i have the same Problem of 3 Computer.

Excel freeze to save a Dokument.
The Document save the Excel Sheet to the Offline file and when to delete the temp Files hangs Excel.

http://forum.avast.com/index.php?topic=12819.0
http://forum.avast.com/index.php?topic=17603.0

Waht is wrong?

Thanks for Info

Logfile of HijackThis v1.99.1
Scan saved at 08:40:23, on 16.01.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\Programme\Intel\Wireless\Bin\WLKeeper.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_WatchDog.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
C:\Programme\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Programme\Power Translator 10\LogoMedia TranslateDotNet Server.exe
C:\Programme\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Intel\Wireless\Bin\OProtSvc.exe
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\UPHClean\uphclean.exe
C:\Programme\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnat.exe
C:\PROGRA~1\TOBITI~1\David\APPS\REPLICA\CODE\REPLICA.EXE
C:\PROGRA~1\TOBITI~1\David\CODE\SL.EXE
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
C:\Programme\Alwil Software\Avast4\ashWebSv.exe
C:\Programme\Citrix\ICA Client\ssonsvr.exe
C:\Programme\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.exe
C:\Programme\CheckPoint\SecuRemote\bin\SR_GUI.Exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\Launch Manager\LaunchAp.exe
C:\Programme\Launch Manager\HotkeyApp.exe
C:\Programme\Launch Manager\OSD.exe
C:\Programme\Launch Manager\OSDCtrl.exe
C:\Programme\Launch Manager\Wbutton.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe
C:\Programme\Intel\Wireless\Bin\EOUWiz.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\Norton Ghost\Agent\GhostTray.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Programme\CASIO\Photo Loader\Plauto.exe
C:\Programme\Citrix\ICA Client\pnagent.exe
C:\Programme\Microsoft Office 2000\Office\1031\OLFSNT40.EXE
C:\Programme\Microsoft Office 2000\Office\1031\msoffice.exe
C:\Programme\Tobit InfoCenter\DVWIN32.EXE
C:\PROGRA~1\TOBITI~1\DVREMIND.EXE
C:\Dokumente und Einstellungen\Andreas_Schwarz.GUENTHART\Desktop\HijackThis.exe

24

Dready, does it mean that if you uninstall “Sacred”, the problem disappears?

I.e. it’s a collision between avast and Sacred?

25

Hello,

what is scared ??

thank

26

Dammit… i thought i could avoid that :wink:

ok, i deinstalled sacred… it did not work since the sys File was still there (i hate copy protection which does not leave the system when uninstalling the game)…

Then i renamed the File so it was not able to work and rebooted. I tried avast and everythink worked fine. So your definetly right, it is that protection File.

Now the question is: Will i have to deinstall the game and the File to get Avast running or is there a way to upgrade avast for it? The problem: the game is like diablo, something you always play and which does not stop after playing it through…

bests, dready

@brown: http://sacred-game.com/

27

touch thread to top

28

Thanks. Just got back from the mountains.

I have sent an email to the makers of the copy protection software. Hopefully, we’ll be able to solve the conflict together asap.

Thanks for all your help,
Vlk

29

thanks!!

best regards, dready

30

Dready, could you please try one more thing?
Add the following mask to the scanning exceptions of the Standard Shield:

*\acedrv05.dll

Save the changes and reboot with the acedrv05.sys driver in place.
Would that make any difference?

Thanks for your help
Vlk

31

Hi!

Just tried that, but no difference.

  • I went to the settings => Exclusions
  • added the file
  • restarted
  • checked again if file is there (excluded)
  • went to manage=>services and activatet the avast service
  • went to start=>control panel => freeeze… as before

bests, thomas

32

And what if the Standard Shield provider is paused altogether?
Does that make any difference?

Or stopped?

Thanks :slight_smile:
Vlk

33

Hi!

Sorry for the late reply, i am in the middle of my marriage preperations…

No change when pausing the shield or all together…

bests,

34

Hi Dready,

already married? :wink:

BTW I think I found the cause of the problem, and created a work around (a patch).

To install it, simply download this file: http://cat.asw.cz/misc/acedrv-fix/aswMon2.sys and place it to the \Windows\System32\Drivers folder (replace existing version). Then restart the machine, and see if it has any effect.

Note this patched driver is for 64-bit Windows only (x64)!

Thanks, and greetings to your fiance
Vlk

35

Hi!

Yepp, now i am back from honeymoon and through all my emails… since i changed my name i had to move all my mails on gmail from one to another account and i had to work through all of them to get them sorted again ;-(

well now i have finally found this one, i will try the file today, hopefully everythink will work fine.

best regards, dready

36

ITS WORKING!!!

You are great! Many thanks!! And also many apologies for the long respond times…

Wow… it is just so cool that finally everything is working again…

thx, dready

37

Congratulations on your marriage, Dready! :smiley:

And congratulations on … "Wow… it is just so cool that finally everything is working again… " :slight_smile:

38

Thanx! ;D