Hi,
I hope somebody can help me:
I’m not being able to finish scanning my computer with Avast 4.6 Home. I’ve tried several times today, and it seems only in the quick mode it was possible, not in the standard mode. There is some blue screen in the end:
the first time was just blue;
the second time it suggested (in case the same screen would appear again) to uninstall or deactivate antivirus utility, or defrag utility, or backup copy utility; also to check hard disk configuration, look for up-to-date drivers and run CHKDSK/F; also some technical information was added;
the third or forth time, there was some information on top, like IRQL_NOT_LESS_OR_EQUAL and suggestion to check for recently installed software, and also some technical information.
During the installation there was a warning of a virus which I could not get rid of: the entry in the log says
Sign of “Win32:SrchAssist-2 [Adw]” has been found in “C:\Documents and Settings\User\Definições Locais\Temp\TFR36.tmp\emoticons\Emoinstaller.Ice3.EmoPack.exe[PECompact]” file.
Apparently it should have been moved to quarantine, but I could not see it there, so I went directly to the file TFR36.tmp in the path above and scanned it. Whatever I tried (quarantine, exclude, rename), failed. Apparently Rename worked, at least something got to the corresponding folder of Avast, and then I could move it to quarentine, but every time I scan TFR36.tmp the virus is there!
Is it safe to just delete that file directly (assuming it will be possible)?
Then I noticed that I already had this warning about the same virus at the same location at the end of January. At the time, I thought I had remove it, but it seems it was not the case!
I don’t know if it is related, but today, sometimes when I restarted the computer (even in the fresh start in the morning) I got an error message from Avast:
“An error has occured while attempting to update.”
Apparently, there was no problem with the definitions update, but just one second before that entry, there was another one in the log, mentioning that
“Function SuperCopyFile() has failed. Return code is 00000020.”
Also I noticed, running msconfig, that I have, in the startup list the entry
" /WinStart
under the command
"" /WinStart
and the location
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Searching on the Net, I was a bit confused about this WinStart, but after some time found something which made sense: it seems it has something to do with Messenger Plus. I recalled then that in the other account of the computer (which is not administrative, contrary to the one where I was doing the scans) sometimes the MS Antispyware beta was complaining about Messenger Plus trying to install and I always denied it, but last time I did a scan with MS Antispyware there were no signs of Messenger Plus.
Is all this related, or there are some coincidences?
I’ve tried to uncheck this entry in the Startup list, but I still had the BSDO and the error on the Avast update. By the way, I noticed I have also this entry in another computer, and neither of this errors appeared there (but also Avast didn’t find any virus over there).
It is a fact that I hadn’t done an on-demand scan for some time (maybe one month), so maybe this problem of BSDO would already had appeared before. But at least the error on the Avast update only showed up today.
Unfortunately, I also made some other changes to my system yesterday, so it is difficult to know the influence:
- I cleaned some exclusions in my Windows XP firewall (but nothing related with Avast, at least explicitly, and I did something similar in another computer some days ago and the Avast update error doesn’t show up there);
- I installed a program (Geswall), but I have it also installed in a another computer and the Avast update error didn’t show up there, and the virus scan made there finished without problems.
Best regards,
acaetano.
