You are not logged in.

Monday, September 1st 2014, 11:04pm

The Avira Forum will be moved to the new platform Avira Answers soon. We'll make the transition of existing user profiles and threads as smooth as possible.
New visitors are able to log in on Avira Answers with the existing Avira account directly or sign up with a new account.

  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

1

Thursday, April 21st 2011, 12:22am

exception unknown software exception (0x0000409) occurred in the application at location 0x0040f682

Avira hasn't finished a scan since4/14...I;ve no idea what changed that day . Didn't happen on my xp machine, only the Vista. Can you help? Please?

I followed the instructions I found on your forum page but could not attach the file: gmail said it wasn't allowed. BTW, when the "collector" was finished, there was a message asking me to permit "listproc64.exe target smss.exe" to open and run. I disallowed it since I didn't know what it was.................

If I take the .zip extension off the collector file will it be ok to send if you just rename it adding the zip ending?

No one responded so here I am creating a new thread with the same title as one from April 8. Please forgive.

Thank you, Saralou


-- http://forum.avira.com/wbb/index.php?form=Search&searchID=1336391&highlight=%22the+exception+unknown+software+exception+%280x0000409%29+occurred+in+the+application+at+location+0x0040f682%22


Friday, April 8th 2011, 7:41pm
Hi unagix,

Please download and run Avira Support Collector from here. Once the scan will be finished, write me a PM and I'll give you further information. Thank you.



""the exception unknown software exception (0x0000409) occurred in the application at location 0x0040f682""

Michael_Mann

Moderator

Date of registration:
Oct 24th 2005

Version:
Avira Ultimate Protection Suite
Avira Free Unix/Linux
Avira Android Security

Operating System:
AmigaOS 3.9, Ubuntu 13.10+ & Windows XP SP3, win7 HEdit. 64b (sp1)

  • Send private message

2

Thursday, April 21st 2011, 12:42am

Is there a program listed in the error report of windows?
Please post also here a HiJackthis-LOG of your windows vista PC.
Meine PCs: Amiga 1200 und WinUAE. Daf├╝r ist Virenfreiheit garantiert.
Links: Tipps & Tricks -- HiJackThis -- Video Anleitungen
I speak german and english only

  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

3

Thursday, April 21st 2011, 1:00am

I don't know about the "error report of windows" but below is a HiJackThis Thank you.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:57:54 PM, on 4/20/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19048)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\The Cleaner\tcap.exe
C:\Windows\MHotKey.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\AnVir Task Manager\AnVir.exe
C:\Users\SlMP\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\EASEUS\Todo Backup 2.0\bin\EuWatch.exe
C:\Windows\ChiFuncExt.exe
C:\Windows\CNYHKey.exe
C:\Program Files (x86)\Gateway Photo Frame\ButtonMonitor.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\SlMP\Downloads\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1006&m=sx2800
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1006&m=sx2800
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1006&m=sx2800
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&s=1&o=vp64&d=1006&m=sx2800
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - Disabled:{9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe"
O4 - HKLM\..\Run: [EaseUs Watch] "C:\Program Files (x86)\EASEUS\Todo Backup 2.0\bin\EuWatch.exe"
O4 - HKCU\..\Run: [AnVir Task Manager] "C:\Program Files (x86)\AnVir Task Manager\AnVir.exe" Minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = C:\Users\SlMP\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll
O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll
O20 - AppInit_DLLs: c:\progra~1\agnitum\outpost security suite free\wl_hook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Agnitum Client Security Service (acssrv) - Agnitum Ltd. - C:\PROGRA~1\Agnitum\Outpost Security Suite Free\acs.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: EASEUS Agent - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EASEUS\Todo Backup 2.0\bin\Agent.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: JetDrive WindowsClosingService - Unknown owner - C:\Windows\System32\WindowsClosingService (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (ncnetworksdm) (sprtsvc_ncnetworksdm) - SupportSoft, Inc. - C:\Program Files (x86)\NCNETWORKSDM\bin\sprtsvc.exe
O23 - Service: SupportSoft Repair Service (ncnetworksdm) (tgsrvc_ncnetworksdm) - SupportSoft, Inc. - C:\Program Files (x86)\NCNETWORKSDM\bin\tgsrvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8122 bytes

  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

4

Thursday, April 21st 2011, 3:03am

so what am I looking for here?

Farger

Moderator

Date of registration:
Jul 10th 2009

Version:
Avira Free Antivirus
Avira Ultimate Protection Suite
Avira Internet Security

Operating System:
Windows XP/ Windows 7

  • Send private message

5

Thursday, April 21st 2011, 8:35am

Hi RoseOtto,

If you recently installed Windows PowerShell 2.0 and WinRM 2.0 (KB968930), then uninstall it. Regarding the support collector, I've sent you the PM.

Source code

1
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present


Did you set it by yourself?
Scotty is currently on patrol


  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

6

Thursday, April 21st 2011, 4:15pm

BTW, I don't use Internet Explorer so maybe I did something a while back and don't remember. However, it wasn't on 4/13 or 14/11 when I became unable to run Avira without getting the error message.

Farger

Moderator

Date of registration:
Jul 10th 2009

Version:
Avira Free Antivirus
Avira Ultimate Protection Suite
Avira Internet Security

Operating System:
Windows XP/ Windows 7

  • Send private message

7

Thursday, April 21st 2011, 10:47pm

Hi,

Ok, did you uninstall KB968930?
Scotty is currently on patrol


  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

8

Friday, April 22nd 2011, 1:55am

No.

I didn't find it anywhere.

Well, it did show up in a search 3 in Belarc and 1 in EventLogSystem

This post has been edited 2 times, last edit by "RoseOtto" (Apr 22nd 2011, 1:57am)


  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

9

Friday, April 22nd 2011, 2:37am

Oop.... why didn't my search turn up anything.

Finally found something in the control panel when I was looking for updates .

I uninstalled KB968930 Windows Management Framework Core installed 2 24 2011

Restart?

marfabilis

Moderator

Date of registration:
May 14th 2010

Version:
Avira Free Antivirus
Avira Antivirus Suite
Avira Internet Security Suite
Avira Internet Security

Operating System:
System of a Down

  • Send private message

10

Friday, April 22nd 2011, 2:44am

Hi RoseOtto,

Yes. Restart and tell us the result :)

Marco
| :: RU | EN | PT-BR | ZH-CN | ZH-TW ::

  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

11

Friday, April 22nd 2011, 4:50am

Restart was normal so I ran a scan. Breezed right thru' in it's normal hour run.

Appears to be fixed. Thank you all very much.

Anyone able/willing to tell me what went wrong and how to avoid it in the future?

Should I reinstall KB968930? Perhaps as a Microsoft site suggested, the file had been corrupted upon download?

It's sitting out there begging me to install it.

marfabilis

Moderator

Date of registration:
May 14th 2010

Version:
Avira Free Antivirus
Avira Antivirus Suite
Avira Internet Security Suite
Avira Internet Security

Operating System:
System of a Down

  • Send private message

12

Friday, April 22nd 2011, 6:46am

Apparently, this is a conflict between Avira and this Windows update that was reported in early March. This issue is still under investigation.
No, you should not install this update again until this conflict is solved. Fortunately, this update is not critical, but optional.

When we have more information about it, we'll keep you posted.
Anyway, you should not have that kind of problem in future scans (keeping KB968930 uninstalled).

Have a Happy Easter!

Marco
| :: RU | EN | PT-BR | ZH-CN | ZH-TW ::

  • "RoseOtto" started this thread

Date of registration:
Apr 20th 2011

Operating System:
Windows

  • Send private message

13

Friday, April 22nd 2011, 2:22pm

Thank you and thank you.

Peaceful passover to you. ^^