Windows XP crashes with blue screen when running Avast AnitiVirus

Viruses and worms
1

Hi folks

I installed the latest version of the Avast! 4.8 and Ad-Aware. I have Windows XP Home Edition 2002 SP2. When I run Avast Antivirus, the windows crashes with “blue screen” and then restarted. If I rerun the Avast again, it gives me another blue screen with another message and code.

It happens in both Windows mode: Normal and Safe mode. The other thing is if I press the ESC key during the blue screen, the computer gets back to the windows, showing the Avast is working. But after a while, it gives me the blue screen again.

My system is:
eMachines T6534 - AMD Athlon 64 Processor 3700+
2.21 GHz - 1.5 GB of RAM

Could it be because I had both Avast and Ad-Aware?

Please let me know.

2

Welcome to the forums, amir.

Adaware should not be a problem.

What anti-virus program did your computer have before avast and did you remove it?

If you did remove another av program, how did you remove it?

3

What are the details of the BSOD, e.g. stop error number and any Title, etc. ?

4

Hi CharleyO

It was McAfee and I removed it before installing Avast. I removed it using Add/Remove Programs in the Control Panel. Now I only have Avast.

These “Blue Screens” happen when I generate a virus database (RVDB) as well.

Thanks
Amir

5

They seem to repeat, but I’m not sure about titles. The codes are 0x00000035, 0x0000000A, 0x0000001E, 0x0000007F, 0x00000100,… Sorry, those are the only codes I was able to write down.

6

Is this Title familiar NO_MORE_IRP_STACK_LOCATIONS as a search for the first number reveals this.

A google search for the first part, the stop: 0x00000035 number the numbers in ( brackets ) are used to further refine the search (look mainly for Microsoft links, this was the first of many for that stop error number, http://support.microsoft.com/kb/906866

7

first Mcafee does not remove completely with add-remove
conflicts cause many hard to diagnose problems

remove avast first reboot
then
http://service.mcafee.com/FAQDocument.aspx?id=107083&lc=1033

reboot

Antivir also has a remove/AVregcleaner on their website
http://dl.antivir.de/down/windows/registrycleaner_en.zip
which may find some additional Mcafee fragments
reboot

reinstall avast

check with DavidR on the above since he is helping you
I had this typed before his last post

8

I googled it. There is:

“On a computer that is running Microsoft Windows XP with Service Pack 2 or that is running Microsoft Windows Server 2003 with Service Pack 1, you install more than three programs that are related to file security. For example, you install more than three antivirus programs or file-encryption programs.”

As wyrminder commented, I’m going to completely remove the McAfee and then Install the Avast again. I guess it makes high degree of sence.

9

I did the process you mentioned as above. Now I am running the Avast, but I am getting a few BSOD again with some new codes: 0x00000050, 0x00000099,… When I googled them, they are not refered to Windows XP SP2. What does that mean?

Again when I pressed the ESC key, the system gets back to normal desktop: running of the Avast.

10

DavidR;

I did the process As wyrmrider mentioned. Now I am running the Avast, but I am getting a few BSOD again with some new codes: 0x00000050, 0x00000099,… Their title are Bogus_Driver. When I googled them, they are not refered to Windows XP SP2. What does that mean?

Again when I pressed the ESC key, the system gets back to normal desktop: running of the Avast.

11

Well I always start with my friend google and you searched on the stop error numbers, but did you also search on the bogus_driver, I did and there are many hits, http://www.google.co.uk/search?q=Bogus_Driver and it is possible this could be malware related.

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).
SUPERantispyware On-Demand only in free version.

Or
RogueRemover, available here http://www.malwarebytes.org/rogueremover.php, also from the same company, MalwareBytes Anti-Malware freeware version http://www.softpedia.com/get/Antivirus/Malwarebytes-Anti-Malware.shtml

12

Thanks David

I Installed and ran the SuperAntiSpyware. It found a few spywares that AdAware and Avast had not found even. My system works fine then.

13

glad you made some progress with SAS
They all find different things
there is NO one "fix all " answer and if there was it would be so big as to be not useful
you need to post up what you have in the various quarantines

If you have not run a “boot time” avast scan update, rt click the ball, and schedule
reboot
then run the MBAM mentioned above
post up the MBAM or Rogue Remover log if anything found
quarantine do not remove/delete
last step
also download Hijack This to your desktop run a scan only and post the log so we can be sure you are clean
(read the instructions)
DO not FIX anything

14

You’re welcome.

Onwards with the other steps, take them one at a time and report on progress in the topic so it isn’t to daunting.

15

Thanks wyrmrider

Where can I find Hijack? How and to where should I post its log file?

16

Here’s the link.

http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php

17

Program & Tutorial - Also useful as a diagnostic tool - FileHippo Download - HiJackThis and post the contents of the HJT log file here. - HJT Information HiJackThis Tutorial.

Once the log file is created, you have the choice of copying and pasting the contents of the log file into one or more posts in this topic or to attach the topic to a post, by clicking the reply button, Additional Options, Browse and navigate to where you have saved the log file on your HDD, usually in the HiJackThis folder and select the log file.