Full Scan gets stuck

[swannie]

Hi all,

Anyone have this problem? Last night on the programmed Full Scan it seemed to get stuck at 10% on Browser Scanner 98%. I left it for 2-3 hours and it didn't move so I tried to cancel the scan. It said stopping but although it said scan 100% until I did a reboot it wouldn't stop. I'll try it again today and see what happens.

[Support]

Swannie,

If the scan freezes, it is possible that the file or location it is scanning is in use. Try to close all other programs before running the scan to ensure that nothing interferes with the scanning process.

[swannie]

Well I don't think anything was in use but I am very suspicious of a screensaver which may have been running. I have got rid of it and will try the scan again today and report back.

[vecchio]

HI
All runing well here regards this
I dont have this problen

[swannie]

Well, don't know whether Full Scan will finish but on second time of trying to close it down I had a problem. It gets stuck on Closing 100%. Then I have to reboot to get rid of it and when I reboot half of my Bookmarks in Firefox disappear. This has happened twice now so it can't be a coincidence.

[AChen]

Hi Swannie,

Do you have any other security apps running? OS?

Could you run a scan in safemode and see if the scan freezes?

[swannie]

Hi Anthony,

No other security apps running apart from TF. OS XP/SP2 fully updated. Will try scan in safe mode later and get back to you.

[swannie]

Hi,

Further to my post - I didn't try a scan in safe mode but I did a clean re-install yesterday. I can't Shut Down PCTIS (like Reodor.) I get Error 258. I just uninstalled, cleaned out everything and last night, with no screensaver running, the Full Scan completed in 2.38.53 hours. Now I'm waiting to see how it goes and will let you know as I had a few problems with Internet connection getting stuck, too.

[AChen]

Hi,

Further to my post - I didn't try a scan in safe mode but I did a clean re-install yesterday. I can't Shut Down PCTIS (like Reodor.) I get Error 258. I just uninstalled, cleaned out everything and last night, with no screensaver running, the Full Scan completed in 2.38.53 hours. Now I'm waiting to see how it goes and will let you know as I had a few problems with Internet connection getting stuck, too.

I'll pass the info on to the developers regarding the Error 258 issue when shutting down PCTIS, it would be really good if you could get a screenshot of the error if it does return. Good to see that the scan has completed. But I'll keep an eye on this thread to see if the problem returns :)

[Mike McDonald]

The browser scanner always freezes at 65%, and I have to reboot the system (XP Pro). The other components of the custom scan finish normally. I've tried shutting down all nonessential active tasks and running in Safe Mode, but the problem remains.

[mjq424]

Hi
Is there anything in particular that it freezes on? Can you provide a screenshot?

[Mike McDonald]

Thanks for the reply. There doesn't seem to be much to go on:

Browser scanner 1% done
Inspecting browser items (65%)
Total progress 1%
Items processed 0
No threats detected so far

[mjq424]

Hi
Is it possible to get a screenshot? Or is your PC too frozen at that point?
What, if any, browser add-ons/toolbars to you have in Internet Explorer/Firefox/etc?

[Mike McDonald]

Sorry, I don't know how to take a screenshot. Could you explain?

The add-ons listed in my Firefox Tools menu are FlashGot/FlashGet, DOM Inspector, TalkBack, and VideoDownloader. I also have AdBlock and Macromedia Flash, and a ZoneAlarm Spy Blocker toolbar. In IE, I have a lot of add-ons for some reason, though I rarely use IE: Diagnose connection problems, FlashGet, Windows Messenger, FGCatchUrl, FlashGet GetFlash Class, ZoneAlarm Spy Blocker (with BHO), Adobe PDF, PDF Conversion Toolbar Helper, PDF Reader Link Helper, SSVHelper Class, and Sun Java Console.

The firewall is Zone Alarm free edition. I've tried running SW Doctor with the firewall off, but it doesn't help. I have several other antivirus and spyware programs installed, including AVG free edition, AVG Anti-Spyware, AdAware SE, SpyBot, Stinger, SpywareBlaster, Registry Booster, WinPatrol, and HiJackThis.

[mjq424]

Hi
Please see this post for posting a screenshot:
http://www.pctools.com/forum/showpost.php?p=174025&postcount=2

To be honest with you, you have a vast number of add-ons/extensions in both browsers. This is the probable cause for the scan "freezing". How long have you left Spyware Doctor scanning?It could be that the scan does continue if you let it.
For the time being, please post a HijackThis log for me to have a look at.

[Mike McDonald]

Thanks again. I will read about taking a screenshot. Till then, here is my HiJackThis log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:17:31 AM, on 1/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\WINDOWS\system32\RUNDLL32.EXE
E:\WINDOWS\system32\rundll32.exe
E:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\WinPatrol\winpatrol.exe
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\System32\svchost.exe
C:\PROGRAM FILES\ADOBE\ACROBAT 7.0\DISTILLR\ACROTRAY.EXE
E:\WINDOWS\soundman.exe
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
E:\WINDOWS\system32\conime.exe
E:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\System32\svchost.exe
C:\Program Files\FlashGet\flashget.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Documents and Settings\Mike McDonald\Desktop\Antivirus stuff\HiJackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - E:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - E:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\WinPatrol\winpatrol.exe
O4 - HKLM\..\RunServicesOnce: [washindex] C:\Program Files\Washer\washidx.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: クライアントマネージャ３.lnk = E:\Program Files\BUFFALO\Client Manager3\cm3_tray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Adobe PDF への変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: JWordでウェブ検索(&J) - res://E:\WINDOWS\DOWNLO~1\CnsMin.dll/203
O8 - Extra context menu item: リンクの参照先を Adobe PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: リンクの参照先を既存の PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 既存の PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 選択したリンクを Adobe PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: 選択したリンクを既存の PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: 選択項目を Adobe PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 選択項目を既存の PDF に変換 - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1181460767171
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - E:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Bwsvc - BUFFALO INC. - E:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - E:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 8374 bytes

[Mike McDonald]

I have attached a screenshot of the point where SW Doctor freezes. I have tried leaving it running for more than 30 minutes, but it remains stuck at the same point.

[mjq424]

Hi
At the time you performed the HijackThis scan, neither AVG Antivirus or Spyware Doctor were running.
Unless you are on a business network where your administrator has set restrictions on Internet Explorer (or you have set them yourself with Spybot Search&Destroy) you can safely fix the following items in HijackThis:
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
At the moment, I am not sure why the browser scanner is freezing, however, I do see that you use a chinese/japanese language. Therefore, it is possible that Spyware Doctor cannot read the symbols in the files and that is causing it to crash.

[Mike McDonald]

Hi

Thanks for your help. Yes, you're right - I use Japanese and English. I'm not sure if that's causing the problem, though - I've used the browser scanner successfully in the past. Anyway, I'll fix the two things you mention.

[advin]

may be your hdd is not defregmanted. so defragmant your hdd in safe mode... then try again to scan.....