KAV hangs on tracking.log Options

[jrhartley]

Hi

Unfortunately still having problems with KIS - trying to run a full scan and the scan hangs now on System Volume Information\tracking.log. I can't access this folder to delete or examine the contents (not accessible by Windows). I did a search of the forum before and I see a few other people seem to be having the problem of KAV hanging on tracking.log, but so far I didn't see whether anyone has a fix, or whether its a known bug in the software.

[Don Pelotas]

Please try to disable system restore(system volume information):

IMPORTANT NOTES:
You must be logged in as an Administrator to do this. If you are not logged in as an Administrator, the System Restore tab will not be displayed.
Turning off System Restore will clear out all previous restore points.

To turn off Windows XP System Restore:

NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.


1. Click Start.
2. Right-click the My Computer icon, and then click Properties.
3. Click the System Restore tab.
4. Check "Turn off System Restore"
5. Click Apply.
6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
7. Click OK, reboot and scan.

[jrhartley]

Thanks for the suggestion. I had already turned off System Restore on my machine before running the scan... so it's not that that's causing the problem. I had been getting some probs with the eraseme.exe before, I had thought I'd cleared them out, but maybe not. If anyone else has any good suggestions on how to get over this tracking.log stumbling block, would be keen to hear them. cheers!

[Lucian Bara]

Thanks for the suggestion.  I had already turned off System Restore on my machine before running the scan...  so it's not that that's causing the problem.  I had been getting some probs with the eraseme.exe before, I had thought I'd cleared them out, but maybe not.  If anyone else has any good suggestions on how to get over this tracking.log stumbling block, would be keen to hear them.  cheers!

Hello. Try unchecking the mailboxes in the scan->my computer

[jrhartley]

Thanks - I've tried that as well - Mailboxes is unchecked, system restore is off, but still it hangs at the same spot - tracking.log

[Don Pelotas]

Did you reboot after disabling SR? Please check that it really is disabled and then reboot.

If you have had an infection previously, then it may very well have messed with important files, so i would try this:

1. Try running the System File Checker (sfc.exe), this will scan all protected Windows files to verify their versions have not been overwritten or damaged, and if so will replace the compromised version with a fresh copy.

To run it, click Start/Run and type 'sfc.exe /scannow' (without the quotes but with the space between the 'e' and the '/').

Alternatively, you can click start/Run and type in CMD and click O.K., when the black window opens type in "sfc /scannow".

You will need to insert your Windows CD into the drive to enable sfc to effect the repair. Sfc.exe will just stop without any other sign than the statusbar is gone!

2. Do a scan in safemode.

[jrhartley]

Thanks. I definitely did reboot afterwards and XP tells me system restore is definitely off. I ran KAV in safe mode and it said everything was fine, its just when I try to run in normal mode that it hangs on this tracking.log file. I'll have a go with the sfc file and see how that works. thanks for your suggestions.

[Don Pelotas]

Thanks.  I definitely did reboot afterwards and XP tells me system restore is definitely off.  I ran KAV in safe mode and it said everything was fine, its just when I try to run in normal mode that it hangs on this tracking.log file.  I'll have a go with the sfc file and see how that works.  thanks for your suggestions.

Ok, if you stiill issue's after the sfc.exe scan (reboot after it's finished), then try to disable (turn off) the Kavlog.exe for a while.

[jrhartley]

Ok, if you stiill issue's after the sfc.exe scan (reboot after it's finished), then try to disable (turn off) the Kavlog.exe for a while.

Thanks. sorry to be dumb, but could you tell me what i need to do to turn off the kavlog.exe? cheers!

[Don Pelotas]

Thanks.  sorry to be dumb, but could you tell me what i need to do to turn off the kavlog.exe? cheers!

In the same utility you turned it on, same button, when not in use it says"Turn trace on" when in use it says "Turn trace off", when you turn it off you can press the "Send to KL (ftp)", then cancel in the next window where you would have entered your SFR #, when you do this you can delete the traces instead of sending them.

[jrhartley]

In the same utility you turned it on, same button, when not in use it says"Turn trace on" when in use it says "Turn trace off", when you turn it off you can press the "Send to KL (ftp)", then cancel in the next window where you would have entered your SFR #, when you do this you can delete the traces instead of sending them.

Hi - I'm a bit confused - I never turned anything on in KIS - I just ran it as is. Not sure what / where kavlog.exe is. The sfc.exe didn't come up with anything... its very bizarre.

[Don Pelotas]

Hi - I'm a bit confused - I never turned anything on in KIS - I just ran it as is. Not sure what / where kavlog.exe is.  The sfc.exe didn't come up with anything... its very bizarre.

Sfc.exe does not give you a verdict, it just replaces files if needed, i already posted that info.

You will need to insert your Windows CD into the drive to enable sfc to effect the repair. Sfc.exe will just stop without any other sign than the statusbar is gone!

About the Kavlog.exe, my mistake, i thought you were using this utility to send a log to support for analysis.

[jrhartley]

Sfc.exe does not give you a verdict, it just replaces files if needed, i already posted that info.

About the Kavlog.exe, my mistake, i thought you were using this utility to send a log to support for analysis.

OK - so I'm still getting the scanner hanging on the tracking.log file, i've tried all the suggestions so far. Do you think there's a virus or its just a case of my PC doesn't like KL products for some strange reason? Any final things left to try, or do I have to accept that KAV / KIS isn't going to work for me?

[Lucian Bara]

If you keep system restore disabled does it still hang?

[jrhartley]

If you keep system restore disabled does it still hang?

Yes. System restore has been switched off for a while now. What I've done is gone into safe mode, deleted the tracking.log file that it was sticking on before and am now waiting to see if the system will manage a full scan without getting stuck at tracking.log again. Fingers crossed. I'll let you know if it works.

[Lucian Bara]

If tracking.log isn't there it shouldn't hang there (since it doesn't exist)

[Don Pelotas]

It should work, but i have a question for you. Have you previously been hit with virus infections in the past?

[jrhartley]

If tracking.log isn't there it shouldn't hang there (since it doesn't exist)

Its strange. I deleted it in safe mode, yet when I restarted in normal mode, tracking.log had reappeared. And, annoyingly, KAV is hung on trying to scan the new version of tracking.log. As you can imagine, I'm starting to get a bit confused and fed up with this!

[Lucian Bara]

Its strange.  I deleted it in safe mode, yet when I restarted in normal mode, tracking.log had reappeared.  And, annoyingly, KAV is hung on trying to scan the new version of tracking.log.  As you can imagine, I'm starting to get a bit confused and fed up with this!

disable the system restore service compleatly then start->run services.msc look for system restore service and set it to disabled. now system restore shouldn't create that log because it's always stopped.

[jrhartley]

Well, just to let you know - i used the run services.msc method to disable sysetem restore (why do M$ offer you to shut down System Restore through the start menu if its not completely shut down????!!!!) and then I did a safe mode boot, deleted the whole System Volume Information (as opposed to just the tracking.log file that I had before) - KAV is still running, but it seems to have gotten further than it did before, so I'm hopeful that its past the roadblock from earlier. Thanks for your assistance, guys!