Shutdown kills Avast and also Second Copy

XP When I shutdown, Second Copy (a file backup program) should run. Its screen pops up VERY briefly, then its icon is removed from systray, as is the Avast Antivirus icon. The machine returns to a relatively normal Desktop. Except that if I click on the arrow at the left of the Sys Tray, it will open but then close back to the right immediately. This repeats a few times, then the tray will stay open, but Avast and Second Copy icons are gone.

If I then go through start, shutdown, etc, it will shut down ok, but I get no backup of my files. And I am having to shut down twice.

I ran OTL twice from my desktop. OTL.txt was created on Desktop both times, but extras.txt was not. I also ran a search on the entire C drive for extras.txt and none was found.

Ran aswMBR.exe, and got an error message. Did not finish, did not produce a log. I am attaching a screen shot of the error. Apparently something is locked.

the extra log is only created first time OTL is run…have you run it before?
anyway the extra log is not important and usually not needed :wink:

you may try running aswMBR from safe mode

continue with AdwCleaner and malwarebytes…

How long have second copy and Avast been working well together ? Have you updated either programme recently ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
IE - HKLM\..\SearchScopes\{cca2e567-1987-4100-a3c6-5b4267084510}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=YKxdm003YYus&ptb=F86FB343-BE96-463E-929F-7EE3C7FEFB2F&psa=&ind=2011011511&ptnrS=YKxdm003YYus&si=&st=sb&n=77dd99b7&searchfor={searchTerms}
IE - HKU\S-1-5-21-515967899-527237240-839522115-1003\..\SearchScopes\{BDBCEA99-60AB-40E1-8DBD-6871C687477D}: "URL" = http://www.goodsearch.com/Search.aspx?Keywords={searchTerms}
IE - HKU\S-1-5-21-515967899-527237240-839522115-1003\..\SearchScopes\{cca2e567-1987-4100-a3c6-5b4267084510}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=YKxdm003YYus&ptb=F86FB343-BE96-463E-929F-7EE3C7FEFB2F&psa=&ind=2011011511&ptnrS=YKxdm003YYus&si=&st=sb&n=77dd99b7&searchfor={searchTerms}
[2011/12/12 02:53:14 | 000,032,495 | ---- | M] () (No name found) -- C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qflv29vh.default\extensions\FantapperExtension@brandaffinity.net.xpi
O2 - BHO: (no name) - {8260C2B8-E0D1-448a-B062-33D12D468BF0} - No CLSID value found.
O2 - BHO: (Fantapper) - {8A86D350-37AB-410A-8531-7D1363F317B3} - C:\Program Files\Brand Affinity Technologies\Fantapper Player\\IEInstaller.dll ()
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {8260C2B8-E0D1-448a-B062-33D12D468BF0} - No CLSID value found.
[2011/10/28 14:34:58 | 000,730,192 | ---- | C] (How Inc.) -- C:\Program Files\Common Files\ZugoInstaller.exe


:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Sorry to be so long, we were away from the house most of yesterday and today.

I cannot get awsMBR to run to completion. It ends with an error message which I can send or not send to Microsoft. Tried it in Safe mode, same thing. However, if I choose to, I can tell it to save a log BEFORE clicking on Send or Not send. It then tells me it is going to save a log file. It DOES save a file, but it is a DAT file, and is not readable in a text reader.

I ran the fix you sent in a previous reply using OTL. I then rean Malwarebytes, adaware, and OTL again. The log files are attached.

I will also attache a screen shot of awsMBR when it goes into an error condition. There is one file highlighted as locked.

Also, I have had Second Copy for probably 10 years or more, and Avast for a couple at least. I don’t know when they started acting up. Mostly I accepted the fact that I had to shut down twice, and didn’t notice the quick popup of Second Copy. And I didn’t take time to check the log files. And I didn’t notice that avast icon was being removed from the tray. I was intent on getting the machine to shut down, and since it did, by the time I had time to look into it, I had forgotten the issue.

OK lets check the MBR another way

[*] Download RogueKiller and save it on your desktop.

NOTE: If using IE8 or better Smartscreen Filter will need to be disabled

[*]Quit all programs
[*] Start RogueKiller.exe.
[*] Wait until Prescan has finished …
[*] Click on Scan

https://dl.dropbox.com/u/73555776/RKScan.GIF

[]Wait for the end of the scan.
[
] The report has been created on the desktop.

Ran it, showed something found. Report attached.

OK it always finds that … I was more interested in the MBR which shows clear

My guess on it is that second copy closes all open processes prior to backing up the data, which may be why you are losing the Avast icon.

How is the computer behaving apart from that ?

Other than the shut down issue killing Avast and Second Copy, it seems ok. Takes a LONG time to boot though.

As for the thought that Second Copy is shutting down all services which leads to Avast stopping, I don’t think that’s what’s going on. I can run the backup profiles manually anytime, and it does not kill Avast or itself. It’s only when shutting down.

I will make a few more checks, like shutting off Second Copy, waiting a few minutes, and then shut the machine down to see if it has a problem of any kind. If all is well then, maybe I’ll uninstall Second Copy, clear it out from the registry, delete all files, and then reload it. I supposed it could be corrupted.

Thanks for the help. You helped me a few weeks ago when I was in North Carolina with a grandson’s laptop. Nice to have someone of your skill level helping out.

Let you know what happens when I shut off Second Copy and then shut down.

Aye if you could let me know please