AnotherConcernedCitizen

Good news/bad news... I can repro either condition in a matter of minutes, but in the 2nd scenario, there is no response to ANY user input. Sorry.

I have reported 2 conditions: - The 1st (initial report) is the one this dump applies to. Machine is active, cursor sill moves. but machine is otherwise unresponsive & must be power cycled to recover. - The 2nd, where Avast is either completely disabled, or uninstalled, results in the hard lock-up where the entire machine freezes. Desktop/mouse/kbd are completely frozen audio is sometimes stuck in a short loop. '3-finger salute' is useless. Only recourse is a power cycle. Are you saying the RCTL-SCRLK-SCRLK would still work? I could try, but I have serious doubts.

This was the condition where AvastSVC resource consumption increased until network died & desktop no longer responded (no available resources). The HARD lock-up, assuming I understood the instructions, would require me to use the CTL-SCRLK-SCRLK sequence to initiate the dump & that lock-up no longer responds to ANY mouse/kbd input. Let me know.

Easy peasy. ~2.5GB too big for wetransfer.com (Oooops!). Currently (& slowly) uploading to gdrive. Will email you the invite when available.

IMO, this time it isn't a conflict with any AV. If anything, the AV SEEMS to slow down (mitigate?) the lock-up temporarily.

No updates/fixes that I'm aware of. Not much chatter from others experiencing this, so devs MIGHT appreciate additional input?

Re-install Avast?

I'm seeing the following in the event log (application), but timestamps indicate it's on reboot following the lock-up: Faulting application name: wmiprvse.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d42 Faulting module name: CoreAgnt.dll_unloaded, version: 0.0.0.0, time stamp: 0x59f38017 Exception code: 0xc0000005 Fault offset: 0x000007fef6698098 Faulting process id: 0x928 Faulting application start time: 0x01d490acb66d5e3c Faulting application path: C:\Windows\system32\wbem\wmiprvse.exe Faulting module path: CoreAgnt.dll Report Id: c3a29ef3-fca0-11e8-9f86-e06995ddf04f Google says Intel NIC driver-related: https://www.google.com/search?q=CoreAgnt.dll&ie=utf-8&oe=utf-8&client=firefox-b but it could just be having trouble accessing a resource corrupted by a lock-up. A user-initiated reboot gives a clean log. Unsure if this has any bearing...

Had just performed an MBAM repair & kicked off similar activity... and was never able to complete this response before it locked-up again. Running when the lock-up happened: 5 - WMC recordings, 1 - LiveTV several open Firefox browser tab including a radio stream This is roughly the same 'stress' test I ran yesterday before restarting the MBAM service (w/ Avast enabled) for several hours. This morning, before uninstalling Avast I had: several active recordings, while I was watching one a VBox VM running w/ active VPN & ~heavy downloads an active handbrake encode other stuff & experienced no issues. I'm DEFINITELY NOT overtaxing the HW when the lock-ups happen & the same load that's OK without web protection active, locks-up within minutes after re-enabling it. What now?

Just had the HARD lock-up. Gdrive invite for log sent. Web protection disabled again. Generated same ~HEAVY I tested while MBAM was disabled & encountered NO lock-ups over the course of several hours.

I've just uninstalled Avast via their 'avastclean.exe' utility, so it ought to be entirely gone. MBAM is fully active.

Sincerely not trying to be difficult, but how long would I need to run without Avast to yield useful data?

I COULD. Just trying to imagine how to test. Lock-up SEEMS to involve the AvastSVC & I've only seen a couple of ~similar reports without Avast installed. If nothing untoward happens w/out Avast installed, then what?

I'm @ Version 3.6.1.2711 Component Package 1.0.508 Update package 1.0.8235

As noted earlier, with Process Explorer active, I've observed the onset of the condition. AvastSVC suddenly jumps from ~1% CPU usage to 25%. If I leave things alone, the % creeps up until the network finally dies & the system locks up. Stop the MBAM SVC & the condition immediately clears.

1. Does the mouse freeze as well? Depends on the scenario. - The initial lock-ups (both apps full ON), explorer.exe gradually became unresponsive... couldn't launch new apps, access Start Menu, etc. but mouse was still active. - When I disabled all Avast 'shields', the lock-up was HARD. No mouse/kbd. Screen froze. Audio was either a buzz, or 1-2 sec. of recorded TV audio looping. 2. Does the screen turn black? Never. 3. If you let the system sit for awhile, does it unfreeze? Never.

AVG, perhaps? Avast bought them & by now, I suspect their code-bases may have a lot in common.

Sorry. Had to keep 'the disruptive child' in time-out long enough to determine there were no other stability issues. Did I mention my continued health & well-being are contingent on this system's health & well-being? MBAM back in play, sans Web Protection ... with Process Explorer active just in case.

No specific mention of issues on the Avast forum, but the original announcement said "... The microfix is provided by the Avast Emergency Updater which is run automatically from task scheduler every 12 hours and a few minutes after system boot. " Considering the number of reboots I've had since this MBAM update, had there been anything outstanding...

Before I ever reported the issue. After the 1st hard lock-up, I repaired my NIC drivers, updated my Video drivers, ran 'sfc /scannow' & 'chkdsk /f'. THEN it locked-up the 2nd time. Overkill, but I was concerned about all of the dis-orderly shutdowns having a detrimental effect.

It's the individual drivers. Don't want exclude THAT entire folder. Some sort of file multi-select would be nice. At least MBAM remembers the last folder accessed... I've given up on this experiment. With all Avast 'shields' disabled, I got 2 instant back-2-back HARD lock-ups. No slow creep. No mouse/kbd. Weird buzzing sound. Only a power cycled recovered the machine. Collected logs for support, if they want them, but I'm back to Avast only/MBAM disabled. At least the machine is stable.

Having determined a fairly reliable means of reproduction, I'm trying a few things for the weekend. Added all recommended exclusions to both apps (they both need work for adding individual files). With all protections enabled on both, with a single active WMC recording, AvastSVC eventually jumps from ~1% to 25% CPU & eventually climbs until the network dies/system hangs. Restarting MBAMSvc instantly resolves the condition. Stopping the AvastSVC never really completes (self-protection?) & condition persists. Disabled all Avast 'shields' & so far, no issues. Will incrementally re-enable Avast 'shields', one by one, to see where thjngs fall down.

Thanks, that was already my chosen approach for the weekend. Just didn't want to waste time.

Just curious about this...is it enough to disable all 'shields'? Or, would you prefer the service be disabled entirely?

Scenario: MBAM - ALL protection active Avast Premiere - ALL 'shields' active, 'Real Site' component disabled User watching video from NAS WMC recording several shows via network tuner Active browse session monitoring forum Noticed Process Explorer tray icon RED AvastSVC.exe consuming ~75% CPU & increasing Waited for network to 'fail'... WMC recordings stop Took FULL 'Process Explorer' dumps for 'AvastSVC' (0MB?) & 'MBAMService' Stopped MBAM Service before system could freeze Generated new support tool dump G-drive invite for dump access sent Please advise when you get 'em & on how I ought to proceed.